{"resultsPerPage":6476,"startIndex":0,"totalResults":6476,"format":"NVD_CVE","version":"2.0","timestamp":"2025-10-22T01:15:30.693","vulnerabilities":[{"cve":{"id":"CVE-1999-0001","sourceIdentifier":"cve@mitre.org","published":"1999-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets."},{"lang":"es","value":"ip_input.c en implementaciones de TCP/IP derivadas de BSD permiten a atacantes remotos causar una denegación de servicio (cuelgue o caída) mediante paquetes artesanales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"950CE88E-E396-4D32-AC9D-B76EB2B537C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"44EFD22E-02C9-4B80-8934-A9AC8DD858CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1B4D4A5-25EB-48FE-BDFD-A274CE802648"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3A037F1-98AD-47CC-8D83-B42666E1B61E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"63236405-1F33-43DD-ACF7-B6D9656E0987"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF4F7002-A525-4A66-BE8B-E50ABBF144B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"http://www.openbsd.org/errata23.html#tcpfix","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5707","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata23.html#tcpfix","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0002","sourceIdentifier":"cve@mitre.org","published":"1998-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F5E922C-239D-4F98-87ED-BB7998BE99C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A5C77FA7-C977-4223-B6AC-91B82C45129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5302613E-F0DD-4B46-884C-49A977FD4147"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"674066BB-2576-4AAE-B97F-A4470815F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"445EECD3-2DB9-43D1-B26F-0979A3C02D45"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981006-01-I","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-006.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/121","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981006-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-006.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0003","sourceIdentifier":"cve@mitre.org","published":"1998-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tritreal:ted_cde:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7E202DA5-C921-44E5-9581-26746AF580CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.02:*:*:*:*:*:*:*","matchCriteriaId":"880DDA5D-0B8E-42E7-A346-5F594DC05332"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.03:*:*:*:*:*:*:*","matchCriteriaId":"CC7983C3-4F53-4A80-AAFC-EFF75B7D7BD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981101-01-A","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981101-01-PX","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/122","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981101-01-A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981101-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0004","sourceIdentifier":"cve@mitre.org","published":"1997-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook."},{"lang":"es","value":"Desbordamiento de buffer en clientes de correo, como Solaris mailtool y Outlook"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:dtmail:*:*:*:*:*:*:*:*","matchCriteriaId":"C5AE373B-03E5-4F85-A316-18F68DF79331"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.02:*:*:*:*:*:*:*","matchCriteriaId":"4473251D-4DB0-43E5-90C6-32FEB8B5A4A2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0005","sourceIdentifier":"cve@mitre.org","published":"1998-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary command execution via IMAP buffer overflow in authenticate command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:3.55:*:*:*:*:*:*:*","matchCriteriaId":"26CE0F92-0E43-454D-B996-428FD8A72E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:10.234:*:*:*:*:*:*:*","matchCriteriaId":"8BBB1912-BA9F-4856-A5AA-136B06E7A083"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/177","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/130","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0006","sourceIdentifier":"cve@mitre.org","published":"1998-07-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:2.4:*:*:*:*:*:*:*","matchCriteriaId":"66652CF8-971D-4DF6-9BD5-A736BD54F9DF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980801-01-I","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/133","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980801-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0007","sourceIdentifier":"cve@mitre.org","published":"1998-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information from SSL-encrypted sessions via PKCS #1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:c2net:stonghold_web_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90FA74D1-FF25-44C0-B86C-FBE74A0206CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:c2net:stonghold_web_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7E7F153A-5396-4C3C-995B-570D13DB6B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:c2net:stonghold_web_server:2.3:*:*:*:*:*:*:*","matchCriteriaId":"BBDFAE58-F8CC-453F-A006-532212B21F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:open_market_secure_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CA2E007E-898A-4EC7-9040-A02DABA3A5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_server:1.0:patch1:*:*:*:*:*:*","matchCriteriaId":"72E930EF-CCEC-44EA-AA45-18644EFDA5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:collabra_server:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B49C090C-979F-44F2-BAAC-71E11611BDF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:1.3:patch5:*:*:*:*:*:*","matchCriteriaId":"1CD1E4C9-BFF1-4818-A1B8-ECD7B54C8B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:3.1:patch1:*:*:*:*:*:*","matchCriteriaId":"492922BE-3B31-486C-94B5-114089E51E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"70E0FF18-9B01-4500-9599-8F085655C388"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9E5E0298-99D9-476D-A7DF-36C6207482DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D94D2CA3-9868-4F27-B31D-D3EDC256BE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4147A43C-DA7B-4D08-90E9-72DE57B1D61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:3.01b:*:*:*:*:*:*:*","matchCriteriaId":"55193435-0136-422D-A936-B1FEEC328A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:3.54:*:*:*:*:*:*:*","matchCriteriaId":"11AA27C0-D579-49E6-8479-D5DFFAC96D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:proxy_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E47FCF41-3D06-493B-AD7B-626F4C279944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"64568219-B33C-4507-9E04-536E7B11D2F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"29C56055-3DB2-4A23-8301-6F6AB4BA38AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.9:*:*:*:*:*:*:*","matchCriteriaId":"76F1B179-25A4-4A72-9E42-43DA61CA1475"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0008","sourceIdentifier":"cve@mitre.org","published":"1998-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NIS+, in Sun's rpc.nisd program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*","matchCriteriaId":"CFD50216-90AC-480E-A11C-E88E64C6D84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/170","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0009","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:5.4_3.0:*:*:*:*:*:*:*","matchCriteriaId":"2EDB1993-75C9-4738-BDB3-E4433AC202FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:5.4_3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB15FBD9-B4F8-42EF-92C2-8D70A2385E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:5.4_4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA109D17-268F-4E8A-BBA9-0EAA6B46A705"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:5.4_4.11:*:*:*:*:*:*:*","matchCriteriaId":"59EFCFC1-A15C-4B8D-BCCE-DB401A50D23C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:*","matchCriteriaId":"BB79EDA4-9B2C-4C4C-A5DE-CB8C6EB00BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DF8869C-2446-48F3-A1CD-70AE44D74EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"199F4D8C-2FB9-4AF7-B7A3-339513665616"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*","matchCriteriaId":"41D0212C-EA41-4DF3-9A93-4559545BCD7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3567046C-FE3F-424D-A1B0-D7A43D00B79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"40511481-CD42-4EB7-BE2A-7A78964B7D3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D926CDA1-AF2B-4DED-93AE-8F12091E0B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E0B4722F-1FBA-4A73-BF85-5920B94F833D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"B7FD1CEC-9064-483C-A3C2-04E3C50EFBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"05B1518A-9BBC-4CDB-8338-4DCC9A1A91D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C26983FB-6FD7-4938-8025-E535A6505ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"52D01CD7-CE53-44D6-82C6-C72579BA089C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"73F04863-29CB-4E0C-838B-1C23E25C129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4t:*:*:*:*:*:*:*","matchCriteriaId":"79AA794C-C18F-48A4-ADCB-DC219DF259CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4B36C0-D3FF-4B33-B810-DB920062480B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_iop:*:*:*:*:*:*:*","matchCriteriaId":"C03CED73-9451-4DE4-A00A-7EAB24424CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_ipr:*:*:*:*:*:*:*","matchCriteriaId":"29446761-8ACE-4E05-82C3-3FF77C1E2CCB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"20B3C51E-DE28-4B50-B841-31CCFEA88A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5d:*:*:*:*:*:*:*","matchCriteriaId":"A67E6C0C-F5A4-4591-94B9-3D72221C0933"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5e:*:*:*:*:*:*:*","matchCriteriaId":"7CC66EB2-FFC7-4EF1-9591-A5C5E1E7C919"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5f:*:*:*:*:*:*:*","matchCriteriaId":"85D02672-84E9-4036-8ED8-FE6EF4D7E275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5g:*:*:*:*:*:*:*","matchCriteriaId":"646483C9-6FFC-46FE-B9CD-40D733FABFD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5h:*:*:*:*:*:*:*","matchCriteriaId":"C6B71C71-FA29-4B4C-831C-63AE2797BA2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DD254562-D74A-4D7C-B846-E242D785B830"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBFBCFEE-C24C-4D38-83F9-810E05D27901"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:64:*:*:*:*:*:*:*","matchCriteriaId":"BF1C22CE-FF69-44CF-82C3-EBFDA9E7EC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1530468C-EDEF-431D-9164-B0D670AF07D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/134","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0010","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.11mu05:*:*:*:*:*:*:*","matchCriteriaId":"D85C6D97-CF88-4F47-8580-1E1271C3BEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.12mu03:*:*:*:*:*:*:*","matchCriteriaId":"803355A3-10BA-45DA-AFF7-867A06AEE420"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu01:*:*:*:*:*:*:*","matchCriteriaId":"59665BA5-0818-44E7-9102-62060C88431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu02:*:*:*:*:*:*:*","matchCriteriaId":"930A6977-EF72-4693-96E0-603FE096EB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu03:*:*:*:*:*:*:*","matchCriteriaId":"BDE41F0D-8CCB-4A79-B05E-E08E37B1E15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*","matchCriteriaId":"49A7C6F2-F769-447A-8C8B-9002BD6FBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8:*:*:*:*:*:*:*","matchCriteriaId":"7904F3D9-A6B0-4ED6-8BAD-2D26C118C0F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:11:*:*:*:*:*:*:*","matchCriteriaId":"707579B5-701A-4A36-8567-AB2E11759322"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:13:*:*:*:*:*:*:*","matchCriteriaId":"E7C620CF-5046-4A6A-A479-AC315D1E36BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2v4:*:*:*:*:*:*:*","matchCriteriaId":"51756048-EB32-4A72-9ED4-937AF2B9DE37"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0011","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-09T19:15:42.567","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-1067"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.11mu05:*:*:*:*:*:*:*","matchCriteriaId":"D85C6D97-CF88-4F47-8580-1E1271C3BEB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.12mu03:*:*:*:*:*:*:*","matchCriteriaId":"803355A3-10BA-45DA-AFF7-867A06AEE420"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu01:*:*:*:*:*:*:*","matchCriteriaId":"59665BA5-0818-44E7-9102-62060C88431A"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu02:*:*:*:*:*:*:*","matchCriteriaId":"930A6977-EF72-4693-96E0-603FE096EB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:y2k_patchr4.20mu03:*:*:*:*:*:*:*","matchCriteriaId":"BDE41F0D-8CCB-4A79-B05E-E08E37B1E15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*","matchCriteriaId":"49A7C6F2-F769-447A-8C8B-9002BD6FBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8:*:*:*:*:*:*:*","matchCriteriaId":"7904F3D9-A6B0-4ED6-8BAD-2D26C118C0F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:11:*:*:*:*:*:*:*","matchCriteriaId":"707579B5-701A-4A36-8567-AB2E11759322"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:13:*:*:*:*:*:*:*","matchCriteriaId":"E7C620CF-5046-4A6A-A479-AC315D1E36BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2v4:*:*:*:*:*:*:*","matchCriteriaId":"51756048-EB32-4A72-9ED4-937AF2B9DE37"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980603-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9808-083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0012","sourceIdentifier":"cve@mitre.org","published":"1998-02-06T05:00:00.000","lastModified":"2025-04-09T19:15:43.647","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":7.0,"baseSeverity":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-290"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:personal_web_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9E075F89-BC5D-48D8-8CA1-B56C2CAD50F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"4F156CEA-E3F2-4F2E-8065-FC606DD58F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"63A12C94-E68C-48E2-B88E-571C4FD9099C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0013","sourceIdentifier":"cve@mitre.org","published":"1998-01-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E9C3330-E163-4699-B7F6-2D9B089E8A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F62C0C54-6BC0-4A8B-8006-F1EEEFAC3699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"011ECCA8-63DD-4FB0-A2F4-B4BAF344242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86A52DB0-B17A-437C-8E3A-0F824B9F88AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8EDDCCD5-76B1-4981-BA9D-0C4702DD3FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6A9E54C6-7003-46B0-85B3-0C2E7E611D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"082C8ECC-CDAF-440B-90D0-A1FE028B03F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7D0AAA72-CAA5-4985-ADD9-1790CE3C66D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C0C2A220-D8AB-4FAD-8048-F2C1764F965F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5010A78A-394E-4196-90CB-5D371C3BD1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E5F6F181-41B1-47D1-A216-194DC4C762EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"D6EEBDAB-AA0D-407B-B8EE-6C33B0423AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"45446BD9-3B03-43B6-B686-F6EACFABD699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"FCE6F492-8E28-4FA1-9BF1-96BAF5D68545"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"41BF66ED-CB08-440E-AC05-A31371B7A380"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0014","sourceIdentifier":"cve@mitre.org","published":"1998-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unauthorized privileged access or denial of service via dtappgather program in CDE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.01:*:*:*:*:*:*:*","matchCriteriaId":"F2611013-0EF4-4FDD-AB86-DAB93D50528D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.01_x86:*:*:*:*:*:*:*","matchCriteriaId":"87B56680-D05B-49BB-8962-2DDD84DF9824"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.02:*:*:*:*:*:*:*","matchCriteriaId":"05D7A888-6739-4D80-9807-E2AA983DAEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0409D8C4-A512-492A-9093-CE1E78E1426E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.02_x86:*:*:*:*:*:*:*","matchCriteriaId":"25543AC5-A778-4EF6-8ACD-3841268EADBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.2_x86:*:*:*:*:*:*:*","matchCriteriaId":"38748ACD-16B2-40A5-8E5A-681B2F2DF8BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:10.24:*:*:*:*:*:*:*","matchCriteriaId":"D9B7C178-4BE6-4397-A4E2-01375E4CA978"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/185","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-075","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0015","sourceIdentifier":"cve@mitre.org","published":"1997-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Teardrop IP denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.03:*:*:*:*:*:*:*","matchCriteriaId":"E7FA635E-C0FE-495C-A2BB-D9C30A95FD00"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.07:*:*:*:*:*:*:*","matchCriteriaId":"035890F7-BF48-4669-812A-1DCBD91A8F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:0.0a:*:*:*:*:*:*:*","matchCriteriaId":"5190BE3F-DA55-4463-A19C-904BF848D5DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"EF8BECF6-3C33-4D8C-B54E-A0D2F3295E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"828B4519-24D8-45A7-8448-D5FF6C83A2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5579","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0016","sourceIdentifier":"cve@mitre.org","published":"1997-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Land IP denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:7000:*:*:*:*:*:*:*","matchCriteriaId":"008881AE-153D-4691-9500-900071302ECD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:inet:5.01:*:*:*:*:*:*:*","matchCriteriaId":"679EB37A-DC20-4EB0-BF1E-664BF53AC054"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:winsock:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA2F784E-2B6A-4BF7-9A16-77031AFD6272"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.03:*:*:*:*:*:*:*","matchCriteriaId":"E7FA635E-C0FE-495C-A2BB-D9C30A95FD00"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.07:*:*:*:*:*:*:*","matchCriteriaId":"035890F7-BF48-4669-812A-1DCBD91A8F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-076","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9801-076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20170815-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0017","sourceIdentifier":"cve@mitre.org","published":"1997-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:inet:5.01:*:*:*:*:*:*:*","matchCriteriaId":"679EB37A-DC20-4EB0-BF1E-664BF53AC054"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:inet:6.01:*:*:*:*:*:*:*","matchCriteriaId":"4AF8F484-F5AA-4834-B976-764B2488F377"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:inet:6.02:*:*:*:*:*:*:*","matchCriteriaId":"C692D0C5-BCF4-4C68-B7DF-EDCE4A55F1B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A86BB4F6-210F-448A-A3CB-127BEB5BD0D2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A5C77FA7-C977-4223-B6AC-91B82C45129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"44EFD22E-02C9-4B80-8934-A9AC8DD858CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1B4D4A5-25EB-48FE-BDFD-A274CE802648"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3A037F1-98AD-47CC-8D83-B42666E1B61E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF4F7002-A525-4A66-BE8B-E50ABBF144B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:reliant_unix:*:*:*:*:*:*:*:*","matchCriteriaId":"8A2C5456-FF11-403E-B67E-5961278D812A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0018","sourceIdentifier":"cve@mitre.org","published":"1997-12-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in statd allows root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/127","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-1999-0019","sourceIdentifier":"cve@mitre.org","published":"1996-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Delete or create a file via rpc.statd, due to invalid information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:4.11:*:*:*:*:*:*:*","matchCriteriaId":"F008DEB7-9A49-43BB-8F37-809B5D398676"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncr:mp-ras:2.03:*:*:*:*:*:*:*","matchCriteriaId":"E7039C60-B488-4A64-9532-EA1C9E175C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncr:mp-ras:3.0:*:*:*:*:*:*:*","matchCriteriaId":"28ADAFCA-AD99-40C7-B4C0-1BA5D3DB98F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:nighthawk:cx_ux:*:*:*:*:*:*:*:*","matchCriteriaId":"8D964BE6-892C-4C22-A894-8143776DF8F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:nighthawk:powerux:*:*:*:*:*:*:*:*","matchCriteriaId":"F1E05E77-3B17-4177-A10E-CAE4809F81AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2:*:*:*:*:*:*:*","matchCriteriaId":"5724993B-7563-48C2-8BD1-25E4E57C6699"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3:*:*:*:*:*:*:*","matchCriteriaId":"66086A58-91FC-4203-B2C2-4B3091A1C548"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2:*:*:*:*:*:*:*","matchCriteriaId":"B8352832-11AE-4BE4-B996-AA90E755066B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/135","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0020","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:53.530","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-0032.  Reason: This candidate is a duplicate of CVE-1999-0032.  Notes: All CVE users should reference CVE-1999-0032 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0021","sourceIdentifier":"cve@mitre.org","published":"1997-11-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:muhammad_a._muquit:wwwcount:2.3:*:*:*:*:*:*:*","matchCriteriaId":"ECA95997-664F-4784-AE87-AAEC83432D64"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/128","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0022","sourceIdentifier":"cve@mitre.org","published":"1996-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local user gains root privileges via buffer overflow in rdist, via expstr() function."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F5E922C-239D-4F98-87ED-BB7998BE99C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"92BBA0D2-E284-4AA6-A3B9-8FA37302D53B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0023","sourceIdentifier":"cve@mitre.org","published":"1996-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local user gains root privileges via buffer overflow in rdist, via lookup() function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inet:inet:5.01:*:*:*:*:*:*:*","matchCriteriaId":"A680AE78-F1C0-4EA2-9D71-55F3EADA59C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:inet:inet:6.01:*:*:*:*:*:*:*","matchCriteriaId":"1919C12E-1448-4922-BDB1-E123CD23C446"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5FAA3048-117B-4E69-8DFE-E96A343FB29A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:tcp_ip:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"DB18BA3A-B2BB-4816-9223-5BFAAEBCC00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:tcp_ip:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5783678F-80FA-4E1A-A637-7774CE3910EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"43D2F319-DF69-4E52-AF29-06DF1E312030"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0024","sourceIdentifier":"cve@mitre.org","published":"1997-08-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DNS cache poisoning via BIND, by predictable query IDs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:*","matchCriteriaId":"BB79EDA4-9B2C-4C4C-A5DE-CB8C6EB00BDC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:64:*:*:*:*:*:*:*","matchCriteriaId":"BF1C22CE-FF69-44CF-82C3-EBFDA9E7EC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:4.2:*:*:*:*:*:*:*","matchCriteriaId":"EFDDBA47-A0E3-4EB2-868A-A9B998B0154E"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:4.2mp:*:*:*:*:*:*:*","matchCriteriaId":"6CF54267-A293-44B1-BD9A-14CD39F732C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:up-ux_v:4.2mp:*:*:*:*:*:*:*","matchCriteriaId":"875BE14D-96DC-4973-B077-40C7DFC75B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2v4:*:*:*:*:*:*:*","matchCriteriaId":"51756048-EB32-4A72-9ED4-937AF2B9DE37"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0025","sourceIdentifier":"cve@mitre.org","published":"1997-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"root privileges via buffer overflow in df command on SGI IRIX systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1997-21.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/20851","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/346","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/440","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1997-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/20851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0026","sourceIdentifier":"cve@mitre.org","published":"1997-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"root privileges via buffer overflow in pset command on SGI IRIX systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0027","sourceIdentifier":"cve@mitre.org","published":"1997-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"root privileges via buffer overflow in eject command on SGI IRIX systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0028","sourceIdentifier":"cve@mitre.org","published":"1997-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"root privileges via buffer overflow in login/scheme command on SGI IRIX systems."},{"lang":"es","value":"privilegios de administrador mediante un desbordamiento de búfer en el comando login/scheme en sistemas SGI IRIX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0029","sourceIdentifier":"cve@mitre.org","published":"1997-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"root privileges via buffer overflow in ordist command on SGI IRIX systems."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0029","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0030","sourceIdentifier":"cve@mitre.org","published":"1997-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"root privileges via buffer overflow in xlock command on SGI IRIX systems."},{"lang":"es","value":"Obtención de privilegios de root mediante un desbordamiento de buffer en el comando xlock en sistemas SGI IRIX"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0031","sourceIdentifier":"cve@mitre.org","published":"1997-07-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7144D163-CD3D-4E57-83D9-FB164C65E06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7CD558FC-D1D7-4092-9A05-B174CA06675D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"}]}]}],"references":[{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9707-065.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9707-065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-1999-0032","sourceIdentifier":"cve@mitre.org","published":"1996-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:4.0:*:*:*:*:*:*:*","matchCriteriaId":"1FEE8CF7-908D-4E24-A2BA-B58BF4031C9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C1EBBE68-C1F9-4982-A3CE-F10E22A9EEC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-042.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/707","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980402-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/i-042.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0033","sourceIdentifier":"cve@mitre.org","published":"1997-06-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Command execution in Sun systems via buffer overflow in the at program."},{"lang":"es","value":"Ejecución de comandos en sistemas Sun mediante desbordamiento de tampón en el programa 'at'"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncr:mp-ras:3.0:*:*:*:*:*:*:*","matchCriteriaId":"28ADAFCA-AD99-40C7-B4C0-1BA5D3DB98F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:3.2v4:*:*:*:*:*:*:*","matchCriteriaId":"4D1A26B2-C13B-42D8-8E91-0D4979641865"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0034","sourceIdentifier":"cve@mitre.org","published":"1997-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in suidperl (sperl), Perl 4.x and 5.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C6D64BFC-E974-460C-A635-7319676049A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:freeware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7970668-A80C-461D-A779-A8A6880D319B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:freeware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3D6C767-472A-4C09-B06F-C73537E764DD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0034","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0035","sourceIdentifier":"cve@mitre.org","published":"1997-05-29T04:00:00.000","lastModified":"2025-10-20T18:15:35.053","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in signal handling routine in ftpd, allowing read/write arbitrary files."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-364"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:inet:5.01:*:*:*:*:*:*:*","matchCriteriaId":"679EB37A-DC20-4EB0-BF1E-664BF53AC054"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0035","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0036","sourceIdentifier":"cve@mitre.org","published":"1997-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970508-02-PX","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/h-106.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/990","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/557","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970508-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/h-106.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0037","sourceIdentifier":"cve@mitre.org","published":"1997-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary command execution via metamail package using message headers, when user processes attacker's message using metamail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0038","sourceIdentifier":"cve@mitre.org","published":"1997-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xlock program allows local users to execute commands as root."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE3A815C-B264-4B1F-8243-894C21F8D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FDB5057F-A306-4250-B247-701948713AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D7E43C99-DEC8-4519-90A9-ADBAA56B99C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BEC4E336-7290-4FF2-BB71-A1ABDA3283D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B923A0FC-1F99-40F7-9788-5DF1A757ED27"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4D9ECBD3-23BA-4832-B3F9-31D2080139CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A6CF60-2BDD-48C3-9A9A-DBBFD153B642"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:0.93:*:*:*:*:*:*:*","matchCriteriaId":"E1E1BD95-EF97-4CA0-9EF1-5081DD5F782B"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A9EDD1D3-6E5C-4D98-9360-33949353BD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"87E89840-3B57-4CBA-BE90-0BBA61F21F96"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"745ACC17-B6D6-4B4E-9648-A8B45C4A3F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*","matchCriteriaId":"2170549C-80D2-4FF8-AC07-BD4124125B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*","matchCriteriaId":"CFD50216-90AC-480E-A11C-E88E64C6D84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0039","sourceIdentifier":"cve@mitre.org","published":"1997-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1997-12.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/235","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/374","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/333","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1997-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0040","sourceIdentifier":"cve@mitre.org","published":"1997-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DD254562-D74A-4D7C-B846-E242D785B830"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBFBCFEE-C24C-4D38-83F9-810E05D27901"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"C54F7F74-7DD7-431E-AE75-1D1199D63032"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*","matchCriteriaId":"2170549C-80D2-4FF8-AC07-BD4124125B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*","matchCriteriaId":"066D4E93-366F-42D4-B27D-8AF981F5F2AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*","matchCriteriaId":"CFD50216-90AC-480E-A11C-E88E64C6D84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:64:*:*:*:*:*:*:*","matchCriteriaId":"BF1C22CE-FF69-44CF-82C3-EBFDA9E7EC0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:4.2:*:*:*:*:*:*:*","matchCriteriaId":"EFDDBA47-A0E3-4EB2-868A-A9B998B0154E"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:4.2mp:*:*:*:*:*:*:*","matchCriteriaId":"6CF54267-A293-44B1-BD9A-14CD39F732C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:up-ux_v:4.2mp:*:*:*:*:*:*:*","matchCriteriaId":"875BE14D-96DC-4973-B077-40C7DFC75B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0041","sourceIdentifier":"cve@mitre.org","published":"1997-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NLS (Natural Language Service)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libc:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E0EE0514-E70B-43D8-ADBA-B0A3BCD8B44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libc:5.2.18:*:*:*:*:*:*:*","matchCriteriaId":"BBB49C49-1AC9-48C5-906E-05E67DC99BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libc:5.3.12:*:*:*:*:*:*:*","matchCriteriaId":"03EFCDE7-4C23-43A5-B34B-EB2EC73481CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:1.5:*:mk:*:*:*:*:*","matchCriteriaId":"71CAA155-04D6-4FDF-BE79-EE5AFD0B55A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FFB0C892-B2B2-4810-A009-AE1809730FE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:9.2:*:*:*:*:*:*:*","matchCriteriaId":"D4029356-417F-4738-ACE0-B88351EA9010"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos_max:1.3:*:*:*:*:*:*:*","matchCriteriaId":"56C16675-1822-4B1B-8BE0-D7FC7FA106D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"9FDBA67D-84A7-42D6-A994-7C967B6306D3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0042","sourceIdentifier":"cve@mitre.org","published":"1997-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in University of Washington's implementation of IMAP and POP servers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:4:*:*:*:*:*:*:*","matchCriteriaId":"C97FA8D5-1A78-4E3C-BEA8-0C37A9BBE8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pop:3:*:*:*:*:*:*:*","matchCriteriaId":"2E8FE8B6-213B-48E5-8E62-B2F75AD8F589"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5302613E-F0DD-4B46-884C-49A977FD4147"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0042","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0043","sourceIdentifier":"cve@mitre.org","published":"1996-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Command execution via shell metachars in INN daemon (innd) 1.5 using \"newgroup\" and \"rmgroup\" control messages, and others."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*","matchCriteriaId":"E5D0063D-01CE-49E2-A19A-FA861F3C40CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*","matchCriteriaId":"967E86C5-3635-49FF-A98A-C9B2BC85A812"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*","matchCriteriaId":"14DBB010-4064-4B46-834C-6FD5F1FE78FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*","matchCriteriaId":"EEE0D317-4F02-4896-95FC-20B64EB3A91F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9915A668-8E8C-4EC8-A72A-6937EC7D3496"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A0FB9EFB-F5C3-447B-A1B7-DB762F93D8F2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_intrasv:1.1:*:*:*:*:*:*:*","matchCriteriaId":"39F6E390-A2CF-4F42-83EC-65B23EC644CA"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:1.2:*:*:*:*:*:*:*","matchCriteriaId":"11389E13-8EE5-4C33-9A6D-4B30849F0722"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3C409173-AC55-493F-9B55-51A69D933F04"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2CC1F3C7-D016-44B4-843A-34538227668B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0044","sourceIdentifier":"cve@mitre.org","published":"1996-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fsdump command in IRIX allows local users to obtain root access by modifying sensitive files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970301-01-P","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970301-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0045","sourceIdentifier":"cve@mitre.org","published":"1996-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"List of arbitrary files on Web host via nph-test-cgi script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"E80E240C-9879-48EC-AC9A-2C1FD5E2DD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"AF16AF7D-9475-435F-AE36-F16CE8F45A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"06F3141B-2C30-4230-A425-465E235539EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6D2C9EA-1241-4DE6-A6CD-FCD7EEC9B42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5EA86B9-4F86-4ADA-BC6A-4F6E261848F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CA6523AC-ECC9-4A79-9387-18308FCF9A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCBCF0F-63FB-4A03-92F8-FF121083CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:commerce_server:1.12:*:*:*:*:*:*:*","matchCriteriaId":"0A67EC36-0EEB-4B5F-A504-95DD2A16BFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communications_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B5F14356-4229-49C3-BBA5-2B2149517630"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communications_server:1.12:*:*:*:*:*:*:*","matchCriteriaId":"BFBF7DF8-A638-4801-A41B-EBE5AAE51850"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"5234109F-AD90-4324-AA03-C5DE007D32F7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0046","sourceIdentifier":"cve@mitre.org","published":"1997-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow of rlogin program using TERM environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2F5E922C-239D-4F98-87ED-BB7998BE99C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DD254562-D74A-4D7C-B846-E242D785B830"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBFBCFEE-C24C-4D38-83F9-810E05D27901"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:0.93:*:*:*:*:*:*:*","matchCriteriaId":"E1E1BD95-EF97-4CA0-9EF1-5081DD5F782B"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:-:*:*:*:*:*:*:*","matchCriteriaId":"8D2066A9-7DAE-403C-8C12-5414C6770F8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*","matchCriteriaId":"2170549C-80D2-4FF8-AC07-BD4124125B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*","matchCriteriaId":"066D4E93-366F-42D4-B27D-8AF981F5F2AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*","matchCriteriaId":"CFD50216-90AC-480E-A11C-E88E64C6D84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:-:*:*:*:*:*:*:*","matchCriteriaId":"8772D1A6-9458-499F-B9E7-758A6DA735B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*","matchCriteriaId":"91F372EA-3A78-4703-A457-751B2C98D796"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A57664FD-9E75-4F9B-92C4-7D85A263D04B"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"69C7B4A8-E8D0-425C-B979-17E85458B0C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0F538D2B-1AE1-4766-830E-CF7999181128"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0047","sourceIdentifier":"cve@mitre.org","published":"1997-01-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9D8484F8-8712-4B55-A163-BA492B4D0095"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.4:*:*:*:*:*:*:*","matchCriteriaId":"D15777E6-6951-4559-B19F-08CE6246BF33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/685","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0048","sourceIdentifier":"cve@mitre.org","published":"1997-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Talkd, when given corrupt DNS information, can be used to execute arbitrary commands with root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:netkit:0.07:*:*:*:*:*:*:*","matchCriteriaId":"31167082-8255-49DA-A3C2-F1F395DFCF15"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:*:*:*:*:*:*:*:*","matchCriteriaId":"81B329CB-C41D-4487-A492-C34DC68899B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:*:*:*:*:*:*:*:*","matchCriteriaId":"AADD2657-6791-45DD-95C4-F437FCEF4357"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:up-ux_v:*:*:*:*:*:*:*:*","matchCriteriaId":"B10E6A9A-8C15-4349-AD4F-A24F65991034"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0049","sourceIdentifier":"cve@mitre.org","published":"1997-01-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Csetup under IRIX allows arbitrary file creation or overwriting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0049","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0050","sourceIdentifier":"cve@mitre.org","published":"1996-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HP-UX newgrp program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.03:*:*:*:*:*:*:*","matchCriteriaId":"E7FA635E-C0FE-495C-A2BB-D9C30A95FD00"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.06:*:*:*:*:*:*:*","matchCriteriaId":"3194CFA3-F0B3-487A-99C6-1A7DF1EF0586"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.07:*:*:*:*:*:*:*","matchCriteriaId":"035890F7-BF48-4669-812A-1DCBD91A8F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.08:*:*:*:*:*:*:*","matchCriteriaId":"F9AED8F3-2501-444D-8141-37FEE2246747"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.09:*:*:*:*:*:*:*","matchCriteriaId":"10974B0F-DA3A-4E3E-8914-8CEB366E9CC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"C54F7F74-7DD7-431E-AE75-1D1199D63032"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0051","sourceIdentifier":"cve@mitre.org","published":"1997-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globetrotter:flexlm:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0A52E7F2-2747-41B7-82DB-18ED219149B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:globetrotter:flexlm:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3C41704B-36CA-4E78-A3FF-7280D8F9ED0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:globetrotter:flexlm:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E8CBFF47-05CB-46A4-9807-C38CED519D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:license_oeo:3.0:*:*:*:*:*:*:*","matchCriteriaId":"382076A2-CB33-435F-B78C-8B776E3F9F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:license_oeo:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A146CF62-753B-4E2B-8400-490B99EC8E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:license_oeo:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D8B137D8-29E3-460A-A27E-617C7B195817"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"40511481-CD42-4EB7-BE2A-7A78964B7D3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D926CDA1-AF2B-4DED-93AE-8F12091E0B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E0B4722F-1FBA-4A73-BF85-5920B94F833D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"B7FD1CEC-9064-483C-A3C2-04E3C50EFBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"05B1518A-9BBC-4CDB-8338-4DCC9A1A91D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C26983FB-6FD7-4938-8025-E535A6505ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"52D01CD7-CE53-44D6-82C6-C72579BA089C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"73F04863-29CB-4E0C-838B-1C23E25C129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4t:*:*:*:*:*:*:*","matchCriteriaId":"79AA794C-C18F-48A4-ADCB-DC219DF259CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4B36C0-D3FF-4B33-B810-DB920062480B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_iop:*:*:*:*:*:*:*","matchCriteriaId":"C03CED73-9451-4DE4-A00A-7EAB24424CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_ipr:*:*:*:*:*:*:*","matchCriteriaId":"29446761-8ACE-4E05-82C3-3FF77C1E2CCB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"20B3C51E-DE28-4B50-B841-31CCFEA88A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5d:*:*:*:*:*:*:*","matchCriteriaId":"A67E6C0C-F5A4-4591-94B9-3D72221C0933"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5e:*:*:*:*:*:*:*","matchCriteriaId":"7CC66EB2-FFC7-4EF1-9591-A5C5E1E7C919"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5f:*:*:*:*:*:*:*","matchCriteriaId":"85D02672-84E9-4036-8ED8-FE6EF4D7E275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5g:*:*:*:*:*:*:*","matchCriteriaId":"646483C9-6FFC-46FE-B9CD-40D733FABFD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5h:*:*:*:*:*:*:*","matchCriteriaId":"C6B71C71-FA29-4B4C-831C-63AE2797BA2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4jl:*:*:*:*:*:*:*","matchCriteriaId":"44F62CC9-2145-4801-9C3E-4D7232E6BD68"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0052","sourceIdentifier":"cve@mitre.org","published":"1998-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7ECF99E9-1C3B-4D8F-A52E-28D0BFEB2E9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"http://www.osvdb.org/908","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1389","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0053","sourceIdentifier":"cve@mitre.org","published":"1998-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TCP RST denial of service in FreeBSD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"}]}]}],"references":[{"url":"http://www.osvdb.org/6094","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0054","sourceIdentifier":"cve@mitre.org","published":"1998-06-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun's ftpd daemon can be subjected to a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/171","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0055","sourceIdentifier":"cve@mitre.org","published":"1998-05-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Sun libnsl allow root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/172","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX80543&apar=only","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX80543&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0056","sourceIdentifier":"cve@mitre.org","published":"1998-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sun's ping program can give root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/174","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0057","sourceIdentifier":"cve@mitre.org","published":"1998-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vacation program allows command execution by remote users through a sendmail command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:vacation:*:*:*:*:*:*:*:*","matchCriteriaId":"F37FF4C2-CCFE-4B9A-A814-B0F7AD6E012E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*","matchCriteriaId":"066D4E93-366F-42D4-B27D-8AF981F5F2AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:*:*:*:*:*:*:*:*","matchCriteriaId":"7AADED85-FA20-4D93-8921-A4933181ADF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9811-087","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9811-087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0058","sourceIdentifier":"cve@mitre.org","published":"1997-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PHP cgi program, php.cgi allows shell access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/712","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0059","sourceIdentifier":"cve@mitre.org","published":"1997-07-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX fam service allows an attacker to obtain a list of all files on the server."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"http://www.osvdb.org/164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/353","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/325","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0060","sourceIdentifier":"cve@mitre.org","published":"1998-03-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Attackers can cause a denial of service in Ascend MAX and Pipeline routers with a malformed packet to the discard port, which is used by the Java Configurator tool."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DD46C3E-83EE-4DD4-A925-59A6F839EE6C"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:2.0:*:*:*:*:*:*:*","matchCriteriaId":"98D08C67-F634-41DB-AB33-B029A4AB9417"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3C90F2EE-AE20-4D17-9DC9-01C84BBE7696"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1A06F55-2174-4825-A348-A6D65F94C7A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:5.0:*:*:*:*:*:*:*","matchCriteriaId":"627B08BB-DC4E-49F3-AE22-CD50906FB337"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0A2DCBCB-4B58-4463-B8D5-DABC654AD524"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:2.0:*:*:*:*:*:*:*","matchCriteriaId":"703FD9A7-8E68-4DC8-B4C6-346BDED1FEA7"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D064ECCA-FFBA-4932-9803-5F939B9451ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8FF57770-EC66-4E2B-8A8C-817854BCBBB4"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3583D347-AED3-4469-8D36-1C873A7E4459"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D182FD25-327B-4B7C-89B3-5A91053C5666"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_tnt_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ADBC4C-9CA8-4EEC-A91C-628A5C636282"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_tnt_router:2.0:*:*:*:*:*:*:*","matchCriteriaId":"75AB8E35-0610-4363-94B1-81C4F08C85C1"}]}]}],"references":[{"url":"http://www.ascend.com/2695.html","source":"cve@mitre.org"},{"url":"http://www.ascend.com/2695.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0061","sourceIdentifier":"cve@mitre.org","published":"1997-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"File creation and deletion, and remote execution, in the BSD line printer daemon (lpd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0062","sourceIdentifier":"cve@mitre.org","published":"1998-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"}]}]}],"references":[{"url":"http://www.osvdb.org/7559","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0063","sourceIdentifier":"cve@mitre.org","published":"1999-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3aa:*:*:*:*:*:*:*","matchCriteriaId":"D8783C0A-990A-4B79-8BF9-64E425DA585E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3db:*:*:*:*:*:*:*","matchCriteriaId":"046D8679-38F8-4DC9-82A7-2562DE0495F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*","matchCriteriaId":"53D87AC5-0F63-4AE8-AC05-FCEC98D18BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*","matchCriteriaId":"AE210B04-7ECD-419C-9258-0F619A353A8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"3B467741-B277-4128-9804-E13ED23FD310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0063","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0064","sourceIdentifier":"cve@mitre.org","published":"1997-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX lquerylv program gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=87602167418428&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=87602167418428&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0065","sourceIdentifier":"cve@mitre.org","published":"1998-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/181","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0066","sourceIdentifier":"cve@mitre.org","published":"1995-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AnyForm CGI remote execution."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_s._roberts:anyform:1.0:*:*:*:*:*:*:*","matchCriteriaId":"86BFFC62-5EFC-496E-82AE-6D59E4D9DB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_s._roberts:anyform:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DBED7446-4A8B-4688-8479-1737CD19770E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0067","sourceIdentifier":"cve@mitre.org","published":"1996-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phf CGI program allows remote command execution through shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5EA86B9-4F86-4ADA-BC6A-4F6E261848F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:ncsa_httpd:1.5a:*:export:*:*:*:*:*","matchCriteriaId":"7D7735EC-8C34-4C2B-B8CC-154182D070C2"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1996-06.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/136","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/629","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.cert.org/advisories/CA-1996-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0068","sourceIdentifier":"cve@mitre.org","published":"1997-10-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGI PHP mylog script allows an attacker to read any file on the target server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"}]}]}],"references":[{"url":"http://www.osvdb.org/3396","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/713","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0069","sourceIdentifier":"cve@mitre.org","published":"1998-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris ufsrestore buffer overflow."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/169","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8158","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0070","sourceIdentifier":"cve@mitre.org","published":"1996-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"test-cgi program allows an attacker to list files on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.0","matchCriteriaId":"FE76D3D5-34AB-4914-81E5-5AC947241D01"}]}]}],"references":[{"url":"https://lists.apache.org/thread.html/rc5d27fc1e76dc5650e1a3f1db1de403120f4c2d041cb7352850455c2%40%3Cusers.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rc5d27fc1e76dc5650e1a3f1db1de403120f4c2d041cb7352850455c2%40%3Cusers.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0071","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache httpd cookie buffer overflow for versions 1.1.1 and earlier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4363C07C-179B-4797-947F-7440AD1F2D00"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0072","sourceIdentifier":"cve@mitre.org","published":"1997-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX xdat gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0073","sourceIdentifier":"cve@mitre.org","published":"1995-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C3A2DB71-12B8-4CB2-A4EA-7C82B586C23C"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B804A762-00CC-4F03-9E6D-31BB36E4159A"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C78E0958-E499-4A8B-A897-885274A939A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCBDA4E-85CE-4EE8-BE0B-11FA585AAF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44C7E5F5-363A-4C3C-8A48-8EC55B32778F"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"BD4B2280-5114-4CBD-9B06-221BD9CE4229"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0074","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Listening TCP ports are sequentially allocated, allowing spoofing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0074","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0075","sourceIdentifier":"cve@mitre.org","published":"1996-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:*:*:*:*:*:*:*:*","matchCriteriaId":"E0326E91-1E2D-4F29-BFEA-11BE48640AE8"}]}]}],"references":[{"url":"http://www.osvdb.org/5742","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0076","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in wu-ftp from PASV command causes a core dump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:*:*:*:*:*:*:*:*","matchCriteriaId":"E0326E91-1E2D-4F29-BFEA-11BE48640AE8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0077","sourceIdentifier":"cve@mitre.org","published":"1995-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Predictable TCP sequence numbers allow spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0078","sourceIdentifier":"cve@mitre.org","published":"1996-04-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncr:mp-ras:2.03:*:*:*:*:*:*:*","matchCriteriaId":"E7039C60-B488-4A64-9532-EA1C9E175C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncr:mp-ras:3.0:*:*:*:*:*:*:*","matchCriteriaId":"28ADAFCA-AD99-40C7-B4C0-1BA5D3DB98F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncr:mp-ras:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D35762F1-5C22-4A55-9EDC-0F67E6B747EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:up-ux_v:*:*:*:*:*:*:*:*","matchCriteriaId":"B10E6A9A-8C15-4349-AD4F-A24F65991034"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:*:*:*:*:*:*:*:*","matchCriteriaId":"2A06752D-81F8-4150-87B8-117095838222"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5:*:*:*:*:*:*:*","matchCriteriaId":"4EDA6C83-76C9-44F1-94A2-1CBCC7DBBB00"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0079","sourceIdentifier":"cve@mitre.org","published":"1997-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bisonware:bisonware_ftp_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"B55B8B43-4730-48A2-B55F-9CE16725809C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0080","sourceIdentifier":"cve@mitre.org","published":"1995-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the \"site exec\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A86BB4F6-210F-448A-A3CB-127BEB5BD0D2"}]}]}],"references":[{"url":"https://archive.nanog.org/mailinglist/mailarchives/old_archive/1995-11/msg00385.html","source":"cve@mitre.org"},{"url":"https://archive.nanog.org/mailinglist/mailarchives/old_archive/1995-11/msg00385.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0081","sourceIdentifier":"cve@mitre.org","published":"1997-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wu-ftp allows files to be overwritten via the rnfr command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:*:*:*:*:*:*:*:*","matchCriteriaId":"E0326E91-1E2D-4F29-BFEA-11BE48640AE8"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0081","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0082","sourceIdentifier":"cve@mitre.org","published":"1988-11-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CWD ~root command in ftpd allows root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftp:ftp:*:*:*:*:*:*:*:*","matchCriteriaId":"30D7F58F-4C55-4D19-984C-79B6C9525BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ftpcd:ftpcd:*:*:*:*:*:*:*:*","matchCriteriaId":"1D85A7F5-C187-4707-8681-F96A91F58318"}]}]}],"references":[{"url":"http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html","source":"cve@mitre.org"},{"url":"http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0083","sourceIdentifier":"cve@mitre.org","published":"1997-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"getcwd() file descriptor leak in FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0083","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0084","sourceIdentifier":"cve@mitre.org","published":"1990-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:nfs:*:*:*:*:*:*:*:*","matchCriteriaId":"A53226D2-00D1-4D69-AF1A-A9EBD5B7DE5F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/78","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0085","sourceIdentifier":"cve@mitre.org","published":"1996-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rwhod on AIX and other operating systems allows remote attackers to execute arbitrary code via a UDP packet with a long hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/118","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/119","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0086","sourceIdentifier":"cve@mitre.org","published":"1998-01-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX routed allows remote users to modify sensitive files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0086","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0087","sourceIdentifier":"cve@mitre.org","published":"1998-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in AIX telnet can freeze a system and prevent users from accessing the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www.osvdb.org/7992","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0088","sourceIdentifier":"cve@mitre.org","published":"1998-10-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX and AIX automountd services (autofsd) allow remote users to execute root commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/brs/brspwhub.nsf/advisories/852567CC004F9038852566BF007B6393/%24file/ERS-SVA-E01-1998_004_1.txt","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/brs/brspwhub.nsf/advisories/852567CC004F9038852566BF007B6393/%24file/ERS-SVA-E01-1998_004_1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0089","sourceIdentifier":"cve@mitre.org","published":"1997-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX libDtSvc library can allow local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0089","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0090","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX rcp command allows local users to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0090","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0091","sourceIdentifier":"cve@mitre.org","published":"1997-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX writesrv command allows local users to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0091","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0092","sourceIdentifier":"cve@mitre.org","published":"1997-10-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Various vulnerabilities in the AIX portmir command allows local users to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0092","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0093","sourceIdentifier":"cve@mitre.org","published":"1997-10-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX nslookup command allows local users to obtain root access by not dropping privileges correctly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0094","sourceIdentifier":"cve@mitre.org","published":"1997-10-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX piodmgrsu command allows local users to gain additional group privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0094","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0095","sourceIdentifier":"cve@mitre.org","published":"1988-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The debug command in Sendmail is enabled, allowing attackers to execute commands as root."},{"lang":"es","value":"El comando de depuración de Sendmail está activado, permitiendo a atacantes ejecutar comandos como root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:5.58:*:*:*:*:*:*:*","matchCriteriaId":"1D07F493-9C8D-44A4-8652-F28B46CBA27C"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2019/Jun/16","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/05/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/06/1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/195","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2019/Jun/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/05/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0096","sourceIdentifier":"cve@mitre.org","published":"1996-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail decode alias can be used to overwrite sensitive files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A95C1672-F798-44D2-94A1-19492C395FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0097","sourceIdentifier":"cve@mitre.org","published":"1997-10-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.03:*:*:*:*:*:*:*","matchCriteriaId":"E7FA635E-C0FE-495C-A2BB-D9C30A95FD00"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.06:*:*:*:*:*:*:*","matchCriteriaId":"3194CFA3-F0B3-487A-99C6-1A7DF1EF0586"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.07:*:*:*:*:*:*:*","matchCriteriaId":"035890F7-BF48-4669-812A-1DCBD91A8F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.08:*:*:*:*:*:*:*","matchCriteriaId":"F9AED8F3-2501-444D-8141-37FEE2246747"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.09:*:*:*:*:*:*:*","matchCriteriaId":"10974B0F-DA3A-4E3E-8914-8CEB366E9CC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"C54F7F74-7DD7-431E-AE75-1D1199D63032"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0097","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0098","sourceIdentifier":"cve@mitre.org","published":"1998-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:appleshare:-:*:*:ja:*:*:*:*","matchCriteriaId":"AB3E4751-4BC6-427E-BA98-6CD414D38AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pmail:mercury_mail_server:-:*:*:*:*:*:*:*","matchCriteriaId":"DF801926-9C57-4BB9-A55A-FC35E86623B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattlelab:slmail:2.6:*:*:*:*:*:*:*","matchCriteriaId":"65AE12AD-FD84-47F2-B8DB-B147EBC0C94B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0098","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0099","sourceIdentifier":"cve@mitre.org","published":"1995-10-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in syslog utility allows local or remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DD254562-D74A-4D7C-B846-E242D785B830"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBFBCFEE-C24C-4D38-83F9-810E05D27901"},{"vulnerable":true,"criteria":"cpe:2.3:o:convex:convexos:10.1:*:*:*:*:*:*:*","matchCriteriaId":"23D54B03-A4A6-4EAA-99FF-0E9C95B9E577"},{"vulnerable":true,"criteria":"cpe:2.3:o:convex:convexos:10.2:*:*:*:*:*:*:*","matchCriteriaId":"8F66F8E1-5C8C-4083-A249-C0CDC3EF5E65"},{"vulnerable":true,"criteria":"cpe:2.3:o:convex:convexos:11.0:*:*:*:*:*:*:*","matchCriteriaId":"8951D00C-8F5F-4A3B-ACFA-11E3CF81E263"},{"vulnerable":true,"criteria":"cpe:2.3:o:convex:convexos:11.1:*:*:*:*:*:*:*","matchCriteriaId":"91E2EDDA-29A5-4667-9F0E-8E2D2B814426"},{"vulnerable":true,"criteria":"cpe:2.3:o:convex:spp-ux:3:*:*:*:*:*:*:*","matchCriteriaId":"14DE04D9-AC79-4278-93A1-84BA6BDB4486"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:8.0:*:*:*:*:*:*:*","matchCriteriaId":"2E9226A7-8253-4AA4-8BD1-31219080261B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:8.3:*:*:*:*:*:*:*","matchCriteriaId":"3E7D776A-9DC2-4479-8064-BB86E005B2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FFB0C892-B2B2-4810-A009-AE1809730FE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0099","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0100","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote access in AIX innd 1.5.1, using control messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5658CF74-5AF1-4161-BF4C-6A394F2AA164"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0100","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0101","sourceIdentifier":"cve@mitre.org","published":"1996-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX and Solaris \"gethostbyname\" library call allows root access through corrupt DNS host names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-13.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-13.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0102","sourceIdentifier":"cve@mitre.org","published":"1998-07-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail:3.0.2421:*:*:*:*:*:*:*","matchCriteriaId":"B582E8B5-0BF7-48C6-B92A-C617D1B9F576"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0102","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0103","sourceIdentifier":"cve@mitre.org","published":"1996-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/80171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0104","sourceIdentifier":"cve@mitre.org","published":"1997-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0C724A3D-F6E5-4E0B-8201-ACC87CB9C94D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:0a:*:*:*:*:*:*:*","matchCriteriaId":"8429C080-F550-4D03-A87A-4546273712AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/80175","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/80175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0105","sourceIdentifier":"cve@mitre.org","published":"1997-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"finger allows recursive searches by using a long string of @ symbols."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0105","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0106","sourceIdentifier":"cve@mitre.org","published":"1997-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Finger redirection allows finger bombs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0106","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0107","sourceIdentifier":"cve@mitre.org","published":"1997-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apache 1.2.5 and earlier allows a remote attacker to cause a denial of service with a large number of GET requests containing a large number of / characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"E80E240C-9879-48EC-AC9A-2C1FD5E2DD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"AF16AF7D-9475-435F-AE36-F16CE8F45A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"06F3141B-2C30-4230-A425-465E235539EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6D2C9EA-1241-4DE6-A6CD-FCD7EEC9B42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5EA86B9-4F86-4ADA-BC6A-4F6E261848F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CA6523AC-ECC9-4A79-9387-18308FCF9A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCBCF0F-63FB-4A03-92F8-FF121083CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4363C07C-179B-4797-947F-7440AD1F2D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AB26F3B0-04F8-43C1-9136-B85932F1C2F1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0107","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0108","sourceIdentifier":"cve@mitre.org","published":"1998-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The printers program in IRIX has a buffer overflow that gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/1997/May/191","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/1997/May/191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0109","sourceIdentifier":"cve@mitre.org","published":"1997-02-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ffbconfig in Solaris 2.5.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/140","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0110","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:55.093","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-0315.  Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315.  Notes: All CVE users should reference CVE-1999-0315 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0111","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RIP v1 is susceptible to spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0111","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0112","sourceIdentifier":"cve@mitre.org","published":"1997-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX dtterm program for the CDE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:*:*:*:*:*:*:*:*","matchCriteriaId":"B327A913-CD9E-48F8-B6AE-625AD7D8793A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/878","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0113","sourceIdentifier":"cve@mitre.org","published":"1994-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some implementations of rlogin allow root access if given a -froot parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/458","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0114","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users can execute commands as other users, and read other users' files, through the filter command in the Elm elm-2.4 mail package using a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elm_development_group:elm:2.4:*:*:*:*:*:*:*","matchCriteriaId":"5265C254-5FB6-4238-BD28-4176C70A29F4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0115","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX bugfiler program allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0116","sourceIdentifier":"cve@mitre.org","published":"1996-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service when an attacker sends many SYN packets to create multiple connections without ever sending an ACK to complete the connection, aka SYN flood."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FAC4577-5CC1-4099-8CBE-8AD5C1AF3807"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E223FC83-3079-4EB8-940F-5546DCD6F473"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961202-01-PX","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/136","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961202-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0117","sourceIdentifier":"cve@mitre.org","published":"1992-03-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX passwd allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0118","sourceIdentifier":"cve@mitre.org","published":"1998-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX infod allows local users to gain root access through an X display."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91158980826979&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91158980826979&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0119","sourceIdentifier":"cve@mitre.org","published":"1999-01-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 beta allows users to read and delete shares."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:beta:*:*:*:*:*","matchCriteriaId":"567075E0-2F68-4B60-B29C-B030C9076530"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0120","sourceIdentifier":"cve@mitre.org","published":"1994-03-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/126","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0121","sourceIdentifier":"cve@mitre.org","published":"1999-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dtaction command gives root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0122","sourceIdentifier":"cve@mitre.org","published":"1997-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX lchangelv gives root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0122","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0123","sourceIdentifier":"cve@mitre.org","published":"1995-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Linux mailx command allows local users to read user files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FFC0D816-7D38-4CE1-B78C-3A02195713D5"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0124","sourceIdentifier":"cve@mitre.org","published":"1993-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daemon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_minnesota:gopherd:*:*:*:*:*:*:*:*","matchCriteriaId":"B2332AA3-6412-470A-A321-91EE3B95325F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0124","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0125","sourceIdentifier":"cve@mitre.org","published":"1998-01-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SGI IRIX mailx program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980605-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980605-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0126","sourceIdentifier":"cve@mitre.org","published":"1998-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI IRIX buffer overflow in xterm and Xaw allows root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:xfree86:*:*:*:*:*:*:*:*","matchCriteriaId":"11B50724-87F2-4250-BB69-C20E050C3146"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-010.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-010.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0127","sourceIdentifier":"cve@mitre.org","published":"1996-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0128","sourceIdentifier":"cve@mitre.org","published":"1996-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"38BB277F-9761-40E9-8869-392C0B948AF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD1C3260-28D8-47C8-AB61-E2EA4ED2B1C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A95C1672-F798-44D2-94A1-19492C395FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:tcp_ip:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5783678F-80FA-4E1A-A637-7774CE3910EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:*:*:*:*:*:*:*:*","matchCriteriaId":"A852082C-D2F2-4F05-9A88-1FE5CA82912D"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FAC4577-5CC1-4099-8CBE-8AD5C1AF3807"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E223FC83-3079-4EB8-940F-5546DCD6F473"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0129","sourceIdentifier":"cve@mitre.org","published":"1996-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8:*:*:*:*:*:*:*","matchCriteriaId":"C973CF06-BEE8-4D79-8649-1510E9EFC29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"56D2BAF2-F430-41A1-8DEE-1D9CB2A56C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"5E36E877-6028-49DE-8B2E-3087A141F8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9D8484F8-8712-4B55-A163-BA492B4D0095"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A95C1672-F798-44D2-94A1-19492C395FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1996-25.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1996-25.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0130","sourceIdentifier":"cve@mitre.org","published":"1996-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users can start Sendmail in daemon mode and gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:network_desktop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6CA6D9E-90A8-4A56-A6E9-24618F3FC4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7:*:*:*:*:*:*:*","matchCriteriaId":"31E3751E-859F-47E5-8048-FCBA450DD4B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8:*:*:*:*:*:*:*","matchCriteriaId":"C973CF06-BEE8-4D79-8649-1510E9EFC29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"56D2BAF2-F430-41A1-8DEE-1D9CB2A56C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"5E36E877-6028-49DE-8B2E-3087A141F8EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0131","sourceIdentifier":"cve@mitre.org","published":"1996-09-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.6:*:*:*:*:*:*:*","matchCriteriaId":"9413566A-425B-4684-A332-A9DD3309FB51"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C2D488B8-49D0-4AFD-A5C1-63CB036E3886"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A3E2EE58-BCAD-4F26-94B6-F91CF1731429"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"10AC2FAD-C4AD-46DD-88D1-4F99433B3476"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B730F70-5662-4BE4-8202-93E12620CBD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.5:*:*:*:*:*:*:*","matchCriteriaId":"FA6D5E9F-275F-41EB-9707-6B7F129A700F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"44C3AF89-3854-4F37-807E-74FC0640693B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"445EECD3-2DB9-43D1-B26F-0979A3C02D45"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/717","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0132","sourceIdentifier":"cve@mitre.org","published":"1996-08-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1996-19.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/11723","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/401","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1996-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/11723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0133","sourceIdentifier":"cve@mitre.org","published":"1996-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fm_fls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*","matchCriteriaId":"7695D75F-240E-496E-B90A-37C06804D433"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0133","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0134","sourceIdentifier":"cve@mitre.org","published":"1996-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vold in Solaris 2.x allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"}]}]}],"references":[{"url":"http://www.osvdb.org/8159","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0135","sourceIdentifier":"cve@mitre.org","published":"1996-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admintool in Solaris allows a local user to write to arbitrary files and gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0135","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0136","sourceIdentifier":"cve@mitre.org","published":"1996-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0137","sourceIdentifier":"cve@mitre.org","published":"1996-07-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dip program on many Linux systems allows local users to gain root access via a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fred_n._van_kempen:dip:3.3.7o:*:*:*:*:*:*:*","matchCriteriaId":"8853C5DE-ED16-4B51-AFD2-9A7208A7A805"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0138","sourceIdentifier":"cve@mitre.org","published":"1996-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:a_ux:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A2CCF8-36A1-4E5E-A36F-5E90357A2B42"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B804A762-00CC-4F03-9E6D-31BB36E4159A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8:*:*:*:*:*:*:*","matchCriteriaId":"19587780-3515-484C-BCB4-F2BB90106C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*","matchCriteriaId":"0BAE3D61-9D78-46D7-87EB-5A33ECF86F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CCE246DE-641C-44A3-9FCC-5131655DBC1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:*:*:*:*:*:*:*:*","matchCriteriaId":"81B329CB-C41D-4487-A492-C34DC68899B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:4.2:*:*:*:*:*:*:*","matchCriteriaId":"EFDDBA47-A0E3-4EB2-868A-A9B998B0154E"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:4.2mp:*:*:*:*:*:*:*","matchCriteriaId":"6CF54267-A293-44B1-BD9A-14CD39F732C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:up-ux_v:4.2mp:*:*:*:*:*:*:*","matchCriteriaId":"875BE14D-96DC-4973-B077-40C7DFC75B02"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0138","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0139","sourceIdentifier":"cve@mitre.org","published":"1998-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://www.osvdb.org/8205","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0140","sourceIdentifier":"cve@mitre.org","published":"1999-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in RAS/PPTP on NT systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0140","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0141","sourceIdentifier":"cve@mitre.org","published":"1996-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Bytecode Verifier allows malicious applets to execute arbitrary commands as the user of the applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:2.02:*:*:*:*:*:*:*","matchCriteriaId":"DA1BDF4E-F2B7-48A6-A276-2C69BEAD932A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/134","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0142","sourceIdentifier":"cve@mitre.org","published":"1996-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","matchCriteriaId":"DA2CA2F8-260C-4559-BF24-3E321CEAE93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0143","sourceIdentifier":"cve@mitre.org","published":"1996-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:-:*:*:*:*:*:*:*","matchCriteriaId":"589D7E39-A243-49F9-8F67-4B9E92AE87DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:process_software:multinet:3.4:*:*:*:*:*:*:*","matchCriteriaId":"6DBE0C33-2F14-474B-B6E9-4415BDFDE179"},{"vulnerable":true,"criteria":"cpe:2.3:a:process_software:multinet:3.5:*:*:*:*:*:*:*","matchCriteriaId":"9F83D69E-4B23-4049-A521-BBDD27DB39EC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0143","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0144","sourceIdentifier":"cve@mitre.org","published":"1997-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Qmail by specifying a large number of recipients with the RCPT command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qmail_project:qmail:-:*:*:*:*:*:*:*","matchCriteriaId":"6FA9D55F-8FDA-4B2C-BE43-82BDFEED1C7D"}]}]}],"references":[{"url":"http://cr.yp.to/qmail/venema.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602558319024&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602558319029&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2237","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/208","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://cr.yp.to/qmail/venema.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602558319024&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602558319029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0145","sourceIdentifier":"cve@mitre.org","published":"1993-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail WIZ command enabled, allowing root access."},{"lang":"es","value":"Sendmail WIZ comando  habilitado, permite el acceso de root"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:*:*:*:*:*:*:*:*","matchCriteriaId":"887964FC-405F-40DB-B848-806748BA6FE8"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2019/Jun/16","source":"cve@mitre.org"},{"url":"http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1990-11.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1993-14.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openwall.com/lists/oss-security/2019/06/05/4","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/06/1","source":"cve@mitre.org"},{"url":"http://www2.dataguard.no/bugtraq/1995_1/0332.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2019/Jun/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.alw.nih.gov/Security/Docs/admin-guide-to-cracking.101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1990-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1993-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openwall.com/lists/oss-security/2019/06/05/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/06/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www2.dataguard.no/bugtraq/1995_1/0332.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0146","sourceIdentifier":"cve@mitre.org","published":"1997-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:campas:*:*:*:*:*:*:*:*","matchCriteriaId":"6F80F679-0A77-476D-A6F8-DD785F31D968"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:servers:*:*:*:*:*:*:*:*","matchCriteriaId":"1205A701-E354-41F3-8028-F951547420BA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1975","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0147","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_arizona:glimpse_http:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA9C6AF0-8D18-438C-AAD7-95DA845CF774"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_arizona:webglimpse:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"99323BCA-FBDE-4B82-BD27-59626A5AAFC8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0147","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0148","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The handler CGI program in IRIX allows arbitrary command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/380","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0149","sourceIdentifier":"cve@mitre.org","published":"1997-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/247","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/290","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970501-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0150","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Perl fingerd program allows arbitrary command execution from remote users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:fingerd:*:*:*:*:*:*:*:*","matchCriteriaId":"843643A1-2F59-4F76-8E94-B45C88806345"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0150","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0151","sourceIdentifier":"cve@mitre.org","published":"1995-04-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:satan:satan:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DBA66ED-1AF6-4B47-B3B9-797F59E6A82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:satan:satan:1.1:*:*:*:*:*:*:*","matchCriteriaId":"78F5F86B-37D8-468B-8F21-3B58DF7F77D4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0152","sourceIdentifier":"cve@mitre.org","published":"1997-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DG/UX finger daemon allows remote command execution through shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:data_general:dg_ux:*:*:*:*:*:*:*:*","matchCriteriaId":"CC2E7BDE-DE44-406E-955B-5D70659FA7DF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0153","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"}]}]}],"references":[{"url":"http://www.osvdb.org/1666","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0154","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E701AB0D-E335-47DF-A0CA-607D5C6E9255"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0154","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0155","sourceIdentifier":"cve@mitre.org","published":"1995-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ghostscript command with the -dSAFER option allows remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:2.6:*:*:*:*:*:*:*","matchCriteriaId":"1776085C-BF6C-4492-884C-09DEC1F46548"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:3.22:*:*:*:*:*:*:*","matchCriteriaId":"2244ABF5-6D70-44A8-B9A2-FBFD5098B8FE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0155","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0156","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wu-ftpd FTP daemon allows any user and password combination."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:*:*:*:*:*:*:*:*","matchCriteriaId":"E0326E91-1E2D-4F29-BFEA-11BE48640AE8"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0156","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0157","sourceIdentifier":"cve@mitre.org","published":"1998-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*","matchCriteriaId":"655BB9C1-BA90-452E-A9C8-9B1E15B99650"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"}]}]}],"references":[{"url":"http://www.osvdb.org/1097","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0158","sourceIdentifier":"cve@mitre.org","published":"1998-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"1EEDB9DD-C862-4783-9F96-88836424B298"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/770/pixmgrfile-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/685","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/770/pixmgrfile-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0159","sourceIdentifier":"cve@mitre.org","published":"1998-08-12T04:00:00.000","lastModified":"2025-08-27T19:15:33.120","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login).  This applies to some IOS 9.x, 10.x, and 11.x releases."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.5,"baseSeverity":"LOW"},"exploitabilityScore":2.1,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.1:*:*:*:*:*:*:*","matchCriteriaId":"2E9A00D5-A594-4C64-B982-10CB4C554F51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0\\(20.3\\):*:*:*:*:*:*:*","matchCriteriaId":"86AFAF8F-B8E2-453B-895C-F94138720745"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(15\\)ca:*:*:*:*:*:*:*","matchCriteriaId":"841513AE-7521-4670-8438-AE5EB70F3A48"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"FF3E8F79-6177-453C-99B5-BC9BC7670869"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"4B244655-A6A5-40D0-A0D1-34C814DA9389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"CA064273-1A6E-4303-BAAB-F585691EF9BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\)cc:*:*:*:*:*:*:*","matchCriteriaId":"0A8158E2-0DFE-479B-B085-9775FF700C85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\)ct:*:*:*:*:*:*:*","matchCriteriaId":"29CA3070-B75D-4E56-A338-E10F5509394E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa3:*:*:*:*:*:*:*","matchCriteriaId":"099CFED1-0E2F-46B2-8136-BFA146EB9A00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)p:*:*:*:*:*:*:*","matchCriteriaId":"047F9781-38B8-488C-B999-A3CA6BDB639C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"3E3586C0-64AF-4584-8F56-7E0756B4A521"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"9B784C9F-79EE-4D08-9D03-985EC7E378FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"FFBA8825-442E-4CAD-A9B2-4DD8546F35F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2A6F8329-15C7-4FED-A61D-5AF4F3A33976"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\)ed:*:*:*:*:*:*:*","matchCriteriaId":"CD13732A-DAE0-4D5B-9DAC-6D2CF391220D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\)t:*:*:*:*:*:*:*","matchCriteriaId":"A53DE80A-5865-4514-BE14-BA5992EE7BDA"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0159","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0160","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1:*:*:*:*:*:*:*","matchCriteriaId":"96C6FB91-22FC-4DA9-B19A-8065D8B89F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.1:*:*:*:*:*:*:*","matchCriteriaId":"2E9A00D5-A594-4C64-B982-10CB4C554F51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3:*:*:*:*:*:*:*","matchCriteriaId":"3824A6CC-5C3A-4146-9CDD-B7B213527552"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D626B494-6210-4F74-8D17-BA480B6665C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"}]}]}],"references":[{"url":"http://www.osvdb.org/1099","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0161","sourceIdentifier":"cve@mitre.org","published":"1995-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(3.4\\):*:*:*:*:*:*:*","matchCriteriaId":"630947E3-6D04-4A99-AAB3-B988BD513885"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:10.3\\(4.2\\):*:*:*:*:*:*:*","matchCriteriaId":"850D8A04-E853-4570-A81D-EC053C47BB4B"}]}]}],"references":[{"url":"http://www.osvdb.org/797","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0162","sourceIdentifier":"cve@mitre.org","published":"1998-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"established\" keyword in some Cisco IOS software allowed an attacker to bypass filtering."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0162","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0163","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In older versions of Sendmail, an attacker could use a pipe character to execute root commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:*:*:*:*:*:*:*:*","matchCriteriaId":"887964FC-405F-40DB-B848-806748BA6FE8"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0163","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0164","sourceIdentifier":"cve@mitre.org","published":"1995-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in the Solaris ps command allows an attacker to overwrite critical files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"}]}]}],"references":[{"url":"http://www.osvdb.org/8346","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0165","sourceIdentifier":"cve@mitre.org","published":"1997-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFS cache poisoning."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:nfs:*:*:*:*:*:*:*:*","matchCriteriaId":"A53226D2-00D1-4D69-AF1A-A9EBD5B7DE5F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDE2EAC5-0657-48FD-B4F8-D2DB6AABAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2839042D-7706-4059-B069-72E36297ECEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3791C6C1-2B30-4746-B4D5-A728914C3589"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C25D2DE-7ED7-47E3-A49F-1F42B57500CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0165","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0166","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFS allows users to use a \"cd ..\" command to access other directories besides the exported file system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:nfs:*:*:*:*:*:*:*:*","matchCriteriaId":"A53226D2-00D1-4D69-AF1A-A9EBD5B7DE5F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0166","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0167","sourceIdentifier":"cve@mitre.org","published":"1991-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0167","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0168","sourceIdentifier":"cve@mitre.org","published":"1992-06-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place.  For example, NFS file systems could be mounted through the portmapper despite export restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0168","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0169","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFS allows attackers to read and write any file on the system by specifying a false UID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:nfs:*:*:*:*:*:*:*:*","matchCriteriaId":"A53226D2-00D1-4D69-AF1A-A9EBD5B7DE5F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0169","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0170","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:*:*:*:*:*:*:*:*","matchCriteriaId":"EE8B41E9-5792-4ADA-A140-2E709321E147"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0170","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0171","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in syslog by sending it a large number of superfluous messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0171","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0172","sourceIdentifier":"cve@mitre.org","published":"1995-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FormMail CGI program allows remote execution of commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:*:*:*:*:*:*:*:*","matchCriteriaId":"0D0DEA87-03B6-4290-ACE7-C5A19F68543B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0173","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FormMail CGI program can be used by web servers other than the host server that the program resides on."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:*:*:*:*:*:*:*:*","matchCriteriaId":"0D0DEA87-03B6-4290-ACE7-C5A19F68543B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0173","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0174","sourceIdentifier":"cve@mitre.org","published":"1997-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.05:*:*:*:*:*:*:*","matchCriteriaId":"494AFC1E-67A3-41CA-B920-B8F778B68A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0174","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0175","sourceIdentifier":"cve@mitre.org","published":"1996-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5E61D92-5594-41F2-8F38-1F6A832C94CF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0175","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0176","sourceIdentifier":"cve@mitre.org","published":"1997-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Webgais program allows a remote user to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webgais_development_team:webgais:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0b2","matchCriteriaId":"41824BA4-C6FF-4928-B953-B11BF92D32B4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0176","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0177","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2B9C3D18-65A3-4150-859A-4628EB5F7AD3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0177","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0178","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:oreilly_website:1.1e:*:*:*:*:*:*:*","matchCriteriaId":"D94BA398-D2BD-4A9B-B63E-906331ACAB31"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/1997_1/0021.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/295","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/1997_1/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0179","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT crashes or locks up when a Samba client executes a \"cd ..\" command on a file share."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-17"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ140818","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ140818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0180","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"in.rshd allows users to login with a NULL username and execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0180","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0181","sourceIdentifier":"cve@mitre.org","published":"1994-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rpc.walld:rpc.walld:*:*:*:*:*:*:*:*","matchCriteriaId":"68788632-AEEA-40AF-B3EA-B2B1AB3928A2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0181","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0182","sourceIdentifier":"cve@mitre.org","published":"1997-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:p2:*:*:*:*:*:*","versionEndIncluding":"1.9.17","matchCriteriaId":"B89279AD-AAA6-478D-BAEA-B09D5AC043BB"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/h-110.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/h-110.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0183","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux implementations of TFTP would allow access to files outside the restricted directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftp:tftp:*:*:*:*:*:*:*:*","matchCriteriaId":"A3B2D344-2B6C-4BEA-81DB-A562E427DA24"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0183","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0184","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0185","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/156","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0186","sourceIdentifier":"cve@mitre.org","published":"1998-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"}]}]}],"references":[{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-238/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0187","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:55.743","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-0022.  Reason: This candidate is a duplicate of CVE-1999-0022.  Notes: All CVE users should reference CVE-1999-0022 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0188","sourceIdentifier":"cve@mitre.org","published":"1998-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The passwd command in Solaris can be subjected to a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/182","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0189","sourceIdentifier":"cve@mitre.org","published":"1997-06-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/142","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0190","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/167","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0191","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS newdsn.exe CGI script allows remote users to overwrite files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"}]}]}],"references":[{"url":"http://www.osvdb.org/275","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0192","sourceIdentifier":"cve@mitre.org","published":"1997-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.2:*:*:*:*:*:*:*","matchCriteriaId":"852B55FE-8180-4357-B717-399C16954C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"125918E7-53BB-407A-8D95-5D95CDF39A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.9:*:*:*:*:*:*:*","matchCriteriaId":"15CB96AA-7CC1-4F01-8E9A-F85CD851594A"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC3B1DD9-10B5-40FE-AE56-D068C41653DE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0193","sourceIdentifier":"cve@mitre.org","published":"1997-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ascend:cascadeview_ux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FBDA4DDC-9DA4-4815-835A-8FFB293AABD2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0193","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0194","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in in.comsat allows attackers to generate messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0194","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0195","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0195","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0196","sourceIdentifier":"cve@mitre.org","published":"1997-07-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webgais_development_team:webgais:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64962BF8-4FB6-4961-A3D1-A1C6877B5A50"}]}]}],"references":[{"url":"http://www.osvdb.org/237","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2077","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0197","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"finger 0@host on some systems may print information on some user accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8378","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0198","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"finger .@host on some systems may print information on some user accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8378","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0200","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=137853","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=137853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0201","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A quote cwd command on FTP servers can reveal the full path of the home directory of the \"ftp\" user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftp:ftp:*:*:*:*:*:*:*:*","matchCriteriaId":"30D7F58F-4C55-4D19-984C-79B6C9525BEB"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0201","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0202","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GNU tar command, when used in FTP sessions, may allow an attacker to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:wu-ftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7CD8D2AC-B757-413B-9450-5E0377B166AE"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0202","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0203","sourceIdentifier":"cve@mitre.org","published":"1995-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Sendmail, attackers can gain root privileges via SMTP by specifying an improper \"mail from\" address and an invalid \"rcpt to\" address that would cause the mail to bounce to a program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.6.10:*:*:*:*:*:*:*","matchCriteriaId":"C39E29CD-70F7-4C96-93DD-18BD4C6DDFA4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0203","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0204","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail 8.6.9 allows remote attackers to execute root commands, using ident."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.6.9:*:*:*:*:*:*:*","matchCriteriaId":"64735DDE-2FA2-4C30-80D7-E5D7764280C4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0204","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0205","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Sendmail 8.6.11 and 8.6.12."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.6.11:*:*:*:*:*:*:*","matchCriteriaId":"7A7D2130-328B-4D1D-A4D5-F4F9610660FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.6.12:*:*:*:*:*:*:*","matchCriteriaId":"CDC370E2-6F73-4B80-BBDD-C338E155F502"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0205","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0206","sourceIdentifier":"cve@mitre.org","published":"1996-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8:*:*:*:*:*:*:*","matchCriteriaId":"C973CF06-BEE8-4D79-8649-1510E9EFC29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"56D2BAF2-F430-41A1-8DEE-1D9CB2A56C32"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0206","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0207","sourceIdentifier":"cve@mitre.org","published":"1994-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attacker can execute commands through Majordomo using the Reply-To field and a \"lists\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majordomo:1.90:*:*:*:*:*:*:*","matchCriteriaId":"31B44E23-8964-4BE4-9F22-2C7AB0C2F682"},{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majordomo:1.91:*:*:*:*:*:*:*","matchCriteriaId":"E6D374F2-8551-4B44-BA96-B7D1F44920D5"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0207","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0208","sourceIdentifier":"cve@mitre.org","published":"1995-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.ypupdated (NIS) allows remote users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3:*:*:*:*:*:*:*","matchCriteriaId":"FE9504A8-CCF7-4A7E-B85F-F5801E9BCA0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4:*:*:*:*:*:*:*","matchCriteriaId":"C6AACDE0-00BA-4A29-8305-5AA0A4BC273C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:asl_ux_4800:*:*:*:*:*:*:*:*","matchCriteriaId":"81B329CB-C41D-4487-A492-C34DC68899B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:ews-ux_v:*:*:*:*:*:*:*:*","matchCriteriaId":"AADD2657-6791-45DD-95C4-F437FCEF4357"},{"vulnerable":true,"criteria":"cpe:2.3:o:nec:up-ux_v:*:*:*:*:*:*:*:*","matchCriteriaId":"B10E6A9A-8C15-4349-AD4F-A24F65991034"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0208","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0209","sourceIdentifier":"cve@mitre.org","published":"1990-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SunView (SunTools) selection_svc facility allows remote users to read files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDE2EAC5-0657-48FD-B4F8-D2DB6AABAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2839042D-7706-4059-B069-72E36297ECEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3791C6C1-2B30-4746-B4D5-A728914C3589"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C25D2DE-7ED7-47E3-A49F-1F42B57500CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0210","sourceIdentifier":"cve@mitre.org","published":"1997-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88053459921223&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91547759121289&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-99-05-statd-automountd.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/235","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9910-104","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88053459921223&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91547759121289&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-99-05-statd-automountd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9910-104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0211","sourceIdentifier":"cve@mitre.org","published":"1994-02-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/24","source":"cve@mitre.org"},{"url":"https://vuls.cert.org/confluence/pages/viewpage.action?pageId=96665790","source":"cve@mitre.org"},{"url":"https://vuls.cert.org/confluence/pages/viewpage.action?pageId=97124517","source":"cve@mitre.org"},{"url":"https://vuls.cert.org/confluence/pages/viewpage.action?pageId=97124527","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuls.cert.org/confluence/pages/viewpage.action?pageId=96665790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuls.cert.org/confluence/pages/viewpage.action?pageId=97124517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://vuls.cert.org/confluence/pages/viewpage.action?pageId=97124527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0212","sourceIdentifier":"cve@mitre.org","published":"1998-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/168","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-048.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/i-048.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-1999-0213","sourceIdentifier":"cve@mitre.org","published":"1998-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0214","sourceIdentifier":"cve@mitre.org","published":"1992-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service by sending forged ICMP unreachable packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0214","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0215","sourceIdentifier":"cve@mitre.org","published":"1998-10-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Routed allows attackers to append data to files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3:*:*:*:*:*:*:*","matchCriteriaId":"FE9504A8-CCF7-4A7E-B85F-F5801E9BCA0E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4:*:*:*:*:*:*:*","matchCriteriaId":"C6AACDE0-00BA-4A29-8305-5AA0A4BC273C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981004-01-PX","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-012.shtml","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981004-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-012.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0216","sourceIdentifier":"cve@mitre.org","published":"1997-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service of inetd on Linux through SYN and RST packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:inet:5.01:*:*:*:*:*:*:*","matchCriteriaId":"679EB37A-DC20-4EB0-BF1E-664BF53AC054"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0216","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0217","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"27C5561B-F8AE-4AD2-BD1C-E9089F315277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3a1:*:*:*:*:*:*:*","matchCriteriaId":"08BCE3D9-1B13-41DC-8497-F93C41672394"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1psr_a:*:*:*:*:*:*:*","matchCriteriaId":"FF90C17C-5B10-45D4-8296-D00EAFA1EB8E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0218","sourceIdentifier":"cve@mitre.org","published":"1995-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Livingston portmaster machines could be rebooted via a series of commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:livingston_portmaster:portmaster:*:*:*:*:*:*:*:*","matchCriteriaId":"77653D5B-96E7-4CEB-8E53-E20252C57246"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0219","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5:*:*:*:*:*:*:*","matchCriteriaId":"10A8CC65-6AD3-4CB4-A8D7-F91DC9048F7B"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92574916930144&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92582581330282&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/205","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92574916930144&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92582581330282&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0220","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Attackers can do a denial of service of IRC by crashing the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0220","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0221","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service of Ascend routers through port 150 (remote administration)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_routers:*:*:*:*:*:*:*:*","matchCriteriaId":"549685E5-F9DE-48A0-BB41-EB4580FD8ECD"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0221","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0222","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:*:*:*:*:*:*:*:*","matchCriteriaId":"EF6E96F8-E95E-4F3A-8CAF-936327BA3E54"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/60159","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/60159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0223","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?patchid=103291&collection=fpatches","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1878","source":"cve@mitre.org"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?patchid=103291&collection=fpatches","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0224","sourceIdentifier":"cve@mitre.org","published":"1999-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Windows NT messenger service through a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0224","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0225","sourceIdentifier":"cve@mitre.org","published":"1998-02-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=180963","source":"cve@mitre.org"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/25_windows_nt_dos_adv.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=180963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/25_windows_nt_dos_adv.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0226","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-19"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:-:*:*:*:*:*:*:*","matchCriteriaId":"46E2D695-54F5-4D3E-B1F8-CABE51AE6064"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0226","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0227","sourceIdentifier":"cve@mitre.org","published":"1997-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Access violation in LSASS.EXE (LSA/LSARPC) program in Windows NT allows a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154087","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0228","sourceIdentifier":"cve@mitre.org","published":"1997-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in RPCSS.EXE program (RPC Locator) in Windows NT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ162567","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ162567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0229","sourceIdentifier":"cve@mitre.org","published":"1999-05-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Windows NT IIS server using ..\\.."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","matchCriteriaId":"CE9D333C-76E2-4BD9-B98B-5CB96363AB89"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0230","sourceIdentifier":"cve@mitre.org","published":"1997-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cisco 7xx routers through the telnet service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1:*:*:*:*:*:*:*","matchCriteriaId":"96C6FB91-22FC-4DA9-B19A-8065D8B89F03"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"06CF972E-A755-4FB7-BFD7-9F4CDDEA4F1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9B4FC3E9-E88E-4C87-ADA4-AC9370BBFD32"}]}]}],"references":[{"url":"http://www.osvdb.org/1102","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0231","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0EB72547-C2E9-43EA-B81A-DFD6F4829103"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0231","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0232","sourceIdentifier":"cve@mitre.org","published":"1995-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NCSA WebServer (version 1.5c) gives remote access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa_httpd_project:ncsa_httpd:1.5c:*:*:*:*:*:*:*","matchCriteriaId":"BB92CBD1-8E7C-4DAC-9FA5-D04643F62D98"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0232","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0233","sourceIdentifier":"cve@mitre.org","published":"1996-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DB3FA68-3ACE-4051-9FD5-34F9A30EB226"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ148188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ155056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0234","sourceIdentifier":"cve@mitre.org","published":"1996-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bash treats any character with a value of 255 as a command separator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:yggdrasil:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"7467132F-CA92-462F-8E2C-E0EEBD956E7B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"445EECD3-2DB9-43D1-B26F-0979A3C02D45"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0234","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0235","sourceIdentifier":"cve@mitre.org","published":"1995-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NCSA WebServer (1.4.1 and below) gives remote access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:ncsa_web_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7BB3C7C7-F1F0-4161-8223-631764802083"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:ncsa_web_server:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D3282BD0-E5F4-49BA-81C8-16A8AF9C37A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:ncsa_web_server:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E14B51-26DF-496D-BEAA-82AA3FF90E43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0236","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-20T01:37:25.860","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0","matchCriteriaId":"9A453C77-BCCD-4BE2-BE55-FE5E21F9EEBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:illinois:ncsa_httpd:-:*:*:*:*:*:*:*","matchCriteriaId":"8D345E6D-976C-4D9C-8BF5-E4D41983A548"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0236","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-1999-0237","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote execution of arbitrary commands through Guestbook CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcom:cgi_guestbook:*:*:*:*:*:*:*:*","matchCriteriaId":"A1E39DAD-2870-4BB8-A146-061F95AC2D0B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0238","sourceIdentifier":"cve@mitre.org","published":"1997-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"php.cgi allows attackers to read any file on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0238","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0239","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape FastTrack Web server lists files when a lowercase \"get\" command is used instead of an uppercase GET."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"63A12C94-E68C-48E2-B88E-571C4FD9099C"}]}]}],"references":[{"url":"http://www.osvdb.org/122","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1731","source":"nvd@nist.gov","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-1999-0240","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0240","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0241","sourceIdentifier":"cve@mitre.org","published":"1995-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:*:*:*:*:*:*:*:*","matchCriteriaId":"BD822532-8A72-44E2-9C55-6E91E14E5A29"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0241","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0242","sourceIdentifier":"cve@mitre.org","published":"1995-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can access mail files via POP3 in some Linux systems that are using shadow passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"F432C6C2-8676-4DD5-B9E6-71F6C164EF9D"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0242","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0243","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux cfingerd could be exploited to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.geocrawler.com/archives/3/92/1996/9/0/2217716/","source":"cve@mitre.org"},{"url":"http://www.geocrawler.com/archives/3/92/1996/9/0/2217716/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0244","sourceIdentifier":"cve@mitre.org","published":"1997-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Livingston RADIUS code has a buffer overflow which can allow remote execution of commands as root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:1.x:*:*:*:*:*:*:*","matchCriteriaId":"8DA8184B-7BA4-4D71-BA0F-AC50C21E4BAC"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0245","sourceIdentifier":"cve@mitre.org","published":"1995-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some configurations of NIS+ in Linux allowed attackers to log in as the user \"+\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0245","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0246","sourceIdentifier":"cve@mitre.org","published":"1996-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Remote Watch allows a remote user to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0247","sourceIdentifier":"cve@mitre.org","published":"1997-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4:*:*:*:*:*:*:*","matchCriteriaId":"BFA721E1-1ED5-4855-9305-5BF6EAE84A8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*","matchCriteriaId":"E5D0063D-01CE-49E2-A19A-FA861F3C40CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*","matchCriteriaId":"967E86C5-3635-49FF-A98A-C9B2BC85A812"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*","matchCriteriaId":"14DBB010-4064-4B46-834C-6FD5F1FE78FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*","matchCriteriaId":"EEE0D317-4F02-4896-95FC-20B64EB3A91F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9915A668-8E8C-4EC8-A72A-6937EC7D3496"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5658CF74-5AF1-4161-BF4C-6A394F2AA164"}]}]}],"references":[{"url":"http://www.nai.com/nai_labs/asp_set/advisory/17_inn_avd.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1443","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/17_inn_avd.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0248","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"}]}]}],"references":[{"url":"http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html","source":"cve@mitre.org"},{"url":"http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1","source":"cve@mitre.org"},{"url":"http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0249","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT RSHSVC program allows remote users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0249","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0250","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Qmail through long SMTP commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dan_bernstein:qmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.01","matchCriteriaId":"0727C0E9-5394-4DDE-9AAD-97C8E285B249"}]}]}],"references":[{"url":"http://cr.yp.to/qmail/venema.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602558319024&w=2","source":"cve@mitre.org"},{"url":"http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html","source":"cve@mitre.org"},{"url":"http://cr.yp.to/qmail/venema.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602558319024&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ornl.gov/its/archives/mailing-lists/qmail/1997/06/threads.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0251","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in talk program allows remote attackers to disrupt a user's display."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talkd:talkd:*:*:*:*:*:*:*:*","matchCriteriaId":"55FDFF77-AD14-47CE-8951-06441820BDF1"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0251","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0252","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in listserv allows arbitrary command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lsoft:listserv:*:*:*:*:*:*:*:*","matchCriteriaId":"4231DEB1-4E80-4513-B267-C5F39EBABD59"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0252","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0253","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6DB3FA68-3ACE-4051-9FD5-34F9A30EB226"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E701AB0D-E335-47DF-A0CA-607D5C6E9255"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0254","sourceIdentifier":"cve@mitre.org","published":"1998-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-239/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0255","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ircd allows arbitrary command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0256","sourceIdentifier":"cve@mitre.org","published":"1998-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in War FTP allows remote execution of commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jgaa:warftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.66","matchCriteriaId":"423A7921-1AD4-48F3-9049-0E9772CF6EA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://www.osvdb.org/875","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0257","sourceIdentifier":"cve@mitre.org","published":"1998-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nestea variation of teardrop IP fragmentation denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0257","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0258","sourceIdentifier":"cve@mitre.org","published":"1998-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bonk variation of teardrop IP fragmentation denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://marc.info/?l=ntbugtraq&m=88901842000424&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=ntbugtraq&m=88901842000424&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0259","sourceIdentifier":"cve@mitre.org","published":"1997-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cfingerd lists all users on a system via search.**@target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F57CBC3C-0709-48A5-9DCA-2055681F378F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0259","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0260","sourceIdentifier":"cve@mitre.org","published":"1996-12-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jj CGI program allows command execution via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:renaud_deraison:jj:*:*:*:*:*:*:*:*","matchCriteriaId":"886EA3F0-F1DF-4C4C-BF57-0205FC0AF3B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0260","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0261","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netmanager Chameleon SMTPd has several buffer overflows that cause a crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.insecure.org/sploits/netmanage.chameleon.overflows.html","source":"cve@mitre.org"},{"url":"http://www.insecure.org/sploits/netmanage.chameleon.overflows.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0262","sourceIdentifier":"cve@mitre.org","published":"1998-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:renaud_deraison:faxsurvey:*:*:*:*:*:*:*:*","matchCriteriaId":"1932C5E7-E0B9-4B92-BE56-578A1D7618DE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1532","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0263","sourceIdentifier":"cve@mitre.org","published":"1998-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris SUNWadmap can be exploited to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/173","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0264","sourceIdentifier":"cve@mitre.org","published":"1998-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htmlscript CGI program allows remote read access to files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:miva:htmlscript:*:*:*:*:*:*:*:*","matchCriteriaId":"9DA9DC24-2F62-4BD1-BD41-FAFEDD6761B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0265","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICMP redirect messages may crash or lock up a host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microware:os-9:*:*:*:*:*:*:*:*","matchCriteriaId":"9AAE6365-E516-4ABD-9FA2-1398F113CEE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:3.12:*:*:*:*:*:*:*","matchCriteriaId":"B49AA1BC-2868-4121-87BE-D98330D65A3C"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154174","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ154174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0266","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The info2www CGI script allows remote file access or remote command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roar_smith:info2www:*:*:*:*:*:*:*:*","matchCriteriaId":"B5D125BC-22FE-404F-8F43-41882672ECD9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1995","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0267","sourceIdentifier":"cve@mitre.org","published":"1997-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NCSA HTTP daemon v1.3 allows remote command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:ncsa_httpd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6D993B74-BF91-4962-A126-5F2D82CDF946"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0267","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0268","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MetaInfo MetaWeb web server allows users to upload, execute, and read scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metainfo:metaweb:*:*:*:*:*:*:*:*","matchCriteriaId":"96ACD6E6-6B26-4B24-85B0-1452BD24DB0F"}]}]}],"references":[{"url":"http://www.osvdb.org/110","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3969","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0269","sourceIdentifier":"cve@mitre.org","published":"1998-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Enterprise servers may list files through the PageServices query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EF437206-7696-4583-A6DC-A622F02001EF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0270","sourceIdentifier":"cve@mitre.org","published":"1998-04-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as \"pfdisplay\") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980401-01-P","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-041.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/64","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/810","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980401-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/i-041.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/64","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0271","sourceIdentifier":"cve@mitre.org","published":"1998-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Progressive Networks Real Video server (pnserver) can be crashed remotely."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0271","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0272","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Slmail v2.5 through the POP3 port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slmail:slmail:3.0.2421:*:*:*:*:*:*:*","matchCriteriaId":"20CDF6A4-B813-4971-AD81-1B493DF03EB1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0272","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0273","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service through Solaris 2.5.1 telnet by sending ^D characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0273","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0274","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Windows NT DNS servers through malicious packet which contains a response to a query that wasn't made."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0274","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0275","sourceIdentifier":"cve@mitre.org","published":"1997-06-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Windows NT DNS servers by flooding port 53 with too many characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0276","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mSQL v2.0.1 and below allows remote execution through a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.:*:*:*:*:*:*:*","matchCriteriaId":"80EB7396-8E0E-42FE-9C00-5B1666E024B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D9A90C0-DF6F-44A7-B758-DB209D1F526E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0276","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0277","sourceIdentifier":"cve@mitre.org","published":"1996-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WorkMan program can be used to overwrite any file to get root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0277","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0278","sourceIdentifier":"cve@mitre.org","published":"1998-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In IIS, remote attackers can obtain source code for ASP files by appending \"::$DATA\" to the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-003","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A913","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0279","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excite for Web Servers (EWS) allows remote command execution via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:excite:ews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F69DC10-474D-44C8-BE36-7F77EFBB0955"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0279","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0280","sourceIdentifier":"cve@mitre.org","published":"1997-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote command execution in Microsoft Internet Explorer using .lnk and .url files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0281","sourceIdentifier":"cve@mitre.org","published":"1997-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in IIS using long URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E701AB0D-E335-47DF-A0CA-607D5C6E9255"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0281","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0282","sourceIdentifier":"cve@mitre.org","published":"1997-09-23T04:00:00.000","lastModified":"2023-11-07T01:54:56.640","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-1584, CVE-1999-1586.  Reason: This candidate combined references from one issue with the description from another issue.  Notes: Users should consult CVE-1999-1584 and CVE-1999-1586 to obtain the appropriate name.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0283","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Web Server would allow remote users to obtain the source code for CGI programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88256790401004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88256790401004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0284","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_mail_server:*:*:*:*:*:*:*:*","matchCriteriaId":"42E18F8C-4D45-4404-9DC0-8DDF24E18282"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:4.0:-:*:*:*:*:*:*","matchCriteriaId":"1122C21D-C67C-4702-A084-A0DFBA03A761"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*","matchCriteriaId":"D823C88E-8560-469B-8655-4755E0484F14"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0284","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0285","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0285","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0286","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0286","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0287","sourceIdentifier":"cve@mitre.org","published":"1999-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the Wguest CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcom:cgi_guestbook:*:*:*:*:*:*:*:*","matchCriteriaId":"A1E39DAD-2870-4BB8-A146-061F95AC2D0B"}]}]}],"references":[{"url":"https://marc.info/?l=ntbugtraq&m=92368828704896&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=ntbugtraq&m=92368828704896&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0288","sourceIdentifier":"cve@mitre.org","published":"1998-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"}]}]}],"references":[{"url":"http://safenetworks.com/Windows/wins.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1233","source":"cve@mitre.org"},{"url":"http://safenetworks.com/Windows/wins.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0289","sourceIdentifier":"cve@mitre.org","published":"1999-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x86:*","matchCriteriaId":"60366048-32FE-4081-A852-04319FD7A52C"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0289","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0290","sourceIdentifier":"cve@mitre.org","published":"1998-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:*:*:*:*:*:*:*:*","matchCriteriaId":"E13C7802-12EA-41D8-B145-43621072999A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0291","sourceIdentifier":"cve@mitre.org","published":"1999-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WinGate proxy is installed without a password, which allows remote attackers to redirect connections without authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:*:*:*:*:*:*:*:*","matchCriteriaId":"E13C7802-12EA-41D8-B145-43621072999A"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0291","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0292","sourceIdentifier":"cve@mitre.org","published":"1997-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service through Winpopup using large user names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0292","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0293","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AAA authentication on Cisco systems allows attackers to execute commands without authorization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*","matchCriteriaId":"B6230A85-30D2-4934-A8A0-11499B7B09F8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0293","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0294","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"All records in a WINS database can be deleted through SNMP for a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:wins:*:*:*:*:*:*:*:*","matchCriteriaId":"E4E3F978-8439-40C5-B4F2-8DB21941D5FD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0294","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0295","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0296","sourceIdentifier":"cve@mitre.org","published":"1998-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris volrmmount program allows attackers to read any file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/162","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0297","sourceIdentifier":"cve@mitre.org","published":"1996-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Vixie Cron library up to version 3.0 allows local users to obtain root access via a long environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_vixie:vixie_cron:3.0:*:*:*:*:*:*:*","matchCriteriaId":"41EA671E-F3F2-464A-8FAB-6C9D8DB9E002"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0298","sourceIdentifier":"cve@mitre.org","published":"1997-02-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F3698FC7-C9A6-4AA5-8569-CF96128A63AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A5A8D289-2310-4583-95F0-0CB940B6CBF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6325268D-C355-4DD3-A839-6C3CF5435B0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"http://www.nai.com/nai_labs/asp_set/advisory/06_ypbindsetme_adv.asp","source":"cve@mitre.org"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/06_ypbindsetme_adv.asp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0299","sourceIdentifier":"cve@mitre.org","published":"1997-03-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD lpd through long DNS hostnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"}]}]}],"references":[{"url":"http://www.osvdb.org/6093","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0300","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0301","sourceIdentifier":"cve@mitre.org","published":"1997-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SunOS/Solaris ps command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0302","sourceIdentifier":"cve@mitre.org","published":"1998-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/176","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0303","sourceIdentifier":"cve@mitre.org","published":"1998-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7FE849FB-8F06-4430-B646-6C7024EADD4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.3:u1:*:*:*:*:*:*","matchCriteriaId":"D3373737-C6FC-4D19-845C-B0382AE1DC48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.4:*:jl:*:*:*:*:*","matchCriteriaId":"10EC0267-500D-496F-9D88-7F93F7D4A88B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0303","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0304","sourceIdentifier":"cve@mitre.org","published":"1998-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mmap function in BSD allows local attackers in the kmem group to modify memory through devices."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0304","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0305","sourceIdentifier":"cve@mitre.org","published":"1998-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"}]}]}],"references":[{"url":"http://www.openbsd.org/advisories/sourceroute.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11502","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/736","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/advisories/sourceroute.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0306","sourceIdentifier":"cve@mitre.org","published":"1997-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"buffer overflow in HP xlock program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:10.24:*:*:*:*:*:*:*","matchCriteriaId":"D9B7C178-4BE6-4397-A4E2-01375E4CA978"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0307","sourceIdentifier":"cve@mitre.org","published":"2000-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HP-UX cstm program allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0307","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0308","sourceIdentifier":"cve@mitre.org","published":"1996-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX gwind program allows users to modify arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8:*:*:*:*:*:*:*","matchCriteriaId":"19587780-3515-484C-BCB4-F2BB90106C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9410-018","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9410-018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0309","sourceIdentifier":"cve@mitre.org","published":"1997-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX vgdisplay program gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0310","sourceIdentifier":"cve@mitre.org","published":"1998-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH 1.2.25 on HP-UX allows access to new user accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0310","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0311","sourceIdentifier":"cve@mitre.org","published":"1996-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fpkg2swpk in HP-UX allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9612-042","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9612-042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0312","sourceIdentifier":"cve@mitre.org","published":"1993-01-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP ypbind allows attackers with root privileges to modify NIS data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0312","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0313","sourceIdentifier":"cve@mitre.org","published":"1998-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"disk_bandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:s2mp:*:*:*:*:*","matchCriteriaId":"666EAE84-F406-41F9-8C80-A349E83BCB64"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/936","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/213/exploit","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/214","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1441","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/213/exploit","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0314","sourceIdentifier":"cve@mitre.org","published":"1998-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/213","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/213/exploit","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1199","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980701-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/213/exploit","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0315","sourceIdentifier":"cve@mitre.org","published":"1997-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris fdformat command gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0316","sourceIdentifier":"cve@mitre.org","published":"1995-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux splitvt command gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sam_lantinga:splitvt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"2E29634F-66FE-421C-B20B-26DDDB929B58"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0317","sourceIdentifier":"cve@mitre.org","published":"1999-11-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux su command gives root access to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0317","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0318","sourceIdentifier":"cve@mitre.org","published":"1997-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*","matchCriteriaId":"0BAE3D61-9D78-46D7-87EB-5A33ECF86F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0319","sourceIdentifier":"cve@mitre.org","published":"1996-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0319","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0320","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/166","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0321","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris kcms_configure command allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0321","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0322","sourceIdentifier":"cve@mitre.org","published":"1997-10-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The open() function in FreeBSD allows local attackers to write to arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}]}]}],"references":[{"url":"http://www.osvdb.org/6092","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0323","sourceIdentifier":"cve@mitre.org","published":"1998-02-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD mmap function allows users to modify append-only or immutable files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1998-003.txt.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1998-003.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0324","sourceIdentifier":"cve@mitre.org","published":"1996-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ppl program in HP-UX allows local users to create root files through symlinks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-053","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9702-053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0325","sourceIdentifier":"cve@mitre.org","published":"1995-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vhe_u_mnt program in HP-UX allows local users to create root files through symlinks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8:*:*:*:*:*:*:*","matchCriteriaId":"19587780-3515-484C-BCB4-F2BB90106C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9406-013","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9406-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0326","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP-UX mediainit program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9710-071","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9710-071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0327","sourceIdentifier":"cve@mitre.org","published":"1997-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI syserr program allows local users to corrupt files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0328","sourceIdentifier":"cve@mitre.org","published":"1997-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI permissions program allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19971103-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0329","sourceIdentifier":"cve@mitre.org","published":"1998-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI mediad program allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980602-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980602-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0330","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux bdash game has a buffer overflow that allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=87602558319119&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=87602558319119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0331","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Explorer 4.0(1)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0331","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0332","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NetMeeting allows denial of service and remote command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3029C5D3-431E-4EBB-9D54-C9FDA557797B"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ184346","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ184346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0333","sourceIdentifier":"cve@mitre.org","published":"1998-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0334","sourceIdentifier":"cve@mitre.org","published":"1993-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0334","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0335","sourceIdentifier":"cve@mitre.org","published":"1996-08-01T04:00:00.000","lastModified":"2023-11-07T01:54:57.050","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0336","sourceIdentifier":"cve@mitre.org","published":"1996-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mstm in HP-UX allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0337","sourceIdentifier":"cve@mitre.org","published":"1994-06-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"73CE931A-1500-4450-B65A-591CAA3225AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5F40A32B-3EF8-41D4-B6EC-3DC82D550365"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"28B1C99E-D05A-4778-8650-39B63CC8B2F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0337","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0338","sourceIdentifier":"cve@mitre.org","published":"1994-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX Licensed Program Product performance tools allow local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0338","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0339","sourceIdentifier":"cve@mitre.org","published":"1998-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0340","sourceIdentifier":"cve@mitre.org","published":"1997-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux Slackware crond program allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0340","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0341","sourceIdentifier":"cve@mitre.org","published":"1998-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Linux mail program \"deliver\" allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A632089-47D7-410D-AE12-F801193FA18F"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F3698FC7-C9A6-4AA5-8569-CF96128A63AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A5A8D289-2310-4583-95F0-0CB940B6CBF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6325268D-C355-4DD3-A839-6C3CF5435B0C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0341","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0342","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux PAM modules allow local users to gain root access using temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pam:pam:*:*:*:*:*:*:*:*","versionEndIncluding":"0.64","matchCriteriaId":"FB26C1A0-AC69-429D-998A-EFC193ECC7B0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0343","sourceIdentifier":"cve@mitre.org","published":"1998-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A malicious Palace server can force a client to execute arbitrary programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:palace:palace_client:*:*:*:*:*:*:*:*","matchCriteriaId":"26E30443-D298-43AF-9C40-397BF6F5386D"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0344","sourceIdentifier":"cve@mitre.org","published":"1998-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NT users can gain debug-level access on a system process using the Sechole exploit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ190288","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-009","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ190288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0345","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"44EFD22E-02C9-4B80-8934-A9AC8DD858CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1B4D4A5-25EB-48FE-BDFD-A274CE802648"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3A037F1-98AD-47CC-8D83-B42666E1B61E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A95C1672-F798-44D2-94A1-19492C395FF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3:*:*:*:*:*:*:*","matchCriteriaId":"66086A58-91FC-4203-B2C2-4B3091A1C548"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5:*:*:*:*:*:*:*","matchCriteriaId":"4EDA6C83-76C9-44F1-94A2-1CBCC7DBBB00"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FAC4577-5CC1-4099-8CBE-8AD5C1AF3807"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:sng:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E223FC83-3079-4EB8-940F-5546DCD6F473"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/62170","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/62170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0346","sourceIdentifier":"cve@mitre.org","published":"1997-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGI PHP mlog script allows an attacker to read any file on the target server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php_fi:*:*:*:*:*:*:*:*","matchCriteriaId":"4ED621E1-B6AF-4338-9C45-AF938C6F2937"}]}]}],"references":[{"url":"http://www.osvdb.org/3397","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/713","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0347","sourceIdentifier":"cve@mitre.org","published":"1999-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a \"%01\" character in an \"about:\" Javascript URL, which causes Internet Explorer to use the domain specified after the character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91745430007021&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91756771207719&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91745430007021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91756771207719&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0348","sourceIdentifier":"cve@mitre.org","published":"1999-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ197003","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/930","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ197003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0349","sourceIdentifier":"cve@mitre.org","published":"1999-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ188348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/IIS%20Remote%20FTP%20Exploit/DoS%20Attack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0350","sourceIdentifier":"cve@mitre.org","published":"1999-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:3.2:*:*:*:*:*:*:*","matchCriteriaId":"9B2B1CFB-9ADB-4250-888D-80E885F3DD87"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0350","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0351","sourceIdentifier":"cve@mitre.org","published":"1999-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP PASV \"Pizza Thief\" denial of service and unauthorized data access.  Attackers can steal data by connecting to a port that was intended for use by a client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftp:ftp_pasv:*:*:*:*:*:*:*:*","matchCriteriaId":"11B890DA-EDA2-4CC2-8F80-0446C0F3CD8D"}]}]}],"references":[{"url":"http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3389","source":"cve@mitre.org"},{"url":"http://attrition.org/security/advisory/misc/infowar/iw_sec_01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0352","sourceIdentifier":"cve@mitre.org","published":"1999-01-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ControlIT 4.5 and earlier (aka Remotely Possible) has weak password encryption."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0352","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0353","sourceIdentifier":"cve@mitre.org","published":"1999-02-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-026.shtml","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9902-091","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-026.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9902-091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0354","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content.  Also applies to Outlook when the client views a malicious email message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*","matchCriteriaId":"645B78F8-9AD7-4707-9CAD-5DC79475D971"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0355","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:controlit:4.5:*:*:*:*:*:*:*","matchCriteriaId":"5EA099EC-3A4F-4F25-BDE2-7590DC2E0233"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0356","sourceIdentifier":"cve@mitre.org","published":"1999-01-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0356","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0357","sourceIdentifier":"cve@mitre.org","published":"1999-01-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 98 and other operating systems allows remote attackers to cause a denial of service via crafted \"oshare\" packets, possibly involving invalid fragmentation offsets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0358","sourceIdentifier":"cve@mitre.org","published":"1999-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digital Unix 4.0 has a buffer overflow in the inc program of the mh package."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0a:*:*:*:*:*:*:*","matchCriteriaId":"781D13E2-35BB-4D58-A68F-86401D08D438"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"07476CFD-859F-4AD7-8514-130E7A86BAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0c:*:*:*:*:*:*:*","matchCriteriaId":"A5F097D7-CD52-44FC-851C-7DB42E57DCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"8C250283-4343-4569-A6EA-988FB7319AA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"32AE5D68-92A0-4950-A6FF-ECD5F56FDD90"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-027.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12121","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/12121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0359","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, or obtain passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_schaefer:ptylogin:*:*:*:*:*:*:*:*","matchCriteriaId":"609DA315-EFC0-4C02-9F06-5C3C3829FEE1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0359","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0360","sourceIdentifier":"cve@mitre.org","published":"1999-01-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MS Site Server 2.0 with IIS 4 can allow users to upload content, including ASP, to the target web site, thus allowing them to execute commands remotely."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"447E490B-C3C4-4B0B-8F95-FBD871A412B6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91763097004101&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91763097004101&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0361","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0361","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0362","sourceIdentifier":"cve@mitre.org","published":"1999-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WS_FTP server remote denial of service through cwd command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_server:1.0.1eval:*:*:*:*:*:*:*","matchCriteriaId":"2FFFF21C-9F80-4BFC-B71C-E534F42020BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_server:1.0.2eval:*:*:*:*:*:*:*","matchCriteriaId":"EA1CFEE0-7707-4B3D-8E84-0C42F56F5666"}]}]}],"references":[{"url":"http://www.eeye.com/html/Research/Advisories/AD02021999.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/217","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD02021999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0363","sourceIdentifier":"cve@mitre.org","published":"1999-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SuSE 5.2 PLP lpc program has a buffer overflow that leads to root compromise."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plp:line_printer_control:*:*:*:*:*:*:*:*","matchCriteriaId":"E3A00539-B11C-4B4D-8EF1-CE42F5224B0F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0364","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fms_inc.:total_vb_sourcebook:6.0:*:*:*:*:*:*:*","matchCriteriaId":"95B0AEB7-A2C2-4C4D-88F7-AACF456965F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access:97:*:*:*:*:*:*:*","matchCriteriaId":"561C0480-2B14-43E0-B187-06092D9A2D83"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91816470220259&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91816470220259&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0365","sourceIdentifier":"cve@mitre.org","published":"1999-02-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metainfo:metaip:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E14CE1E9-2C59-4798-AF3A-924B6E1D8AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:metainfo:sendmail:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B4C8975F-66CD-458F-BBAD-F97E21881634"},{"vulnerable":true,"criteria":"cpe:2.3:a:metainfo:sendmail:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E25900E0-2008-4AA8-9EEC-F1C0B13B6645"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0365","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0366","sourceIdentifier":"cve@mitre.org","published":"1999-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-004","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0367","sourceIdentifier":"cve@mitre.org","published":"1999-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD netstat command allows local users to access kernel memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"}]}]}],"references":[{"url":"http://www.osvdb.org/7571","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0368","sourceIdentifier":"cve@mitre.org","published":"1999-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"CE1015CB-9A33-48D5-861A-A1FC0D8D0FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:*:*:*:*:*:*","matchCriteriaId":"2D48DE48-5216-42AB-BEA8-EA490C5D4278"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*","matchCriteriaId":"4989799F-143A-45E5-A30C-9E3203649770"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EED21F27-4ADA-42AC-B28E-F849F47D4043"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6236FA51-E996-4E84-A8CC-2635A814CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"125918E7-53BB-407A-8D95-5D95CDF39A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0369","sourceIdentifier":"cve@mitre.org","published":"1997-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.3:u1:*:*:*:*:*:*","matchCriteriaId":"D3373737-C6FC-4D19-845C-B0382AE1DC48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.4:*:jl:*:*:*:*:*","matchCriteriaId":"10EC0267-500D-496F-9D88-7F93F7D4A88B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/183","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0370","sourceIdentifier":"cve@mitre.org","published":"1999-02-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0371","sourceIdentifier":"cve@mitre.org","published":"1999-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lynx allows a local user to overwrite sensitive files through /tmp symlinks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"9A682FFA-5C41-40BF-80EE-081604A77975"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0371","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0372","sourceIdentifier":"cve@mitre.org","published":"1999-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:backoffice:4.0:*:*:*:*:*:*:*","matchCriteriaId":"60EAD9D1-B3E1-4DE3-9FCE-CBC2BC025561"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ217004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0373","sourceIdentifier":"cve@mitre.org","published":"1999-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the \"Super\" utility in Debian GNU/Linux, and other operating systems, allows local users to execute commands as root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0374","sourceIdentifier":"cve@mitre.org","published":"1999-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Debian GNU/Linux cfengine package is susceptible to a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0374","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0375","sourceIdentifier":"cve@mitre.org","published":"1999-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in webd in Network Flight Recorder (NFR) 2.0.2-Research allows remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_flight_recorder:network_flight_recorder:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"C82EC0C8-CE94-45E4-A265-FFDDE04CDE2A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0375","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0376","sourceIdentifier":"cve@mitre.org","published":"1999-02-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0377","sourceIdentifier":"cve@mitre.org","published":"1999-02-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through multiple connections to network services."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:unix:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7A7C398-5356-45D6-AA5C-53E63BC88DCA"}]}]}],"references":[{"url":"http://www.securitytracker.com/id/1033881","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1033881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0378","sourceIdentifier":"cve@mitre.org","published":"1999-02-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:*:*:*:*:*:*:*:*","matchCriteriaId":"3F3D7981-9319-4EAE-B4CB-A12DB51C0412"}]}]}],"references":[{"url":"http://www.osvdb.org/6167","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0379","sourceIdentifier":"cve@mitre.org","published":"1999-02-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:backoffice_resource_kit:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EEC012B1-DF28-4CC3-852B-99CADFEC8492"}]}]}],"references":[{"url":"http://www.osvdb.org/1019","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/498","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0380","sourceIdentifier":"cve@mitre.org","published":"1999-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user's Finger File to point to the target file, then running finger on the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail:3.0.2421:*:*:*:*:*:*:*","matchCriteriaId":"B582E8B5-0BF7-48C6-B92A-C617D1B9F576"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91996412724720&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91999015212415&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92110501504997&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/497","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5392","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91996412724720&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91999015212415&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92110501504997&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0381","sourceIdentifier":"cve@mitre.org","published":"1999-02-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.990225011801.12757A-100000%40eleet","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.990225011801.12757A-100000%40eleet","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0382","sourceIdentifier":"cve@mitre.org","published":"1999-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"EF8BECF6-3C33-4D8C-B54E-A0D2F3295E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"828B4519-24D8-45A7-8448-D5FF6C83A2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"F495AF7A-CC31-4045-BACC-902950C80ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"68DFA54C-3DB9-4A94-A446-CF28671FE4F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"55A2AC4C-6B85-4B60-BFE1-C9588C5973B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0383","sourceIdentifier":"cve@mitre.org","published":"1999-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ACC Tigris allows public access without a login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acc:tigris:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"65BC8A0A-4070-4F0E-A6B1-CD2C9C01945B"}]}]}],"references":[{"url":"http://www.osvdb.org/267","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/183","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0384","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:98:*:mac:*:*:*:*:*","matchCriteriaId":"36227AF5-8A53-41E3-88E3-5978C22BBAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:98:*:*:*:*:*:*:*","matchCriteriaId":"77BFDC2A-4AE1-4FC8-ABA7-0400D46EA587"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:5.0:*:*:*:*:*:*:*","matchCriteriaId":"26BF2608-7FB2-455B-AC89-74732C982034"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-001","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0385","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-009","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0386","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:personal_web_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9E075F89-BC5D-48D8-8CA1-B56C2CAD50F6"}]}]}],"references":[{"url":"http://www.osvdb.org/111","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-010","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0387","sourceIdentifier":"cve@mitre.org","published":"1999-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ168115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/829","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-052","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ168115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0388","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datalynx:suguard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A798A878-3393-4EFA-A625-7912CE146C80"}]}]}],"references":[{"url":"http://www.osvdb.org/3186","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0389","sourceIdentifier":"cve@mitre.org","published":"1999-01-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the bootp server in the Debian Linux netstd package."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A9EDD1D3-6E5C-4D98-9360-33949353BD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"87E89840-3B57-4CBA-BE90-0BBA61F21F96"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"745ACC17-B6D6-4B4E-9648-A8B45C4A3F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A632089-47D7-410D-AE12-F801193FA18F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0390","sourceIdentifier":"cve@mitre.org","published":"1999-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Dosemu Slang library in Linux."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"830D48B8-D21D-4D31-99A1-20C231804DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-006.1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/187","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-006.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0391","sourceIdentifier":"cve@mitre.org","published":"1999-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"EF8BECF6-3C33-4D8C-B54E-A0D2F3295E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"828B4519-24D8-45A7-8448-D5FF6C83A2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"F495AF7A-CC31-4045-BACC-902950C80ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"68DFA54C-3DB9-4A94-A446-CF28671FE4F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"55A2AC4C-6B85-4B60-BFE1-C9588C5973B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=91552769809542&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=91552769809542&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0392","sourceIdentifier":"cve@mitre.org","published":"1999-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Thomas Boutell's cgic library version up to 1.05."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thomas_boutell:cgic_library:*:*:*:*:*:*:*:*","versionEndIncluding":"1.05","matchCriteriaId":"921BE0C0-B2CE-4EC6-BBBA-8CBDBAF5AD22"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0392","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0393","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8:*:*:*:*:*:*:*","matchCriteriaId":"C973CF06-BEE8-4D79-8649-1510E9EFC29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"62604D5F-5C2D-4FA3-903C-E52F129318E1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91694391227372&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91694391227372&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0394","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DPEC Online Courseware allows an attacker to change another user's password without knowing the original password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=91651770630788&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=91651770630788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0395","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:backweb_technologies:backweb_polite_agent_protocol:*:*:*:*:*:*:*:*","matchCriteriaId":"7571C28E-3460-4481-918C-578D72E2BA1A"}]}]}],"references":[{"url":"http://xforce.iss.net/alerts/advise17.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise17.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0396","sourceIdentifier":"cve@mitre.org","published":"1999-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0396","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0397","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The demo version of the Quakenbush NT Password Appraiser sends passwords across the network in plaintext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0398","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B7735CDD-8BFC-4E30-9C88-27C8943637CA"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0398","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0399","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.5:*:*:*:*:*:*:*","matchCriteriaId":"223779ED-745D-493C-8FD5-1ADE46163B36"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0399","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0400","sourceIdentifier":"cve@mitre.org","published":"1999-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Linux 2.2.0 running the ldd command on a core file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0401","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0401","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0402","sourceIdentifier":"cve@mitre.org","published":"1999-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wget 1.5.3 follows symlinks to change permissions of the target file instead of the symlink itself."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"50DD71F2-0B3C-4082-950A-CBFA5C601AEF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0402","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0403","sourceIdentifier":"cve@mitre.org","published":"1999-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A bug in Cyrix CPUs on Linux allows local users to perform a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cyrix:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"36B180B3-E7C9-45EE-976C-D329C783F956"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91821080015725&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91821080015725&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0404","sourceIdentifier":"cve@mitre.org","published":"1999-02-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Mail-Max SMTP server for Windows systems allows remote command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartmax_software:mailmax:*:*:*:*:*:*:*:*","matchCriteriaId":"DB602C18-FC87-417F-B955-D4E1446A638C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0404","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0405","sourceIdentifier":"cve@mitre.org","published":"1999-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in lsof allows local users to obtain root privilege."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"224CAC5B-96B0-4015-8106-63B486F37053"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7716120D-5110-42B0-A574-9AA2AC8D3C32"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5CC7D746-B98B-4FAF-B816-57222759A344"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"830D48B8-D21D-4D31-99A1-20C231804DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"}]}]}],"references":[{"url":"http://www.osvdb.org/3163","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0406","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digital Unix Networker program nsralist has a buffer overflow which allows local users to obtain root privilege."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"2FE14F36-1B9B-447F-BA87-D7780F33C975"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0406","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0407","sourceIdentifier":"cve@mitre.org","published":"1999-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91983486431506&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92000623021036&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91983486431506&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92000623021036&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0408","sourceIdentifier":"cve@mitre.org","published":"1999-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cobalt_raq:*:*:*:*:*:*:*:*","matchCriteriaId":"4F6F4069-9641-4D10-8C83-51141AFF221B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/337","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0409","sourceIdentifier":"cve@mitre.org","published":"1999-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in gnuplot in Linux version 3.5 allows local users to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"6542B24A-901D-4DAC-B2FF-A60FE4EA62F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/319","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0410","sourceIdentifier":"cve@mitre.org","published":"1999-03-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/293","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0411","sourceIdentifier":"cve@mitre.org","published":"1999-03-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5:*:*:*:*:*:*:*","matchCriteriaId":"4EDA6C83-76C9-44F1-94A2-1CBCC7DBBB00"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0411","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0412","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In IIS and other web servers, an attacker can attack commands as SYSTEM if the server is running as SYSTEM and loading an ISAPI extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E701AB0D-E335-47DF-A0CA-607D5C6E9255"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/501","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0413","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in the SGI X server allows local users to gain root access through the X server font path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19990301-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19990301-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0414","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*","matchCriteriaId":"29AC849E-7D4E-4C00-8BD0-672F413A80B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"1E55F8A8-1ABD-4760-9074-353BBAEE005B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0414","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0415","sourceIdentifier":"cve@mitre.org","published":"1999-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_7xx_routers:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"88BA0771-C31C-45E4-8163-4D6F87F703D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_7xx_routers:3.2:*:*:*:*:*:*:*","matchCriteriaId":"08135D2D-7873-4C56-80D7-D43FD1850936"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-034.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/770/7xxconn-pub.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/770/7xxconn-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0416","sourceIdentifier":"cve@mitre.org","published":"1999-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_7xx_routers:*:*:*:*:*:*:*:*","matchCriteriaId":"A4EC01F9-0690-486A-AE1A-46EC8226CE0F"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-034.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/770/7xxconn-pub.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/770/7xxconn-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0417","sourceIdentifier":"cve@mitre.org","published":"1999-03-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"64 bit Solaris 7 procfs allows local users to perform a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.osvdb.org/1001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/448","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0418","sourceIdentifier":"cve@mitre.org","published":"1999-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many \"RCPT TO\" commands in the same connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92100018214316&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92100018214316&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0419","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When the Microsoft SMTP service attempts to send a message to a server and receives a 4xx error code, it quickly and repeatedly attempts to redeliver the message, causing a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0420","sourceIdentifier":"cve@mitre.org","published":"1999-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"umapfs allows local users to gain root privileges by changing their uid through a malicious mount_umap program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netbsd:umapfs:*:*:*:*:*:*:*:*","matchCriteriaId":"FD5FA59F-5682-4845-AEB8-CCE485FE1BDD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0420","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0421","sourceIdentifier":"cve@mitre.org","published":"1999-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"During a reboot after an installation of Linux Slackware 3.6, a remote attacker can obtain root access by logging in to the root account without a password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"}]}]}],"references":[{"url":"http://www.osvdb.org/981","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/338","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0422","sourceIdentifier":"cve@mitre.org","published":"1999-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the \"noexec\" flag set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0423","sourceIdentifier":"cve@mitre.org","published":"1994-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","matchCriteriaId":"61A4F116-1FEE-450E-99AE-6AD9ACDDE570"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-093","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0424","sourceIdentifier":"cve@mitre.org","published":"1999-03-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0424","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0425","sourceIdentifier":"cve@mitre.org","published":"1999-03-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0425","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0426","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0426","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0427","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A2A8B413-CD80-4D91-BE69-9063EA60345B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A9F8ADFF-D7B7-4907-B5DB-3920BC6EFB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora_light:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7ACF3406-FA48-412E-A245-2FF225C74893"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora_pro:1.00:*:*:*:*:*:*:*","matchCriteriaId":"31CC9842-AAC0-47B7-B9D5-2411ADBFEB39"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0427","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0428","sourceIdentifier":"cve@mitre.org","published":"1999-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","versionEndExcluding":"0.9.2b","matchCriteriaId":"E717640E-3476-48AC-8674-7E8F080C7EB8"}]}]}],"references":[{"url":"http://www.osvdb.org/3936","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/3936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-1999-0429","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the \"Encrypt Saved Mail\" preference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:4.5:*:*:*:*:*:*:*","matchCriteriaId":"8376F4C1-44AE-42A8-A087-E3845FD2A0A8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92221437025743&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92241547418689&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92246997917866&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92249282302994&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92221437025743&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92241547418689&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92246997917866&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92249282302994&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0430","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_12xx_supervisor_software:4.29:*:*:*:*:*:*:*","matchCriteriaId":"46FC1323-E34A-4263-8B7E-87A3A7BCAC14"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_29xx_supervisor_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF25B831-1F07-4DFB-93AF-D08419D17A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_29xx_supervisor_software:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"176EBD41-3021-42D4-974F-6C80DEB2463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_29xx_supervisor_software:2.1.501:*:*:*:*:*:*:*","matchCriteriaId":"C3BBD6C0-3377-4145-8136-645808680986"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_29xx_supervisor_software:2.1.502:*:*:*:*:*:*:*","matchCriteriaId":"97D89F9B-F082-4C7D-80BF-A39DE234BBE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_5xxx_supervisor_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DCC1EA92-6A3B-46B4-8779-9B401693FF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_5xxx_supervisor_software:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"7A734789-8584-4231-AF14-BCE70F2BB43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_5xxx_supervisor_software:2.1.501:*:*:*:*:*:*:*","matchCriteriaId":"41A72040-25D5-4AE3-BC44-BDF9B380E8E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_5xxx_supervisor_software:2.1.502:*:*:*:*:*:*:*","matchCriteriaId":"C333C250-9275-4B25-94C2-A00BA4EECD95"}]}]}],"references":[{"url":"http://www.osvdb.org/1103","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0431","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This problem was fixed in Linux kernel 2.2.4 and later releases.","cveTags":[],"descriptions":[{"lang":"en","value":"Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"B02C3FC5-70D5-4471-9B87-C23DE94D7C1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1.89:*:*:*:*:*:*:*","matchCriteriaId":"15004105-9A55-4592-96D6-3FF539EC7513"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*","matchCriteriaId":"1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*","matchCriteriaId":"C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*","matchCriteriaId":"4BD794C6-11F5-4A2B-9A3C-E03069A1526B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0432","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftp on HP-UX 11.00 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-094","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0433","sourceIdentifier":"cve@mitre.org","published":"1999-03-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"125918E7-53BB-407A-8D95-5D95CDF39A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC3B1DD9-10B5-40FE-AE56-D068C41653DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0434","sourceIdentifier":"cve@mitre.org","published":"1999-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A5C77FA7-C977-4223-B6AC-91B82C45129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:r5:*:*:*:*:*:*","matchCriteriaId":"D3067DBB-FBA1-48E9-9EC8-5A8D74B9F2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/359","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0435","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MC/ServiceGuard and MC/LockManager in HP-UX allows local users to gain privileges through SAM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0436","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:desms:*:*:*:*:*:*:*:*","matchCriteriaId":"F565AAAE-5ACE-42D2-9DA6-281FE3F76DA5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-095","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0437","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp:*:*:*:*:*:*:*:*","matchCriteriaId":"F73D838D-0F7C-4BED-9F48-B80FE5E66820"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0437","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0438","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp_200i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC097E3D-FB10-469C-A303-D72D5E009FFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp_m3:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697F9986-CDD4-479F-A375-53FF40C2C419"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0438","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0439","sourceIdentifier":"cve@mitre.org","published":"1999-04-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:procmail:procmail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.12","matchCriteriaId":"7FE4462E-5A4D-4DD3-A3B3-2C77EFA56A3E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0440","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05CFEB93-B230-473E-A6D0-73CA0C48CB9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.01:*:*:*:*:*:*:*","matchCriteriaId":"60AA08F1-9932-404D-830E-E6D126FC732B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.02:*:*:*:*:*:*:*","matchCriteriaId":"C2FBC98E-49CF-48F1-9206-DDE8166AA8E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.03:*:*:*:*:*:*:*","matchCriteriaId":"E57BB283-31F4-487A-87CA-A251BFC5133C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.04:*:*:*:*:*:*:*","matchCriteriaId":"8B4D5F1E-DD1B-4CCE-B16D-05AB2DEBCB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.05:*:*:*:*:*:*:*","matchCriteriaId":"E20267FF-FCF8-42BF-9CF1-127FF856C6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F7EC6F62-37FF-46DD-997C-A4D77182BBEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"D5904FD1-9806-4C73-A4E8-98C1F8F078EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"431D7EED-1152-4245-92B9-023A4AC88EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"04BBF8B2-8378-4CA3-B8D4-4ED5D7B8A674"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"0B3EFA3B-5DE7-40D0-960D-283491163E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*","matchCriteriaId":"5DDA9F90-5D16-4E04-B285-D32C362279C6"}]}]}],"references":[{"url":"http://java.sun.com/pr/1999/03/pr990329-01.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92333596624452&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1939","source":"cve@mitre.org"},{"url":"http://java.sun.com/pr/1999/03/pr990329-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92333596624452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0441","sourceIdentifier":"cve@mitre.org","published":"1999-02-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C7BC4C8-FB7B-4A88-B97B-984D9AA8EA1D"}]}]}],"references":[{"url":"http://www.eeye.com/html/Research/Advisories/AD02221999.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/509","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD02221999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0442","sourceIdentifier":"cve@mitre.org","published":"1999-01-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris ff.core allows local users to modify files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/327","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0443","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6C07DD3D-C806-4218-BBC8-B859940D9330"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/13204","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/13204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0444","sourceIdentifier":"cve@mitre.org","published":"1999-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=92394891221029&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=92394891221029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0445","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*","matchCriteriaId":"53D87AC5-0F63-4AE8-AC05-FCEC98D18BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*","matchCriteriaId":"AE210B04-7ECD-419C-9258-0F619A353A8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"3B467741-B277-4128-9804-E13ED23FD310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"08E23131-D207-4D98-96D5-2B71FF792604"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"}]}]}],"references":[{"url":"http://www.osvdb.org/1104","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0446","sourceIdentifier":"cve@mitre.org","published":"1999-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"}]}]}],"references":[{"url":"http://www.osvdb.org/7051","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0447","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users can gain privileges using the debug utility in the MPE/iX operating system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:*:*:*:*:*:*:*:*","matchCriteriaId":"4C767768-3F0A-4E14-A2DF-0967A1A5BBE6"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMP9904-006","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMP9904-006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0448","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0448","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0449","sourceIdentifier":"cve@mitre.org","published":"1999-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://www.osvdb.org/2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/193","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0450","sourceIdentifier":"cve@mitre.org","published":"1999-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Perl (perl.exe)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E701AB0D-E335-47DF-A0CA-607D5C6E9255"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0451","sourceIdentifier":"cve@mitre.org","published":"1999-01-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Linux 2.0.36 allows local users to prevent any server from listening on any non-privileged port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/343","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0452","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A service or application has a backdoor password that was placed there by the developer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0452","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0453","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorComment":"Please see the following link for more information:\r\n\r\nhttp://seclists.org/bugtraq/1999/Jan/0215.html","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:*:*:*:*:*:*:*:*","matchCriteriaId":"EF6E96F8-E95E-4F3A-8CAF-936327BA3E54"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0453","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0454","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2048","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0455","sourceIdentifier":"cve@mitre.org","published":"1999-12-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0457","sourceIdentifier":"cve@mitre.org","published":"1999-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux ftpwatch program allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"745ACC17-B6D6-4B4E-9648-A8B45C4A3F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A632089-47D7-410D-AE12-F801193FA18F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0458","sourceIdentifier":"cve@mitre.org","published":"1999-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:l0pht:l0phtcrack:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFA5C409-12E4-47B8-B0E2-A11EE687EE4A"}]}]}],"references":[{"url":"http://www.osvdb.org/915","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0459","sourceIdentifier":"cve@mitre.org","published":"1999-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users can perform a denial of service in Alpha Linux, using MILO to force a reboot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0459","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0460","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux autofs module through long directory names allows local users to perform a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/312","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0461","sourceIdentifier":"cve@mitre.org","published":"1999-01-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0461","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0462","sourceIdentifier":"cve@mitre.org","published":"1999-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/339","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0463","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can perform a denial of service using IRIX fcagent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:l0pht:l0phtcrack:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BFA5C409-12E4-47B8-B0E2-A11EE687EE4A"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981201-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19981201-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0464","sourceIdentifier":"cve@mitre.org","published":"1999-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"E13D2DE3-0BFB-4C49-A462-9117FD727B40"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91553066310826&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91592136122066&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6609","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91553066310826&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91592136122066&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0465","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0465","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0466","sourceIdentifier":"cve@mitre.org","published":"1999-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"}]}]}],"references":[{"url":"http://www.osvdb.org/905","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0467","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the \"template\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcom:cgi_guestbook:*:*:*:*:*:*:*:*","matchCriteriaId":"A1E39DAD-2870-4BB8-A146-061F95AC2D0B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0467","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0468","sourceIdentifier":"cve@mitre.org","published":"1999-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0469","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0469","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0470","sourceIdentifier":"cve@mitre.org","published":"1999-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.0:*:*:*:*:*:*:*","matchCriteriaId":"98DA9E1F-E489-4D63-9CCA-6C011E6B08C6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/482","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0471","sourceIdentifier":"cve@mitre.org","published":"1999-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the \"cancel\" button."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winroute:winroute:*:*:*:*:*:*:*:*","matchCriteriaId":"29A623FC-3A71-4B79-921F-2F19CBB31E37"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0471","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0472","sourceIdentifier":"cve@mitre.org","published":"1999-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP default community name \"public\" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snmp:snmp:*:*:*:*:*:*:*:*","matchCriteriaId":"9249561D-5224-41C5-A5B4-29F2F63ED163"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:network_appliance:netcache:*:*:*:*:*:*:*:*","matchCriteriaId":"EFDF1B67-E853-41EC-8BA8-5FD4D47F61CD"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0472","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-240/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0473","sourceIdentifier":"cve@mitre.org","published":"1999-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"E2804E6B-9C98-4B0D-BC5C-3B92BF347B53"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/145","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0474","sourceIdentifier":"cve@mitre.org","published":"1999-04-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:99a_2.13build1700:*:*:*:*:*:*:*","matchCriteriaId":"CAB01C3F-E8A0-4A0E-A020-228E22A7BD43"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0474","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0475","sourceIdentifier":"cve@mitre.org","published":"1999-04-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:procmail:procmail:*:*:*:*:*:*:*:*","matchCriteriaId":"49F40393-4833-4D41-9D16-99DFEDABCE17"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0475","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0476","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","matchCriteriaId":"B5F14C63-9596-4675-B217-F22F8A18CD1B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0476","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0477","sourceIdentifier":"cve@mitre.org","published":"1999-12-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE00F45E-C410-4268-B0EC-18B4043E6631"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7BB5B124-A5C2-4B24-8091-FF9863D17BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"A32F27D3-0ECD-49BB-B32F-2F531DE6836D"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"9646F809-1016-49AD-B60A-481CDB7D5ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"926AAAD1-68C5-4816-B387-8B1BB4E9E1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/115","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0478","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in HP-UX sendmail 8.8.6 related to accepting connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.9.2","matchCriteriaId":"B32D2CFE-A6E7-43DB-8150-E0547C6FE6D5"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9904-097","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9904-097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0479","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-092","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9903-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0480","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4:*:*:*:*:*:*:*","matchCriteriaId":"9BBD7E36-FFE4-46FC-89DE-CD7B293A9676"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0480","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0481","sourceIdentifier":"cve@mitre.org","published":"1999-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in \"poll\" in OpenBSD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"http://www.osvdb.org/7556","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0482","sourceIdentifier":"cve@mitre.org","published":"1999-03-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD kernel crash through TSS handling, as caused by the crashme program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"http://www.osvdb.org/7557","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0483","sourceIdentifier":"cve@mitre.org","published":"1999-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD crash using nlink value in FFS and EXT2FS filesystems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"http://www.osvdb.org/6129","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0484","sourceIdentifier":"cve@mitre.org","published":"1999-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenBSD ping."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"http://www.osvdb.org/6130","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0485","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"http://www.osvdb.org/7558","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0486","sourceIdentifier":"cve@mitre.org","published":"1998-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in AOL Instant Messenger when a remote attacker sends a malicious hyperlink to the receiving client, potentially causing a system crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5:*:*:*:*:*:*:*","matchCriteriaId":"4AECAE9C-64B4-4BE9-AC7B-10108C8AA42C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0486","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0487","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-011","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0488","sourceIdentifier":"cve@mitre.org","published":"1999-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the \"cross frame\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0489","sourceIdentifier":"cve@mitre.org","published":"1999-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of \"untrusted scripted paste\" as described in MS:MS98-013."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0490","sourceIdentifier":"cve@mitre.org","published":"1999-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0491","sourceIdentifier":"cve@mitre.org","published":"1999-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04","matchCriteriaId":"D642E874-A9B5-4199-8C9D-9CCA1B90C40D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"FCAC75DF-FFF7-4721-9D47-6E29A5CCB7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4B4BB-C5A0-4283-9657-FC61BC95C014"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.2:*:*:*:*:*:*:*","matchCriteriaId":"9B04CBBD-E855-48D7-A5C9-AEC2B38FF1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.3:*:*:*:*:*:*:*","matchCriteriaId":"972BDA0A-25C8-4C02-8624-07D2462C214C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.4:*:*:*:*:*:*:*","matchCriteriaId":"5B9EDE56-A8C4-40A8-9D14-F6E86F464BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.5:*:*:*:*:*:*:*","matchCriteriaId":"DAB4B8E1-E013-4DB5-AF65-70CC2AEC3B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.6:*:*:*:*:*:*:*","matchCriteriaId":"B5428D5A-7443-4BDD-9690-E44DBDBCAC9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.7:*:*:*:*:*:*:*","matchCriteriaId":"18A6E8C3-334D-443B-8AD6-F8A131490F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5C74DAE6-8A77-47BF-B3ED-D76CD5AD75BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.01:*:*:*:*:*:*:*","matchCriteriaId":"8B631B7E-C59D-444F-80CE-DC2345A56E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.01.1:*:*:*:*:*:*:*","matchCriteriaId":"91C8E637-AD10-4854-AD60-A908D017DDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.02:*:*:*:*:*:*:*","matchCriteriaId":"75AB7456-89E4-4F40-82D0-EED52CAEE670"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.02.1:*:*:*:*:*:*:*","matchCriteriaId":"C7E516F7-B6C6-4A0B-90F4-BC0F382E62E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.03:*:*:*:*:*:*:*","matchCriteriaId":"2E37A5D0-79EB-442D-B4B8-49F5137A3FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.05:*:*:*:*:*:*:*","matchCriteriaId":"0F027515-A126-4899-B78E-121C8312002F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:2.05:a:*:*:*:*:*:*","matchCriteriaId":"AC05A483-FAFD-4C40-85BC-D2EE907B2B54"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-008.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9904202114070.6623-100000%40smooth.Operator.org","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9904202114070.6623-100000%40smooth.Operator.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0492","sourceIdentifier":"cve@mitre.org","published":"1999-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0492","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0493","sourceIdentifier":"cve@mitre.org","published":"1999-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91547759121289&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-99-05-statd-automountd.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/j-045.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/450","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91547759121289&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-99-05-statd-automountd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/j-045.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0494","sourceIdentifier":"cve@mitre.org","published":"1998-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in WinGate proxy through a buffer overflow in POP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wingate:wingate:*:*:*:*:*:*:*:*","matchCriteriaId":"131D0843-A33F-46F7-8F01-F2C0051F0737"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0494","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0495","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A remote attacker can gain access to a file system using ..  (dot dot) when accessing SMB shares."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0496","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0497","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Anonymous FTP is an unsecured protocol for Internet facing systems and should only be used on a limited basis to provide a specific functional requirement, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Anonymous FTP is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0498","sourceIdentifier":"cve@mitre.org","published":"1991-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0498","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0499","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NETBIOS share information may be published through SNMP registry keys in NT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0499","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0501","sourceIdentifier":"cve@mitre.org","published":"1998-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Unix account has a guessable password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0502","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Unix account has a default, null, blank, or missing password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0502","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0503","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT local user or administrator account has a guessable password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0503","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0504","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT local user or administrator account has a default, null, blank, or missing password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0504","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0505","sourceIdentifier":"cve@mitre.org","published":"1998-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT domain user or administrator account has a guessable password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0505","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0506","sourceIdentifier":"cve@mitre.org","published":"1998-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT domain user or administrator account has a default, null, blank, or missing password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0506","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0507","sourceIdentifier":"cve@mitre.org","published":"1998-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An account on a router, firewall, or other network device has a guessable password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0507","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0508","sourceIdentifier":"cve@mitre.org","published":"1998-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An account on a router, firewall, or other network device has a default, null, blank, or missing password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0509","sourceIdentifier":"cve@mitre.org","published":"1996-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perl, sh, csh, or other shell interpreters are installed in the cgi-bin directory on a WWW site, which allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/146","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0510","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A router or firewall allows source routed packets from arbitrary hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0510","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0511","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IP forwarding is enabled on a machine which is not a router or firewall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0511","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0512","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0512","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0513","sourceIdentifier":"cve@mitre.org","published":"1998-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"BD4B2280-5114-4CBD-9B06-221BD9CE4229"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0a:*:*:*:*:*:*:*","matchCriteriaId":"781D13E2-35BB-4D58-A68F-86401D08D438"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"07476CFD-859F-4AD7-8514-130E7A86BAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0c:*:*:*:*:*:*:*","matchCriteriaId":"A5F097D7-CD52-44FC-851C-7DB42E57DCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"8C250283-4343-4569-A6EA-988FB7319AA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0514","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0515","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0515","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0516","sourceIdentifier":"cve@mitre.org","published":"1998-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An SNMP community name is guessable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0516","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-243/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0517","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An SNMP community name is the default (e.g. public), null, or missing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0517","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-244/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0518","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A NETBIOS/SMB share password is guessable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0518","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0519","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A NETBIOS/SMB share password is the default, null, or missing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0519","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0520","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical NETBIOS/SMB share has inappropriate access control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0521","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An NIS domain name is easily guessable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-13.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0522","sourceIdentifier":"cve@mitre.org","published":"1996-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The permissions for a system-critical NIS+ table (e.g. passwd) are inappropriate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0522","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0523","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICMP echo (ping) is allowed from arbitrary hosts."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux by default does respond to ICMP echo requests, although it’s likely that in a production environment those would be filtered by some firewall on entry to your network.  However you can happily block ICMP ping responses using iptables if you so wish, but note that there is no known vulnerability in allowing them.\n\nFor more details, please see:\nhttp://kbase.redhat.com/faq/FAQ_43_4304.shtm","lastModified":"2007-09-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0523","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0524","sourceIdentifier":"cve@mitre.org","published":"1997-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts."},{"lang":"es","value":"Información ICMP como (1) máscara de red y (2) marca de tiempo está permitida desde hosts arbitrarios."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux is configured by default to respond to all ICMP requests. Users may configure the firewall to prevent a system from responding to certain ICMP requests.","lastModified":"2010-01-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*","matchCriteriaId":"4781BF1E-8A4E-4AFF-9540-23D523EE30DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*","matchCriteriaId":"B6230A85-30D2-4934-A8A0-11499B7B09F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*","matchCriteriaId":"F480AA32-841A-4E68-9343-B2E7548B0A0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:-:*:*:*:*:*:*:*","matchCriteriaId":"06E97148-F1B2-40FB-9C98-AB9FBE867DE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*","matchCriteriaId":"E492C463-D76E-49B7-A4D4-3B499E422D89"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os2:-:*:*:*:*:*:*:*","matchCriteriaId":"602ECD33-560E-4CDD-8396-7B6EC002C10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:-:*:*:*:*:*:*:*","matchCriteriaId":"61BD8560-99BE-46E5-8366-7CD9CD3427E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*","matchCriteriaId":"F5027746-8216-452D-83C5-2F8E9546F2A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:sco_unix:-:*:*:*:*:*:*:*","matchCriteriaId":"97A1D7CF-430A-4348-AC21-DB4BA7FD59F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:-:*:*:*:*:*:*:*","matchCriteriaId":"1B522A89-5F4E-4BA1-8AAF-2613C3A6CEE9"},{"vulnerable":true,"criteria":"cpe:2.3:o:windriver:bsdos:-:*:*:*:*:*:*:*","matchCriteriaId":"D0B43723-26A2-40E5-8B2D-B8747CEEA274"}]}]}],"references":[{"url":"http://descriptions.securescout.com/tc/11010","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://descriptions.securescout.com/tc/11011","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/95","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/306","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/322","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10053","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://descriptions.securescout.com/tc/11010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://descriptions.securescout.com/tc/11011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/95","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://support.f5.com/csp/article/K15277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0525","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"IP traceroute is allowed from arbitrary hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0525","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0526","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An X server's access control is disabled (e.g. through an \"xhost +\" command) and allows anyone to connect to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:7.1_1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D3375E2-8CDA-45BB-9533-0C919108B8EF"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/704969","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/704969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-1999-0527","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The permissions for system-critical data in an anonymous FTP account are inappropriate.  For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as \"ls\" can be overwritten."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6253","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0528","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8372","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0529","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0529","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0530","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system is operating in \"promiscuous\" mode which allows it to perform packet sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/778","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0531","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:58.853","vulnStatus":"Rejected","evaluatorSolution":"This functionality should be disabled, because these commands can be used for attack reconnaissance.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"An SMTP service supports EXPN, VRFY, HELP, ESMTP, and/or EHLO."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0532","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A DNS server allows zone transfers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0532","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/ncas/alerts/TA15-103A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0533","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A DNS server allows inverse queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0533","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0534","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0534","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0535","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0537","sourceIdentifier":"cve@mitre.org","published":"1998-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*","matchCriteriaId":"66BDCBFA-2C8E-4D6B-B63F-79C23CC19488"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0537","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0539","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A trust relationship exists between two Unix hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/723","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0541","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A password for accessing a WWW URL is guessable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0541","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0546","sourceIdentifier":"cve@mitre.org","published":"1998-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows NT guest account is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0546","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0547","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An SSH server allows authentication through the .rhosts file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/315","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0548","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A superfluous NFS server is running, but it is not importing or exporting any file systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0548","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0549","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT automatically logs in an administrator upon rebooting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0549","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0550","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A router's routing tables can be obtained from arbitrary hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0550","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0551","sourceIdentifier":"cve@mitre.org","published":"1998-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openmail:4.1:*:*:*:*:*:*:*","matchCriteriaId":"46052D06-A390-41DF-89BA-10A7FAC97F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openmail:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F2439ABC-5FEE-466E-A952-18EBFAC15000"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openmail:5.10:*:*:*:*:*:*:*","matchCriteriaId":"E9321A32-BC5E-4972-873A-FDB1F5779149"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9804-078","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9804-078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0554","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFS exports system-critical data to the world, e.g. / or a password file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0554","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0555","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Unix account with a name other than \"root\" has UID 0, i.e. root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0555","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0556","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Two or more Unix accounts have the same UID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0559","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical Unix file or directory has inappropriate permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0559","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0560","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical Windows NT file or directory has inappropriate permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0560","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0561","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS has the #exec function enabled for Server Side Include (SSI) files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0561","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0562","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The registry in Windows NT can be accessed remotely by users who are not administrators."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1023","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0564","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can force a printer to print arbitrary documents (e.g. if the printer doesn't require a password) or to become disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0564","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0565","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Sendmail alias allows input to be piped to a program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0565","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0566","sourceIdentifier":"cve@mitre.org","published":"1997-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0566","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0568","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.admind in Solaris is not running in a secure mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0568","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0569","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0569","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0570","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT is not using a password filter utility, e.g. PASSFILT.DLL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0570","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0571","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A router's configuration service or management interface (such as a web server or telnet) is configured to allow connections from arbitrary hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0571","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0572","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":".reg files are associated with the Windows NT registry editor (regedit), making the registry susceptible to Trojan Horse attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/178","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0575","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0575","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0576","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0576","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0577","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0577","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0578","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0579","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0580","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0580","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0581","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0581","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0582","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0582","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0583","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"There is a one-way or two-way trust relationship between Windows NT domains."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1284","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0584","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT file system is not NTFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/195","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0585","sourceIdentifier":"cve@mitre.org","published":"2000-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT administrator account has the default name of Administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"EF8BECF6-3C33-4D8C-B54E-A0D2F3295E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"828B4519-24D8-45A7-8448-D5FF6C83A2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"F495AF7A-CC31-4045-BACC-902950C80ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"55A2AC4C-6B85-4B60-BFE1-C9588C5973B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0585","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0586","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"A network service is running on a nonstandard port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0586","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0587","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A WWW server is not running in a restricted file system, e.g. through a chroot, thus allowing access to system-critical data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0587","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0588","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A filter in a router or firewall allows unusual fragmented packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0589","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical Windows NT registry key has inappropriate permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0589","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0590","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system does not present an appropriate legal message or warning to a user who is accessing it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4C56F007-5F8E-4BDD-A803-C907BCC0AF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"EF8BECF6-3C33-4D8C-B54E-A0D2F3295E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"828B4519-24D8-45A7-8448-D5FF6C83A2C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"F495AF7A-CC31-4045-BACC-902950C80ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"55A2AC4C-6B85-4B60-BFE1-C9588C5973B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-043.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-043.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0591","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An event log in Windows NT has inappropriate access permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0591","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0592","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Logon box of a Windows NT system displays the name of the last user who logged in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1353","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0593","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://osvdb.org/59333","source":"cve@mitre.org"},{"url":"http://technet.microsoft.com/en-us/library/cc722469.aspx","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/archive/winntas/deploy/confeat/06wntpcc.mspx?mfr=true","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1291","source":"cve@mitre.org"},{"url":"http://osvdb.org/59333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://technet.microsoft.com/en-us/library/cc722469.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/archive/winntas/deploy/confeat/06wntpcc.mspx?mfr=true","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0594","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1294","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0595","sourceIdentifier":"cve@mitre.org","published":"2000-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/216","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0596","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT log file has an inappropriate maximum size or retention period."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2577","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0597","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0598","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"cve@mitre.org"},{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0599","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"cve@mitre.org"},{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0600","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A network intrusion detection system (IDS) does not verify the checksum on a packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"cve@mitre.org"},{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0601","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"cve@mitre.org"},{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0602","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A network intrusion detection system (IDS) does not properly reassemble fragmented packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"cve@mitre.org"},{"url":"http://www.robertgraham.com/mirror/Ptacek-Newsham-Evasion-98.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0603","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0603","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0604","sourceIdentifier":"cve@mitre.org","published":"1999-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect configuration of the WebStore 1.0 shopping cart CGI program \"web_store.cgi\" could disclose private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:selena_sol:selena_sol_webstore:1.0:*:*:*:*:*:*:*","matchCriteriaId":"54C62EA6-5F28-45B2-9A83-2CF0677FE727"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0605","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect configuration of the Order Form 1.0 shopping cart  CGI program could disclose private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:austin_contract_computing:merchant_order_form:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8D202FCD-86B6-413D-8C81-ADC9FAC9A4FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:austin_contract_computing:merchant_order_form:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A686C8B5-4155-4406-880E-3FC6CCDA9620"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0606","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect configuration of the EZMall 2000 shopping cart  CGI program \"mall2000.cgi\" could disclose private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seaside_enterprises:ezmall:2000:*:*:*:*:*:*:*","matchCriteriaId":"22F8CC0D-AF30-49FB-9C89-6C54B0A725D2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0607","sourceIdentifier":"cve@mitre.org","published":"1999-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"quikstore.cgi in QuikStore shopping cart stores quikstore.cfg under the web document root with insufficient access control, which allows remote attackers to obtain the cleartext administrator password and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-soft:quikstore:*:*:*:*:*:*:*:*","matchCriteriaId":"97464CB1-6822-4CAF-A155-9CC35A19594E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0608","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect configuration of the PDG Shopping Cart CGI program \"shopper.cgi\" could disclose private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdgsoft:pdg_shopping_cart:1.5:*:*:*:*:*:*:*","matchCriteriaId":"90887F5A-23E7-4A0B-9E5A-811878D09A82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://www.pdgsoft.com/Security/security.html.","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3857","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pdgsoft.com/Security/security.html.","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0609","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect configuration of the SoftCart CGI program \"SoftCart.exe\" could disclose private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mercantec:softcart:*:*:*:*:*:*:*:*","matchCriteriaId":"BA1BA08E-010F-4FA3-8986-F89ECE098697"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0610","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect configuration of the Webcart CGI program could disclose private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mountain_network_systems:webcart:*:*:*:*:*:*:*:*","matchCriteriaId":"4A6C61C6-FD77-4B4B-BF10-0ED456C0580F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92462991805485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0611","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical Windows NT registry key has an inappropriate value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0611","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0612","sourceIdentifier":"cve@mitre.org","published":"1997-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The FTP Service should be disabled because it could reveal information about a host's users, which could be used as reconnaissance information for attacks.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"A version of finger is running that exposes valid user information to any entity on the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:finger_service:*:*:*:*:*:*:*:*","matchCriteriaId":"8572DBD7-169E-4012-A5BA-4E50412526E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:fingerd:*:*:*:*:*:*:*:*","matchCriteriaId":"843643A1-2F59-4F76-8E94-B45C88806345"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0612","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0613","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"rpc.sprayd is an unsecured protocol for Internet facing systems and should only be used on a trusted network segment, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The rpc.sprayd service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0613","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0614","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.310","vulnStatus":"Rejected","evaluatorSolution":"The FTP Service is an unsecured protocol for Internet facing systems and should only be used on a limited basis to provide a specific functional requirement, otherwise disabled.  Secure alternatives that encrypt communications are available.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The FTP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0615","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.343","vulnStatus":"Rejected","evaluatorSolution":"SNMPv3 is a secure protocol for management of networked systems, provided the cryptographic security mechanisms are used.  SNMPv1 and SNMPv2 are unsecured protocols for Internet facing systems and should  only be used on a trusted network segment.  For all versions, the software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The SNMP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0616","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.373","vulnStatus":"Rejected","evaluatorSolution":"The TFTP Service is an unsecured protocol and it should used only on a limited basis on rare occasion to provide a specific functional requirement, otherwise disabled.  Secure alternatives are available.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The TFTP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0617","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.410","vulnStatus":"Rejected","evaluatorSolution":"The SMTP Service is an unsecured protocol for Internet facing systems (e.g., user authentication not required, communications not encrypted) and should only be used on a limited basis to provide a specific functional requirement, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The SMTP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0618","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rexec service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0618","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0619","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.450","vulnStatus":"Rejected","evaluatorSolution":"The Telnet Service is an unsecured and obsolete protocol and it should be disabled.  Secure alternatives such as SSH are available.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The Telnet service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0620","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.480","vulnStatus":"Rejected","evaluatorSolution":"These protocols, such as RPC ypbind, yppasswd, ypserv, ypupdated, and ypxfrd, are unsecured protocols for Internet facing systems and should only be used on a trusted network segment, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A component service related to NIS is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0621","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.540","vulnStatus":"Rejected","evaluatorSolution":"This component service should not be allowed to communicate over untrusted networks, such as the Internet, because it is an unsecured protocol (e.g., communications not encrypted).   The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A component service related to NETBIOS is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0622","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.607","vulnStatus":"Rejected","evaluatorSolution":"DNS is a critical network service.  It should be fully patched and properly configured for Internet facing servers to avoid common attacks such as DNS spoofing, poisoning, and unauthorized zone transfers.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A component service related to DNS service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0623","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.640","vulnStatus":"Rejected","evaluatorSolution":"The XWindows service is an unsecured protocol for Internet facing system and should only be used on a trusted network segment, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The X Windows service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0624","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"These are unsecured and obsolete protocols and they should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The rstat/rstatd service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0624","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0625","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"rpc.rquotad is an unsecured and obsolete protocol and it should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The rpc.rquotad service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0625","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0626","sourceIdentifier":"cve@mitre.org","published":"1997-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"rusers is an unsecured and obsolete protocol and it should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"A version of rusers is running that exposes valid user information to any entity on the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:rpc.ruserd:*:*:*:*:*:*:*:*","matchCriteriaId":"D0E77D0D-69A8-4594-AA70-6740147EE52D"}]}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0626","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0627","sourceIdentifier":"cve@mitre.org","published":"1992-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The rexd service is an unsecured protocol for Internet facing systems and should only be used on a trusted network segment, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The rexd service is running, which uses weak authentication that can allow an attacker to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0627","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0628","sourceIdentifier":"cve@mitre.org","published":"1997-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rwho/rwhod service is running, which exposes machine status and user information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0628","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0629","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ident/identd service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0629","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0630","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NT Alerter and Messenger services are running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q189/2/71.asp","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q189/2/71.asp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0631","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.713","vulnStatus":"Rejected","evaluatorSolution":"NFS Service is an unsecured protocol for Internet facing systems (e.g., user authentication not required, communications not encrypted) and should only be used on a trusted managed network, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The NFS service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0632","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The RPC portmapper service is an unsecured protocol for Internet facing systems and should only be used on a trusted network segment, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The RPC portmapper service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0632","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0633","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.750","vulnStatus":"Rejected","evaluatorSolution":"The software should be patched and configured properly.  SSL/TLS should be used to protect transmissions of sensitive data.  The presence of HTTP may be an indication that an web application server is running on the system.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The HTTP/WWW service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0634","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.870","vulnStatus":"Rejected","evaluatorSolution":"SSH is a secure protocol, provided it is fully patched, properly configured, and uses FIPS approved algorithms.  SSH version 2 is preferred over SSH version 1 because of known flaws in version 1.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The SSH service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0635","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The Echo Service is an unsecured and obsolete protocol and it should be disabled.  Historically it has been used to perform denial of service attacks.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The echo service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041434.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0636","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The discard service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0636","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0637","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The systat service is an unsecured and obsolete protocol and it should be disabled because it can reveal information about a host's operations.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The systat service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0637","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0638","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The daytime service is an unsecured and obsolete protocol and it should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The daytime service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0638","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0639","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"chargen service is an unsecured and obsolete protocol and it should be disabled.  Historically it has been used to perform denial of service attacks.  Ping and traceroute can be used to provide the same functionality.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The chargen service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0639","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0640","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Gopher service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0640","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0641","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The UUCP Service is an unsecured and obsolete protocol and it should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The UUCP service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0641","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0642","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:54:59.973","vulnStatus":"Rejected","evaluatorSolution":"POP3 is an unsecured protocol for Internet facing systems that does not encrypt its transmissions.  POP3 should be tunneled over SSL/TLS or another encrypted tunnel.  The software should be patched and configured properly.  Earlier versions of POP, such as POP2, are unsecured and obsolete, and should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A POP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0643","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.010","vulnStatus":"Rejected","evaluatorSolution":"IMAP Service is an unsecured protocol for Internet facing systems that does not encrypt its transmissions.  IMAP should be tunneled over SSL/TLS or another encrypted tunnel.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The IMAP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0644","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.043","vulnStatus":"Rejected","evaluatorSolution":"NNTP news service is an unsecured protocol for Internet facing systems (e.g., user authentication not required, communications not encrypted).  It could be tunneled over SSL/TLS.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The NNTP news service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0645","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.070","vulnStatus":"Rejected","evaluatorSolution":"IRC Service is an unsecured protocol that typically does not authenticate the identity of users and does not encrypt its network communications.  IRC is not commonly deployed on enterprise networks.  If an organization decides to use it, it should be patched and configured properly, otherwise it should be disabled.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The IRC service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0646","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.103","vulnStatus":"Rejected","evaluatorSolution":"The software should be patched and configured properly to prevent information disclosure.  It can be tunneled over SSL/TLS.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The LDAP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0647","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.137","vulnStatus":"Rejected","evaluatorSolution":"The bootparam service is an unsecured protocol for Internet facing systems and should only be used on a trusted network segment, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The bootparam (bootparamd) service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0648","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.170","vulnStatus":"Rejected","evaluatorSolution":"X25 is an unsecured protocol for Internet facing systems and should only be used on a limited basis to provide a specific functional requirement, otherwise disabled.  The software should be patched and configured properly.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The X25 service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0649","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.207","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"The FSP service is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0650","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The netstat service is running, which provides sensitive information to remote attackers."},{"lang":"es","value":"El servicio netstat se está ejecutando, lo que provee información sensible a atacantes remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0651","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rsh/rlogin service is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2995","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0652","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.253","vulnStatus":"Rejected","evaluatorSolution":"The software should be patched and configured properly to prevent information leakage and unauthorized access.","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A database service is running, e.g. a SQL server, Oracle, or mySQL."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0653","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A component service related to NIS+ is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0653","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0654","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OS/2 or POSIX subsystem in NT is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0654","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0655","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.307","vulnStatus":"Rejected","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE.  Notes: the former description is: \"A service may include useful information in its banner or help function (such as the name and version), making it useful for information gathering activities."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0656","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","matchCriteriaId":"155AD4FB-E527-4103-BCEF-801B653DEA37"}]}]}],"references":[{"url":"http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/348","source":"cve@mitre.org"},{"url":"http://ca.com/au/securityadvisor/vulninfo/Vuln.aspx?ID=1638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0657","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"WinGate is being used."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":0.0},"baseSeverity":"LOW","exploitabilityScore":10.0,"impactScore":0.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0657","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0658","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.370","vulnStatus":"Rejected","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"DCOM is running."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0659","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.407","vulnStatus":"Rejected","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A Windows NT Primary Domain Controller (PDC) or Backup Domain Controller (BDC) is present."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0660","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2023-11-07T01:55:00.443","vulnStatus":"Rejected","evaluatorImpact":"This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: None.  Reason: this candidate is not about any specific product, protocol, or design, so it is out of scope of CVE.  It might be more appropriate to cover under the Common Configuration Enumeration (CCE).  Notes: the former description is: \"A hacker utility, back door, or Trojan Horse is installed on a system, e.g. NetBus, Back Orifice, Rootkit, etc."}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-0661","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive ftpd (wuftpd) 2.2 and 2.1f, (4) IRC client (ircII) ircII 2.2.9, (5) OpenSSH 3.4p1, or (6) Sendmail 8.12.6."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102820843403741&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102821663814127&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294539","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1994-07.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1994-14.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1999-01.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1999-02.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2002-28.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/10313.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5921","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102820843403741&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102821663814127&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/294539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1994-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1994-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1999-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1999-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2002-28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/10313.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0662","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical program or library does not have the appropriate patch, hotfix, or service pack installed, or is outdated or obsolete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0662","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0663","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0663","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0664","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An application-critical Windows NT registry key has inappropriate permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0664","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0665","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An application-critical Windows NT registry key has an inappropriate value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0665","source":"cve@mitre.org"},{"url":"https://www.cve.org/CVERecord?id=CVE-1999-0665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0667","sourceIdentifier":"cve@mitre.org","published":"1997-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:arp_protocol:arp_protocol:*:*:*:*:*:*:*:*","matchCriteriaId":"3701A091-8B0C-4F73-ABF8-20736C631E13"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=87602880019797&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=87602880019797&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0668","sourceIdentifier":"cve@mitre.org","published":"1999-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The scriptlet.typelib ActiveX control is marked as \"safe for scripting\" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-064.shtml","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/598","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-064.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0669","sourceIdentifier":"cve@mitre.org","published":"1999-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Eyedog ActiveX control is marked as \"safe for scripting\" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-064.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-064.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0670","sourceIdentifier":"cve@mitre.org","published":"1999-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-064.shtml","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-064.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0671","sourceIdentifier":"cve@mitre.org","published":"1999-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ToxSoft NextFTP client through CWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toxsoft:nextftp:1.82:*:*:*:*:*:*:*","matchCriteriaId":"1BAC287F-F1C6-4C8B-947C-B56C2199D656"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0672","sourceIdentifier":"cve@mitre.org","published":"1999-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fujitsu:chocoa:1.0beta7r:*:*:*:*:*:*:*","matchCriteriaId":"3018EE13-C0B0-4353-8D37-A1FAA419ADE4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/573","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0673","sourceIdentifier":"cve@mitre.org","published":"1999-08-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ALMail32 POP3 client via From: or To: headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crear:almail32:1.10:*:*:*:*:*:*:*","matchCriteriaId":"7192F380-2129-4E3A-B1CE-092FCF14D0AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0674","sourceIdentifier":"cve@mitre.org","published":"1999-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-067.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/570","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/j-067.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0675","sourceIdentifier":"cve@mitre.org","published":"1999-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"}]}]}],"references":[{"url":"http://www.osvdb.org/1038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/23615","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/576","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/23615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0676","sourceIdentifier":"cve@mitre.org","published":"1999-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/575","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19990809134220.A1191%40hades.chaoz.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19990809134220.A1191%40hades.chaoz.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0677","sourceIdentifier":"cve@mitre.org","published":"1999-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebRamp web administration utility has a default password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp_200i:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC097E3D-FB10-469C-A303-D72D5E009FFE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp_m3:1.0:*:*:*:*:*:*:*","matchCriteriaId":"697F9986-CDD4-479F-A375-53FF40C2C419"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0678","sourceIdentifier":"cve@mitre.org","published":"1999-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/318","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0679","sourceIdentifier":"cve@mitre.org","published":"1999-08-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hybrid_network:hybrid_ircd:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0beta58","matchCriteriaId":"CD262AC8-FF6A-429B-9D61-007EBD66E16F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hybrid_network:hybrid_ircd:5.03p7:*:*:*:*:*:*:*","matchCriteriaId":"C8A0F93F-1958-4A00-99BF-6ACC2B81E54E"}]}]}],"references":[{"url":"http://www.efnet.org/archive/servers/hybrid/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/581","source":"cve@mitre.org"},{"url":"http://www.efnet.org/archive/servers/hybrid/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0680","sourceIdentifier":"cve@mitre.org","published":"1999-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238600","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-057.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/571","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-028","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-057.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0681","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:97:*:*:*:*:*:*:*","matchCriteriaId":"74459B0D-BF34-4F46-BE89-7D720EA520EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:98:*:*:*:*:*:*:*","matchCriteriaId":"A5F2F998-5866-4DA7-88CF-7987E971947E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:personal_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C76C637-5D56-400F-BC62-A5D6C8DE622E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:personal_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D304F119-55A9-4CAB-9C7E-A63CCC4316EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/1999-q3/0381.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/568","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3117","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/1999-q3/0381.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0682","sourceIdentifier":"cve@mitre.org","published":"1999-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange 5.5 allows a remote attacker to relay email (i.e. spam) using encapsulated SMTP addresses, even if the anti-relaying features are enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"EC01670D-4550-4034-86A5-7879B6334241"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237927","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-056.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/567","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-027","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-056.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0683","sourceIdentifier":"cve@mitre.org","published":"1999-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Gauntlet Firewall via a malformed ICMP packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7A91D5DB-D09F-4CF6-99B2-B444FAD91A4B"}]}]}],"references":[{"url":"http://www.osvdb.org/1029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/556","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0684","sourceIdentifier":"cve@mitre.org","published":"1999-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Sendmail 8.8.6 in HPUX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:sendmail:8.8.6:*:*:*:*:*:*:*","matchCriteriaId":"EF24069D-A149-4452-9D61-51FCE6C827C0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0684","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0685","sourceIdentifier":"cve@mitre.org","published":"1999-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0686","sourceIdentifier":"cve@mitre.org","published":"1999-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EF437206-7696-4583-A6DC-A622F02001EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-046.shtml","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-098","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-046.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0687","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D6527C0F-8052-438F-888D-44D67A9E0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"500C3B15-B0E5-4DEE-80EC-A1A0418365A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9A4891-EB12-490E-9BA0-4A14A551708E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0409D8C4-A512-492A-9093-CE1E78E1426E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E01901D5-F582-443B-82A3-366EB5E29C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E4846EA2-0B0E-4EA1-A1B0-C998DD8F7635"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.120:*:*:*:*:*:*:*","matchCriteriaId":"D1B9337E-3AF1-4E76-BAC8-2B05A484C77D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"8C250283-4343-4569-A6EA-988FB7319AA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"8237F390-43DB-4B07-9CD7-C3F804710497"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/k-001.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/637","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/k-001.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0688","sourceIdentifier":"cve@mitre.org","published":"1999-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in HP Software Distributor (SD) for HPUX 10.x and 11.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/545","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0689","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D6527C0F-8052-438F-888D-44D67A9E0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"500C3B15-B0E5-4DEE-80EC-A1A0418365A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9A4891-EB12-490E-9BA0-4A14A551708E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0409D8C4-A512-492A-9093-CE1E78E1426E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E01901D5-F582-443B-82A3-366EB5E29C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E4846EA2-0B0E-4EA1-A1B0-C998DD8F7635"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.120:*:*:*:*:*:*:*","matchCriteriaId":"D1B9337E-3AF1-4E76-BAC8-2B05A484C77D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/636","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1880","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0690","sourceIdentifier":"cve@mitre.org","published":"1999-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP CDE program includes the current directory in root's PATH variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:*:*:*:*:*:*:*:*","matchCriteriaId":"B327A913-CD9E-48F8-B6AE-625AD7D8793A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-053.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-100","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-053.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9907-100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0691","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D6527C0F-8052-438F-888D-44D67A9E0E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"500C3B15-B0E5-4DEE-80EC-A1A0418365A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2B9A4891-EB12-490E-9BA0-4A14A551708E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0409D8C4-A512-492A-9093-CE1E78E1426E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E01901D5-F582-443B-82A3-366EB5E29C61"},{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E4846EA2-0B0E-4EA1-A1B0-C998DD8F7635"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"8C250283-4343-4569-A6EA-988FB7319AA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"32AE5D68-92A0-4950-A6FF-ECD5F56FDD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"8237F390-43DB-4B07-9CD7-C3F804710497"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/635","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3078","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0692","sourceIdentifier":"cve@mitre.org","published":"1999-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Array Services daemon (arrayd) disables authentication, allowing remote users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:*:*:*:*:*:*:*:*","matchCriteriaId":"B7B7EE1D-BD38-49D6-B58E-34A53EB150C1"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-052.shtml","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19990701-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-052.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0693","sourceIdentifier":"cve@mitre.org","published":"2000-03-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*","matchCriteriaId":"0BAE3D61-9D78-46D7-87EB-5A33ECF86F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"710007F4-EF8B-4DCC-89E9-54A13DF9B153"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/641","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4374","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9909-103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0694","sourceIdentifier":"cve@mitre.org","published":"1999-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in AIX ptrace system call allows local users to crash the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-055.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/j-055.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0695","sourceIdentifier":"cve@mitre.org","published":"2000-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:powerdynamo:3.0.652:*:*:*:*:*:*:*","matchCriteriaId":"26CB5AE3-4DA9-4CC9-9EEB-983821A6D226"}]}]}],"references":[{"url":"http://www.osvdb.org/1064","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/620","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0696","sourceIdentifier":"cve@mitre.org","published":"1999-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/188","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-051.shtml","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9908-102","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9908-102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0697","sourceIdentifier":"cve@mitre.org","published":"1999-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SCO Doctor allows local users to gain root privileges through a Tools option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0698","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in IP protocol logger (ippl) on Red Hat and Debian Linux."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0698","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0699","sourceIdentifier":"cve@mitre.org","published":"2000-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bluestone:sapphire_web:5.0:*:*:*:*:*:*:*","matchCriteriaId":"44EF3E30-37A2-455A-9815-9CDFF52CC2CA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0700","sourceIdentifier":"cve@mitre.org","published":"1999-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237185","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-026","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0701","sourceIdentifier":"cve@mitre.org","published":"2000-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ173039","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/626","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-036","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ173039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0702","sourceIdentifier":"cve@mitre.org","published":"1999-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the \"ImportExportFavorites\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241361","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/627","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0703","sourceIdentifier":"cve@mitre.org","published":"1999-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F185FD65-A2A8-4170-8419-E939450055B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-066.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-066.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0704","sourceIdentifier":"cve@mitre.org","published":"1999-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"950CE88E-E396-4D32-AC9D-B76EB2B537C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A37687D5-1239-474B-994C-C638AB9B105B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/614","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0705","sourceIdentifier":"cve@mitre.org","published":"1999-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in INN inews program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:*:*:*:*:*:*:*:*","matchCriteriaId":"2CFFB533-89C9-493A-851E-393D502C8A9E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/616","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0706","sourceIdentifier":"cve@mitre.org","published":"2000-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5658CF74-5AF1-4161-BF4C-6A394F2AA164"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.7:*:*:*:*:*:*:*","matchCriteriaId":"62017AA2-B4DB-44AA-806C-6CFEC839E297"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F9A712-AF96-4A04-B547-F29094ACFE9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2480B45-A626-49F5-A48B-BA6DFAA4411B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21969A37-9F10-4D70-AC73-F3DB4D169AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*","matchCriteriaId":"94FD2948-EF52-464B-A605-DA3806037762"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/583","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0707","sourceIdentifier":"cve@mitre.org","published":"1999-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:visualize_conference_ftp:*:*:*:*:*:*:*:*","matchCriteriaId":"23B9851E-8E7C-4966-A756-36DE3BD3D3CD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-050.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/493","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-099","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-050.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9906-099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0708","sourceIdentifier":"cve@mitre.org","published":"1999-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3C6DB288-F853-4014-A3E7-751EBE34536E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/651","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0710","sourceIdentifier":"cve@mitre.org","published":"1999-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Squid package in Red Hat Linux 5.2 and 6.0, and other distributions, installs cachemgr.cgi in a public web directory, which allows remote attackers to use it as an intermediary to connect to other systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-576","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-1999-025.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-489.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2385","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-1999-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-489.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/archives/rh52-errata-general.html#squid","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0711","sourceIdentifier":"cve@mitre.org","published":"1999-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"44F4BD05-8A36-4C17-AA00-01CE12A66137"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BF68DBCB-377C-476A-9373-5A85AA20916C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0F492716-428E-41DF-AC50-1C8A84DBA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AE91CC68-D396-4437-886C-370D30A771CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92609807906778&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?t=92550157100002&w=2&r=1","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92609807906778&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?t=92550157100002&w=2&r=1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0712","sourceIdentifier":"cve@mitre.org","published":"1999-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:coas:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2768B34B-979E-480C-ABEB-6D599305BFFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:coas:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F0A2FA5B-8B20-4324-9AA2-D6D689D9B08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:coas:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FB6C4E55-A3DA-48C2-A4F9-3D93759FAE54"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"86288A2E-B1BD-4DA9-BCCC-35AC44EEDD52"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0712","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0713","sourceIdentifier":"cve@mitre.org","published":"1999-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cde:cde:*:*:*:*:*:*:*:*","matchCriteriaId":"B327A913-CD9E-48F8-B6AE-625AD7D8793A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:-:*:*:*:*:*:*:*","matchCriteriaId":"589D7E39-A243-49F9-8F67-4B9E92AE87DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:transarc:afs:*:*:*:*:*:*:*:*","matchCriteriaId":"DBE38322-4EA7-4E45-A704-5F552E2D5DAA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:*:*:*:*:*:*:*:*","matchCriteriaId":"2FE14F36-1B9B-447F-BA87-D7780F33C975"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-044.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-044.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0714","sourceIdentifier":"cve@mitre.org","published":"1999-02-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Compaq Tru64 UNIX edauth command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"BD4B2280-5114-4CBD-9B06-221BD9CE4229"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0a:*:*:*:*:*:*:*","matchCriteriaId":"781D13E2-35BB-4D58-A68F-86401D08D438"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"07476CFD-859F-4AD7-8514-130E7A86BAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0c:*:*:*:*:*:*:*","matchCriteriaId":"A5F097D7-CD52-44FC-851C-7DB42E57DCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"8C250283-4343-4569-A6EA-988FB7319AA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"32AE5D68-92A0-4950-A6FF-ECD5F56FDD90"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0714","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0715","sourceIdentifier":"cve@mitre.org","published":"1999-05-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230677","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-016","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0716","sourceIdentifier":"cve@mitre.org","published":"1999-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Windows NT 4.0 help file utility via a malformed help file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0717","sourceIdentifier":"cve@mitre.org","published":"1999-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A remote attacker can disable the virus warning mechanism in Microsoft Excel 97."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*","matchCriteriaId":"7973AE7A-FE9F-4AB8-BBA8-98F3AF25487C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-014","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0718","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:gina:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B1F99D7-AEB4-4AE3-B8D3-5E03AE4F3EEB"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=&S=&P=5534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/608","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3166","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=&S=&P=5534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0719","sourceIdentifier":"cve@mitre.org","published":"1999-08-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnumeric:0.27:*:*:*:*:*:*:*","matchCriteriaId":"A2F12181-754A-46B3-B4DD-3DE91448F80A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0720","sourceIdentifier":"cve@mitre.org","published":"1999-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/597","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=lcamtuf.4.05.9907041223290.355-300000%40nimue.ids.pl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=lcamtuf.4.05.9907041223290.355-300000%40nimue.ids.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0721","sourceIdentifier":"cve@mitre.org","published":"1999-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231457","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-049.shtml","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-020","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0722","sourceIdentifier":"cve@mitre.org","published":"1999-08-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0723","sourceIdentifier":"cve@mitre.org","published":"1999-06-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233323","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-049.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/478","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-021","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0724","sourceIdentifier":"cve@mitre.org","published":"1999-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"}]}]}],"references":[{"url":"http://www.osvdb.org/6128","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0725","sourceIdentifier":"cve@mitre.org","published":"1999-08-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. \"Double Byte Code Page\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:ja:*:*:*:*","matchCriteriaId":"9CB6F641-D384-46DA-90D2-312819E3F940"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:ko:*:*:*:*","matchCriteriaId":"AC759766-C7F3-4DF0-9128-F0302A85334C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:zh:*:*:*:*","matchCriteriaId":"ECB23C7E-9F93-47E0-A6BF-CD9A4655DDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:ja:*:*:*:*","matchCriteriaId":"451584D5-32CE-4773-A4CA-1E6E8AD79FE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:ko:*:*:*:*","matchCriteriaId":"CD4AF45A-68A2-4266-84D6-7FBACBEE3908"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:zh:*:*:*:*","matchCriteriaId":"521795BA-D919-4AD1-91D9-743E6FA64A8A"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/477","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2302","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0726","sourceIdentifier":"cve@mitre.org","published":"1999-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234557","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/499","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-023","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0727","sourceIdentifier":"cve@mitre.org","published":"1999-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"}]}]}],"references":[{"url":"http://www.osvdb.org/6127","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0728","sourceIdentifier":"cve@mitre.org","published":"1999-07-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ236359","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-024","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ236359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0729","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"4A19610B-083B-496B-86DA-AEBE30A726E0"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-061.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1057","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/601","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise34.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/j-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise34.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0730","sourceIdentifier":"cve@mitre.org","published":"1999-06-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0730","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0731","sourceIdentifier":"cve@mitre.org","published":"1999-06-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The KDE klock program allows local users to unlock a session using malformed input."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EED21F27-4ADA-42AC-B28E-F849F47D4043"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"86288A2E-B1BD-4DA9-BCCC-35AC44EEDD52"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/489","source":"cve@mitre.org"},{"url":"https://github.com/KDE/kde1-kdebase/commit/04906bd5de2f220bf100b605dad37b4a1d9a91a6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/KDE/kde1-kdebase/commit/04906bd5de2f220bf100b605dad37b4a1d9a91a6","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0732","sourceIdentifier":"cve@mitre.org","published":"1999-08-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The logging facility of the Debian smtp-refuser package allows local users to delete arbitrary files using symbolic links."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0732","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0733","sourceIdentifier":"cve@mitre.org","published":"1999-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBF029A-103D-4BB6-B037-25EC2224DF34"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/490","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0734","sourceIdentifier":"cve@mitre.org","published":"1999-08-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscosecure:*:*:*:*:*:*:*:*","matchCriteriaId":"8AF5945A-02FD-42F8-8478-E1CBFD783741"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3133","source":"cve@mitre.org"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-19990819-dbaccess","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0735","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"66BF3084-39C8-4608-9EF4-207B69ADBF76"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA1999015_01.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/300","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA1999015_01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-1999-0736","sourceIdentifier":"cve@mitre.org","published":"1999-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0737","sourceIdentifier":"cve@mitre.org","published":"1999-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0738","sourceIdentifier":"cve@mitre.org","published":"1999-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The code.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0739","sourceIdentifier":"cve@mitre.org","published":"1999-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The codebrws.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0740","sourceIdentifier":"cve@mitre.org","published":"1999-08-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/594","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0741","sourceIdentifier":"cve@mitre.org","published":"1999-08-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QMS CrownNet Unix Utilities for 2060 allows root to log on without a password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qms:crownnet_unix_utilities:2060:*:*:*:*:*:*:*","matchCriteriaId":"B068C7B4-F415-413B-BB33-31A1E8F7A2E0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/593","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0742","sourceIdentifier":"cve@mitre.org","published":"1999-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Debian mailman package uses weak authentication, which allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0743","sourceIdentifier":"cve@mitre.org","published":"1999-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trn allows local users to overwrite other users' files via symlinks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3144","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0744","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EF437206-7696-4583-A6DC-A622F02001EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:*:*:*:*:*:*:*:*","matchCriteriaId":"6BBB1D15-C680-460B-BCCB-8E15C1F24AD5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/603","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0745","sourceIdentifier":"cve@mitre.org","published":"1999-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Source Code Browser Program Database Name Server Daemon (pdnsd) for the IBM AIX C Set ++ compiler."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"28B1C99E-D05A-4778-8650-39B63CC8B2F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-059.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/590","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-059.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0746","sourceIdentifier":"cve@mitre.org","published":"1999-08-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.2:*:*:*:*:*:*:*","matchCriteriaId":"852B55FE-8180-4357-B717-399C16954C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5CC7D746-B98B-4FAF-B816-57222759A344"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"830D48B8-D21D-4D31-99A1-20C231804DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/587","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0747","sourceIdentifier":"cve@mitre.org","published":"1999-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A37687D5-1239-474B-994C-C638AB9B105B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/589","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSI.4.10.9908170253560.19291-100000%40saturn.psn.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSI.4.10.9908170253560.19291-100000%40saturn.psn.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0748","sourceIdentifier":"cve@mitre.org","published":"1999-06-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Red Hat net-tools package."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA1999017_01.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA1999017_01.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0749","sourceIdentifier":"cve@mitre.org","published":"1999-08-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/586","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0750","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:hotmail:*:*:*:*:*:*:*:*","matchCriteriaId":"4E5C1DBF-21AF-4A3E-8A4A-42CCD6DD40C3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0751","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4147A43C-DA7B-4D08-90E9-72DE57B1D61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:sp2:*:*:*:*:*:*","matchCriteriaId":"4EB62E6F-87E2-4A98-B4BD-3E0036CE7640"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/631","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0752","sourceIdentifier":"cve@mitre.org","published":"1999-07-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EF437206-7696-4583-A6DC-A622F02001EF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0752","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0753","sourceIdentifier":"cve@mitre.org","published":"1999-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The w3-msql CGI script provided with Mini SQL allows remote attackers to view restricted directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CB8AE3D7-012D-48EE-B7F4-C70ADFA07B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"89EE371A-65B2-438B-9788-E4513E0D3461"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0754","sourceIdentifier":"cve@mitre.org","published":"1999-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:*:*:*:*:*:*:*:*","matchCriteriaId":"2CFFB533-89C9-493A-851E-393D502C8A9E"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/corp/support/errata/inn99_05_22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/255","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/corp/support/errata/inn99_05_22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0755","sourceIdentifier":"cve@mitre.org","published":"1999-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the \"Save password\" option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230681","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-017","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ230681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0756","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3630623B-468C-4E71-9C57-EFF83E5EFA4A"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=10968&Method=Full","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2207","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=10968&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0757","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:*:*:*:*:*:*:*:*","matchCriteriaId":"5CF3D3BC-7BE5-4DD5-8FEA-AD65C32404C8"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=10969&Method=Full","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2208","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=10969&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0758","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4147A43C-DA7B-4D08-90E9-72DE57B1D61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"63A12C94-E68C-48E2-B88E-571C4FD9099C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0758","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0759","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FuseMAIL POP service via long USER and PASS commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuseware:fusemail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"3E76CAF3-6B56-49F2-B774-D1FB3147540F"}]}]}],"references":[{"url":"http://www.crosswinds.net/~fuseware/faq.html#8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/634","source":"cve@mitre.org"},{"url":"http://www.crosswinds.net/~fuseware/faq.html#8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0760","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE00F45E-C410-4268-B0EC-18B4043E6631"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7BB5B124-A5C2-4B24-8091-FF9863D17BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"72ADE8ED-2A3D-45A2-B009-EBDE19372757"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DC21856A-F57F-4C34-8276-5880B57A2DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"48996949-448E-457A-B288-4CDD0490FCAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E5BC7A2B-455E-42DF-89E5-FB0B0D14139C"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3630623B-468C-4E71-9C57-EFF83E5EFA4A"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=11714&Method=Full","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/550","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3288","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=11714&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0761","sourceIdentifier":"cve@mitre.org","published":"2000-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}]}]}],"references":[{"url":"http://www.osvdb.org/1074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/644","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0762","sourceIdentifier":"cve@mitre.org","published":"1999-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the \"about\" protocol to gain access to browser information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:windows_95:*:*:*:*:*","matchCriteriaId":"2120677E-C560-408F-93C0-13A9CEEF0565"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.x:*:*:*:*:*:*:*","matchCriteriaId":"93E61D1F-588C-4B84-B5CA-8AB68AE4DF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","matchCriteriaId":"DA2CA2F8-260C-4559-BF24-3E321CEAE93F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0762","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0763","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD on a multi-homed host allows ARP packets on one network to modify ARP entries on another connected network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"}]}]}],"references":[{"url":"http://www.osvdb.org/6540","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0764","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD allows ARP packets to overwrite static ARP entries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"}]}]}],"references":[{"url":"http://www.osvdb.org/6539","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0765","sourceIdentifier":"cve@mitre.org","published":"1999-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19990501-01-A","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/262","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19990501-01-A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0766","sourceIdentifier":"cve@mitre.org","published":"1999-10-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:*:*:*:*:*:*:*:*","matchCriteriaId":"AED74665-46EF-4373-A429-C201EAE1E4C2"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/600","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-031","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0767","sourceIdentifier":"cve@mitre.org","published":"1999-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=87602167420557&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=87602167420557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0768","sourceIdentifier":"cve@mitre.org","published":"1999-08-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/602","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0769","sourceIdentifier":"cve@mitre.org","published":"1999-08-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_vixie:vixie_cron:3.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D8F45BCD-EBC1-4707-8C53-A25F373026A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"86288A2E-B1BD-4DA9-BCCC-35AC44EEDD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0770","sourceIdentifier":"cve@mitre.org","published":"1999-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"}]}]}],"references":[{"url":"http://www.osvdb.org/1027","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/549","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0771","sourceIdentifier":"cve@mitre.org","published":"1999-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"3EBD135D-F073-480E-A06E-D3C94B084F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:power_management:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84946D23-B332-4E59-A601-BEEF0DDB2CAB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0772","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"3EBD135D-F073-480E-A06E-D3C94B084F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:power_management:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84946D23-B332-4E59-A601-BEEF0DDB2CAB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0772","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0773","sourceIdentifier":"cve@mitre.org","published":"1999-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris lpset program allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.netspace.org/cgi-bin/wa?A2=ind9905B&L=bugtraq&P=R2017","source":"cve@mitre.org"},{"url":"http://www.netspace.org/cgi-bin/wa?A2=ind9905B&L=bugtraq&P=R2017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0774","sourceIdentifier":"cve@mitre.org","published":"1999-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_stover:mars_nwe:0.99:*:*:*:*:*:*:*","matchCriteriaId":"BD31E40E-AB93-48CF-8BD1-73796ADA8815"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/617","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0775","sourceIdentifier":"cve@mitre.org","published":"1999-06-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the \"established\" keyword in an access list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(14\\)gs2:*:*:*:*:*:*:*","matchCriteriaId":"0023E04A-6244-4221-AE19-616265074BDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(15\\)g:*:*:*:*:*:*:*","matchCriteriaId":"52C4A8A9-A17E-48A1-99EC-A9F87CE17318"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0775","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0776","sourceIdentifier":"cve@mitre.org","published":"1999-05-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_software_manufaktur:alibaba:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DD3CBF4-B593-4C4A-8B9C-D005846B4090"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9905&L=NTBUGTRAQ&P=R1533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0777","sourceIdentifier":"cve@mitre.org","published":"1999-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have \"No Access\" permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"879AFDCC-B9D8-41EF-85DD-70CC1BD5227C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/658","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0778","sourceIdentifier":"cve@mitre.org","published":"1999-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:accelerated-x_server:4:*:*:*:*:*:*:*","matchCriteriaId":"F16E6A33-2908-4123-8F8D-F541610B2391"},{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:accelerated-x_server:5:*:*:*:*:*:*:*","matchCriteriaId":"31EF6F5D-1254-48E2-A6FA-ABA64C2AAC92"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0779","sourceIdentifier":"cve@mitre.org","published":"1998-09-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in HP-UX SharedX recserv program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9810-086","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9810-086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0780","sourceIdentifier":"cve@mitre.org","published":"1998-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*","matchCriteriaId":"30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0781","sourceIdentifier":"cve@mitre.org","published":"1998-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*","matchCriteriaId":"30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0782","sourceIdentifier":"cve@mitre.org","published":"1998-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*","matchCriteriaId":"30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0783","sourceIdentifier":"cve@mitre.org","published":"1998-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/i-057.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6090","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/i-057.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-1999-0784","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"15A2B9BB-A00C-4ACF-9D6F-927168C857AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8FE5CF5D-4649-4E3A-9328-47224065384F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/1998_4/0764.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/1999_1/0056.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998/msg00536.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/1998_4/0764.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/1999_1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998/msg00536.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0785","sourceIdentifier":"cve@mitre.org","published":"1999-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The INN inndstart program allows local users to gain root privileges via the \"pathrun\" parameter in the inn.conf file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2480B45-A626-49F5-A48B-BA6DFAA4411B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21969A37-9F10-4D70-AC73-F3DB4D169AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*","matchCriteriaId":"94FD2948-EF52-464B-A605-DA3806037762"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0786","sourceIdentifier":"cve@mitre.org","published":"1999-09-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0787","sourceIdentifier":"cve@mitre.org","published":"1999-09-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSH authentication agent follows symlinks via a UNIX domain socket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93760201002154&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93832856804415&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/660","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93760201002154&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93832856804415&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0788","sourceIdentifier":"cve@mitre.org","published":"1999-09-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arkiea nlservd allows remote attackers to conduct a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knox_software:arkeia:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E4C2000A-26CC-4CC6-B2DD-73BD1C57D60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:knox_software:arkeia:4.1:*:*:*:*:*:*:*","matchCriteriaId":"89C0FD29-7836-4566-AB30-1EB455F2DB54"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93837184228248&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/662","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93837184228248&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0789","sourceIdentifier":"cve@mitre.org","published":"1999-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AIX ftpd in the libc library."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-072.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/679","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-072.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0790","sourceIdentifier":"cve@mitre.org","published":"2000-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A remote attacker can read information from a Netscape user's cache via JavaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"}]}]}],"references":[{"url":"http://home.netscape.com/security/notes/jscachebrowsing.html","source":"cve@mitre.org"},{"url":"http://home.netscape.com/security/notes/jscachebrowsing.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0791","sourceIdentifier":"cve@mitre.org","published":"1999-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the system through the HSMP protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hybrid_network:hsmp:*:*:*:*:*:*:*:*","matchCriteriaId":"7C3C4C43-D51B-41A5-8403-6054CB88DE4F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hybrid_network:cable_modem:*:*:*:*:*:*:*:*","matchCriteriaId":"C4E7CAB1-E796-46AE-90E7-AB88C6126C71"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0792","sourceIdentifier":"cve@mitre.org","published":"1998-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:osicom:routermate:*:*:*:*:*:*:*:*","matchCriteriaId":"6D8B423C-70E4-4569-A824-5AFEB4831E6D"}]}]}],"references":[{"url":"http://www2.merton.ox.ac.uk/~security/rootshell/0022.html","source":"cve@mitre.org"},{"url":"http://www2.merton.ox.ac.uk/~security/rootshell/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0793","sourceIdentifier":"cve@mitre.org","published":"1999-11-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-043","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0794","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*","matchCriteriaId":"7973AE7A-FE9F-4AB8-BBA8-98F3AF25487C"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*","matchCriteriaId":"49AD45BF-8A91-4C87-AF15-D38D8468A4C5"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241900","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241901","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241902","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-044","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ241902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0795","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0795","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0796","sourceIdentifier":"cve@mitre.org","published":"1998-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}]}]}],"references":[{"url":"http://www.osvdb.org/6089","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0797","sourceIdentifier":"cve@mitre.org","published":"1998-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/i-070.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-070.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0798","sourceIdentifier":"cve@mitre.org","published":"1998-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7932DF-A035-4506-9BF1-C733DC5DD872"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:*:*:*:*:*:*:*:*","matchCriteriaId":"9E88B374-7D32-467D-9A5B-3011897F844C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","matchCriteriaId":"B5F14C63-9596-4675-B217-F22F8A18CD1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91278867118128&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91278867118128&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0799","sourceIdentifier":"cve@mitre.org","published":"1997-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cmu:bootpd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.3","matchCriteriaId":"984D8FBF-5040-4E9F-A3D1-6CB5FA14DE0A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0799","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0800","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:forums:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"C50D11DF-E5F4-44CA-8668-6981785C6B54"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00332.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.allaire.com/handlers/index.cfm?ID=9602&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1748","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.allaire.com/handlers/index.cfm?ID=9602&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0801","sourceIdentifier":"cve@mitre.org","published":"1999-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BMC Patrol allows remote attackers to gain access to an agent by spoofing frames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6C07DD3D-C806-4218-BBC8-B859940D9330"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/2075.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/13204","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/2075.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/13204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0802","sourceIdentifier":"cve@mitre.org","published":"1999-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231450","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0803","sourceIdentifier":"cve@mitre.org","published":"1999-05-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:aix_enetwork_firewall:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1D8CDA6A-21A4-4D8A-A0ED-78225D6371CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:aix_enetwork_firewall:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D71B256F-C607-4A3A-8918-8049223878EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92765973207648&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/962","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92765973207648&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0804","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Linux 2.2.x kernels via malformed ICMP packets containing unusual types, codes, and IP header lengths."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/302","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0805","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*","versionEndIncluding":"4.11","matchCriteriaId":"286A5190-F827-40FB-ABCB-7D6DC2E42961"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/1999_2/0439.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2184","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/1999_2/0439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0806","sourceIdentifier":"cve@mitre.org","published":"1999-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris dtprintinfo program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"http://www.osvdb.org/6552","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0807","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:*:*:*:*:*:*:*:*","matchCriteriaId":"33D8DAD0-34B8-4D97-B026-4305D6C73B12"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0807","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0808","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp_client:1.0:*:*:*:*:*:*:*","matchCriteriaId":"140431BA-D68C-4688-AAB0-79D557ACFF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp_client:2.0:*:*:*:*:*:*:*","matchCriteriaId":"AEB862F1-3C18-42AA-9E7A-1BEF321618AE"}]}]}],"references":[{"url":"ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-053.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90221101925960&w=2","source":"cve@mitre.org"},{"url":"ftp://ftp.isc.org/isc/dhcp/dhcp-1.0-history/dhcp-1.0.0-1.0pl1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-053.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90221101925960&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0809","sourceIdentifier":"cve@mitre.org","published":"1999-07-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to \"Only accept cookies originating from the same server as the page being viewed\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0809","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0810","sourceIdentifier":"cve@mitre.org","published":"1999-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Samba NETBIOS name service daemon (nmbd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"93AF43FA-9947-4F26-96E8-1D77BF909AA0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0810","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0811","sourceIdentifier":"cve@mitre.org","published":"1999-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Samba smbd program via a malformed message command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D8F15704-2F2B-4536-A2A0-510B5CE91D09"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0812","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"93AF43FA-9947-4F26-96E8-1D77BF909AA0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0812","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0813","sourceIdentifier":"cve@mitre.org","published":"1999-08-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"78C34792-E014-4D8D-9D82-8E9D555664D8"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0814","sourceIdentifier":"cve@mitre.org","published":"1999-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat pump DHCP client allows remote attackers to gain root access in some configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-1999-027.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-1999-027.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0815","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a large number of queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:server:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"CD8FDB19-E847-46B2-B938-8059145FDD82"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q196/2/70.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1974","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A952","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q196/2/70.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0816","sourceIdentifier":"cve@mitre.org","published":"1998-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Motorola CableRouter allows any remote user to connect to and configure the router on port 1024."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:motorola_cablerouter:*:*:*:*:*:*:*:*","matchCriteriaId":"AE17FEA2-BF36-418D-9E34-29928ACDE8F1"}]}]}],"references":[{"url":"http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0817","sourceIdentifier":"cve@mitre.org","published":"1999-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:*:*:*:*:*:*:*:*","matchCriteriaId":"6ED57818-7105-4465-92BB-9039C929C02A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0817","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0818","sourceIdentifier":"cve@mitre.org","published":"1999-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38433B7F5A.53F4SHADOWPENGUIN%40fox.nightland.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38433B7F5A.53F4SHADOWPENGUIN%40fox.nightland.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0819","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94398141118586&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94398141118586&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0820","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://www.osvdb.org/5996","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/838","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0821","sourceIdentifier":"cve@mitre.org","published":"1999-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/838","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0822","sourceIdentifier":"cve@mitre.org","published":"1999-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1208414-D175-41E2-BCBC-9E5EDBC41FFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0b20:*:*:*:*:*:*:*","matchCriteriaId":"08E3D83E-2D0C-4E47-8D57-8EC18115BCB6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/830","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0823","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://www.osvdb.org/1150","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/839","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0824","sourceIdentifier":"cve@mitre.org","published":"1999-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0825","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/849","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0826","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD angband allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://www.osvdb.org/1151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/840","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0827","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"By default, Internet Explorer 5.0 and other versions enables the \"Navigate sub-frames across different domains\" option, which allows frame spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:a_mac_os:*:*:*:*:*:*","matchCriteriaId":"35AA9DC0-0694-48FC-8652-831DFAB29226"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"59EB6841-0427-479B-8771-06DF62EE3C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1B26CE22-E730-4247-853E-5E640DB3ECB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"1D09FC21-1170-4399-8378-1D8353689C76"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0828","sourceIdentifier":"cve@mitre.org","published":"1999-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/853","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0829","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Secure Web Console uses weak encryption."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_console:*:*:*:*:*:*:*:*","matchCriteriaId":"BF216916-7C21-44B8-9895-CF8628E3627E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0829","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0830","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SCO UnixWare Xsco command via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0830","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0831","sourceIdentifier":"cve@mitre.org","published":"1999-11-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Linux syslogd via a large number of connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cobalt:qube:1.0:*:*:*:*:*:*:*","matchCriteriaId":"23830C81-FC80-4BD5-87D4-B83769D90BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cobalt:qube:2.0:*:*:*:*:*:*:*","matchCriteriaId":"AC4E81A9-E7A8-415B-BFDD-6F819D2B5733"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cobalt_raq:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE83B2E-D502-41EE-B1CC-D7A3FD408D1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/809","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-035.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0832","sourceIdentifier":"cve@mitre.org","published":"1999-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-033.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/1999/19991111","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_29.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh42-errata-general.html#NFS","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.20.9911091058140.12964-100000%40mail.zigzag.pl","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/1999/19991111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_29.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh42-errata-general.html#NFS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.20.9911091058140.12964-100000%40mail.zigzag.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0833","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BIND 8.2 via NXT records."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0834","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:rsaref:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4FFB1571-51FF-44FD-9C6F-369BCAD402D9"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/843","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0835","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in BIND named via malformed SIG records."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5:*:*:*:*:*:*:*","matchCriteriaId":"4EDA6C83-76C9-44F1-94A2-1CBCC7DBBB00"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2:*:*:*:*:*:*:*","matchCriteriaId":"B8352832-11AE-4BE4-B996-AA90E755066B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"710007F4-EF8B-4DCC-89E9-54A13DF9B153"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0836","sourceIdentifier":"cve@mitre.org","published":"1998-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.22a","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991202160111.20553.qmail%40nwcst282.netaddress.usa.net","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.22a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991202160111.20553.qmail%40nwcst282.netaddress.usa.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0837","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in BIND by improperly closing TCP sessions via so_linger."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0838","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:serv-u_ftp-server:2.5a:*:*:*:*:*:*:*","matchCriteriaId":"2F8FE4FC-4006-46B5-946F-BC54BA9F8CFA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0839","sourceIdentifier":"cve@mitre.org","published":"1999-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"7AAA310C-7DED-40B3-B5EF-80C7407BB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246972","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/828","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-051","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0840","sourceIdentifier":"cve@mitre.org","published":"1999-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/3J5QQPPQ0O.html","source":"cve@mitre.org"},{"url":"http://www.security-express.com/archives/bugtraq/1999-q4/0122.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/832","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3579","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3580","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/3J5QQPPQ0O.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-express.com/archives/bugtraq/1999-q4/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0841","sourceIdentifier":"cve@mitre.org","published":"1999-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/3J5QQPPQ0O.html","source":"cve@mitre.org"},{"url":"http://www.security-express.com/archives/bugtraq/1999-q4/0122.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/832","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3732","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/3J5QQPPQ0O.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-express.com/archives/bugtraq/1999-q4/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0842","sourceIdentifier":"cve@mitre.org","published":"1999-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:mail-gear:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1AE9B457-A2EF-4FA4-977D-895876B252B9"}]}]}],"references":[{"url":"http://www.osvdb.org/1144","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/827","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs%40ussrback.com","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEAFCBAA.labs%40ussrback.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0843","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:*:*:*:*:*:*:*:*","matchCriteriaId":"EF6E96F8-E95E-4F3A-8CAF-936327BA3E54"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0843","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0844","sourceIdentifier":"cve@mitre.org","published":"1999-11-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in MDaemon WorldClient and WebConfig services via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:mdaemon:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"189DC153-488F-496B-A807-7E3F8AC815C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:mdaemon:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"B7E862B7-F01C-44B5-A0F6-FF0C6DDD5C9F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/820","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/823","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0845","sourceIdentifier":"cve@mitre.org","published":"1999-11-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SCO su program allows local users to gain root access via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0845","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0846","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in MDaemon 2.7 via a large number of connection attempts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:mdaemon:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"189DC153-488F-496B-A807-7E3F8AC815C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:mdaemon:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"B7E862B7-F01C-44B5-A0F6-FF0C6DDD5C9F"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=94398020817351&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=94398020817351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0847","sourceIdentifier":"cve@mitre.org","published":"1999-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in free internet chess server (FICS) program, xboard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freechess.org:fics_program:*:*:*:*:*:*:*:*","matchCriteriaId":"B90FB68E-45CE-4DE6-B093-3E7F2F890F41"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=94407791819019&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=94407791819019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0848","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in BIND named via consuming more than \"fdmax\" file descriptors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0849","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in BIND named via maxdname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:*","matchCriteriaId":"BB79EDA4-9B2C-4C4C-A5DE-CB8C6EB00BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DF8869C-2446-48F3-A1CD-70AE44D74EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:p1:*:*:*:*:*:*","matchCriteriaId":"CEBD7B33-5B16-4235-8792-69E09CFB0C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0850","sourceIdentifier":"cve@mitre.org","published":"1999-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions for Endymion MailMan allow local users to read email or modify files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"49824940-8621-4B21-B3D4-447D7A9C50D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/845","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0851","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in BIND named via naptr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5:*:*:*:*:*:*:*","matchCriteriaId":"4EDA6C83-76C9-44F1-94A2-1CBCC7DBBB00"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2:*:*:*:*:*:*:*","matchCriteriaId":"B8352832-11AE-4BE4-B996-AA90E755066B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"710007F4-EF8B-4DCC-89E9-54A13DF9B153"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-034.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0852","sourceIdentifier":"cve@mitre.org","published":"1999-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"85D0DA05-D76A-4623-B7EC-07A9D06E6E9F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0853","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4147A43C-DA7B-4D08-90E9-72DE57B1D61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:sp2:*:*:*:*:*:*","matchCriteriaId":"4EB62E6F-87E2-4A98-B4BD-3E0036CE7640"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"63A12C94-E68C-48E2-B88E-571C4FD9099C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0854","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.07:*:*:*:*:*:*:*","matchCriteriaId":"0C52CA83-3B52-4C87-92B1-E45424A2556B"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl","source":"cve@mitre.org"},{"url":"http://www.ultimatebb.com/home/versions.shtml","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ultimatebb.com/home/versions.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-1999-0855","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD gdc program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0856","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A9C005-4392-4C95-9B92-98EEC73EFE73"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=94416739411280&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=94416739411280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0857","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD gdc program allows local users to modify files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/835","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0858","sourceIdentifier":"cve@mitre.org","published":"1999-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247333","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/846","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-054","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0859","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.osvdb.org/6994","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/837","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0860","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0861","sourceIdentifier":"cve@mitre.org","published":"1999-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"81514AB5-388D-4D13-B63A-C237A502B86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"879AFDCC-B9D8-41EF-85DD-70CC1BD5227C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-053","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ244613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0862","sourceIdentifier":"cve@mitre.org","published":"1999-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF7D1F6F-044C-478D-991D-D70281FD7C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6EB98484-1234-4BA2-ACB0-28F4BE684D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"31C6D856-9046-4FF1-8A38-848535D57D22"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0862","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0863","sourceIdentifier":"cve@mitre.org","published":"1999-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0863","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0864","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94530783815434&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94581379905584&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94606167110764&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/851","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991203020720.13115.qmail%40nwcst289.netaddress.usa.net","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94530783815434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94581379905584&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94606167110764&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991203020720.13115.qmail%40nwcst289.netaddress.usa.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0865","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:communigate_pro:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B99838A0-D980-4E0F-BFF3-9DEF998F78AB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94426440413027&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94454565726775&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/860","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94426440413027&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94454565726775&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0866","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in UnixWare xauto program allows local users to gain root privilege."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.24a","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94530783815434&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94581379905584&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94606167110764&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/848","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.24a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94530783815434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94581379905584&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94606167110764&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0867","sourceIdentifier":"cve@mitre.org","published":"1999-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"81514AB5-388D-4D13-B63A-C237A502B86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"879AFDCC-B9D8-41EF-85DD-70CC1BD5227C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:unknown:commerce:*:*:*:*:*","matchCriteriaId":"E143A482-984A-4CDC-848F-A82FA5BCFA46"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-058.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/579","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-058.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0868","sourceIdentifier":"cve@mitre.org","published":"1997-02-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5658CF74-5AF1-4161-BF4C-6A394F2AA164"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:news_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A0FB9EFB-F5C3-447B-A1B7-DB762F93D8F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sparc:*:*:*:*:*:*:*:*","matchCriteriaId":"727D196F-786C-4C50-BF72-BE9E14A243EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_intrasv:r1.1:*:*:*:*:*:*:*","matchCriteriaId":"D6CA81EB-5910-454D-AB36-B3EF80CDC44F"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:r1.2:*:*:*:*:*:*:*","matchCriteriaId":"D66E31D1-4E06-49FC-AF8C-2904F8776CDD"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:r2.2:*:*:*:*:*:*:*","matchCriteriaId":"289D9EB9-46B7-4176-B5EC-65768A18CAC3"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:goah_networksv:r3.1:*:*:*:*:*:*:*","matchCriteriaId":"EF85EE71-0A56-4F40-A90C-976541C8F33F"}]}]}],"references":[{"url":"https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml","source":"cve@mitre.org"},{"url":"https://www.cs.ait.ac.th/joomla3/index.php/security-advisories?CERT/CA97/msg00027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0869","sourceIdentifier":"cve@mitre.org","published":"1998-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","matchCriteriaId":"DA2CA2F8-260C-4559-BF24-3E321CEAE93F"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-020","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0870","sourceIdentifier":"cve@mitre.org","published":"1998-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0871","sourceIdentifier":"cve@mitre.org","published":"1998-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the \"Cross Frame Navigate\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"}]}]}],"references":[{"url":"http://www.osvdb.org/7837","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3668","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0872","sourceIdentifier":"cve@mitre.org","published":"1999-08-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_vixie:vixie_cron:3.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D8F45BCD-EBC1-4707-8C53-A25F373026A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"86288A2E-B1BD-4DA9-BCCC-35AC44EEDD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/611","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0873","sourceIdentifier":"cve@mitre.org","published":"1999-10-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Skyfull mail server via MAIL FROM command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sky_communications:skyfull:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"411F86A9-93B5-4197-B2F9-72E6E0EFBC0B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0874","sourceIdentifier":"cve@mitre.org","published":"1999-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-048.shtml","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD06081999.html","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A915","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ234905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/j-048.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD06081999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0875","sourceIdentifier":"cve@mitre.org","published":"1999-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:0a:*:*:*:*:*:*:*","matchCriteriaId":"8429C080-F550-4D03-A87A-4546273712AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:0b:*:*:*:*:*:*:*","matchCriteriaId":"5D153766-0C57-46F4-8865-6F1ED597B53C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ216141","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/578","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ216141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0876","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Explorer 4.0 via EMBED tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.0:*:mac_os:*:*:*:*:*","matchCriteriaId":"2277E59E-D981-4D9D-8FC0-F124FB8B9C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"C6CB69E1-189F-425C-9023-DE2741669507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:a:*:*:*:*:*:*","matchCriteriaId":"EB817B2B-6F65-4989-9177-153518F32894"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ185959","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ185959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0877","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B9D82B89-456D-41CB-A894-B6A22FB4415D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*","matchCriteriaId":"2E21CE6E-2B33-4225-B1DC-C19F1D578040"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0878","sourceIdentifier":"cve@mitre.org","published":"1999-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beroftpd:beroftpd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"602F3F84-3DA1-4ABE-8E47-F7B54169922E"},{"vulnerable":true,"criteria":"cpe:2.3:a:beroftpd:beroftpd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"514C8A8E-E4B0-4135-B240-379D25148AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:beroftpd:beroftpd:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"7810EC3A-70AD-4ECB-A7EF-2CC5F527D696"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*","matchCriteriaId":"B39D46C4-B153-4301-AE9C-57FB6BA64CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*","matchCriteriaId":"E55582DD-DEF7-4BF8-950C-E7E58BD29DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:*:*:*:*:*:*:*","matchCriteriaId":"FF9B9132-19A1-4242-A129-E5A49F466EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:*:*:*:*:*:*:*","matchCriteriaId":"0A096214-84AD-44F5-BBEF-F9F17B9B0C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*","matchCriteriaId":"4989799F-143A-45E5-A30C-9E3203649770"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:*:*:*:*:*:*:*","matchCriteriaId":"1E3D0CC6-D1A0-4784-BE93-319C7EE59134"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:*:*:*:*:*:*:*","matchCriteriaId":"4FA32489-F098-43D2-80B7-89CFE0BE9A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:*:*:*:*:*:*:*","matchCriteriaId":"91C6388E-464B-4562-BC7B-7B4A66387B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:*:*:*:*:*:*:*","matchCriteriaId":"923B5711-853D-4A77-8FB3-D5C3D449518D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:*:*:*:*:*:*:*","matchCriteriaId":"9BB1B136-F90E-426B-8010-F2D059E89DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:*:*:*:*:*:*:*","matchCriteriaId":"CD9EFCD7-2A13-420E-B6A0-C1248B2E6E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:*:*:*:*:*:*:*","matchCriteriaId":"573486C8-0349-4BC9-AD7D-3FBF93DDB6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:*:*:*:*:*:*:*","matchCriteriaId":"CAD81A30-9C35-4EEA-B6FE-A4AC76893AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"6AFFA39F-9072-4F19-A695-F383EA61D55D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/599","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/599","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0879","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0879","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0880","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"766851E2-134A-4A89-931B-6F1753525684"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0880","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0881","sourceIdentifier":"cve@mitre.org","published":"1999-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6404568E-CD7E-4F7A-B630-598DE2852FBA"}]}]}],"references":[{"url":"http://www.osvdb.org/1127","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/743","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0882","sourceIdentifier":"cve@mitre.org","published":"1999-10-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Falcon web server allows remote attackers to determine the absolute path of the web root via long file names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:falcon:falcon_web_server:1.0.0.1006:*:*:*:*:*:*:*","matchCriteriaId":"1662BFDE-D3B9-40E5-A128-916C7DB958A2"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0883","sourceIdentifier":"cve@mitre.org","published":"1999-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D7BD6BD-8945-45FC-909B-853BBD328618"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C9DBE4CC-5AAA-415E-9C2D-5B559377643B"}]}]}],"references":[{"url":"http://www.osvdb.org/1126","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/742","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3380","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0884","sourceIdentifier":"cve@mitre.org","published":"1999-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Zeus web server administrative interface uses weak encryption for its passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D7BD6BD-8945-45FC-909B-853BBD328618"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C9DBE4CC-5AAA-415E-9C2D-5B559377643B"}]}]}],"references":[{"url":"http://www.osvdb.org/8186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/742","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3833","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0885","sourceIdentifier":"cve@mitre.org","published":"1999-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL."},{"lang":"es","value":"El servidor web Alibaba permite a un atacante remoto ejecutar comandos mediante un caráctar de tubería (barra vertical) en una URL malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_software_manufaktur:alibaba:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DD3CBF4-B593-4C4A-8B9C-D005846B4090"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-11-01&msg=01BF261F.928821E0.kerb%40fnusa.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-11-01&msg=01BF261F.928821E0.kerb%40fnusa.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0886","sourceIdentifier":"cve@mitre.org","published":"1999-09-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/645","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-041","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0887","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5410FC34-6F34-40D2-8CB7-8271C7BC593D"}]}]}],"references":[{"url":"http://www.eeye.com/html/Research/Advisories/AD05261999.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1137","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD05261999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0888","sourceIdentifier":"cve@mitre.org","published":"1999-08-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:7.3.3:*:*:*:*:*:*:*","matchCriteriaId":"8FE5CF5D-4649-4E3A-9328-47224065384F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"AE07BAF7-3A9A-426B-9536-72EAB8984A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"44F4BD05-8A36-4C17-AA00-01CE12A66137"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BF68DBCB-377C-476A-9373-5A85AA20916C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0F492716-428E-41DF-AC50-1C8A84DBA2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AE91CC68-D396-4437-886C-370D30A771CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/585","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0889","sourceIdentifier":"cve@mitre.org","published":"1999-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:675_router:*:*:*:*:*:*:*:*","matchCriteriaId":"79C42E18-4D5A-432C-B5C5-D57F7D40D414"}]}]}],"references":[{"url":"http://www.osvdb.org/39","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/39","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0890","sourceIdentifier":"cve@mitre.org","published":"1999-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ihtml_merchant:ihtml_merchant:*:*:*:*:*:*:*:*","matchCriteriaId":"B0A084FF-96DE-4EDD-9C41-DCBA54ACFC8C"}]}]}],"references":[{"url":"http://www.ihtmlmerchant.com/support_patches_feedback.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/694","source":"cve@mitre.org"},{"url":"http://www.ihtmlmerchant.com/support_patches_feedback.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0891","sourceIdentifier":"cve@mitre.org","published":"1999-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"download behavior\" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242542","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/k-002.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/37828","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/11274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/674","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-040","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ242542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/k-002.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/37828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/11274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0892","sourceIdentifier":"cve@mitre.org","published":"1999-12-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0892","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0893","sourceIdentifier":"cve@mitre.org","published":"1999-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0893","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0894","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0894","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0895","sourceIdentifier":"cve@mitre.org","published":"1999-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firewall-1 does not properly restrict access to LDAP attributes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"}]}]}],"references":[{"url":"http://www.osvdb.org/1117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/725","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991020150002.21047.qmail%40tarjan.mediaways.net","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=19991020150002.21047.qmail%40tarjan.mediaways.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0896","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver_g2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C3F22E7F-F4D8-4052-A8DF-BA717EDD94B4"}]}]}],"references":[{"url":"http://service.real.com/help/faq/servg260.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/767","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/servg260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0897","sourceIdentifier":"cve@mitre.org","published":"1998-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ichat_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8CCBB619-E376-47B7-8445-8AE61C458C8D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90538488231977&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90538488231977&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0898","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/768","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0899","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/769","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0900","sourceIdentifier":"cve@mitre.org","published":"1999-10-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-nis:rpc.yppasswdd:*:*:*:*:*:*:*:*","matchCriteriaId":"FAAC790B-89D2-411A-BC0C-D0A5F85D49C3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0900","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0901","sourceIdentifier":"cve@mitre.org","published":"1999-10-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ypserv allows a local user to modify the GECOS and login shells of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-nis:ypserv:*:*:*:*:*:*:*:*","matchCriteriaId":"4BA59589-2AD0-48F3-9879-7BB2F47E9884"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0901","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0902","sourceIdentifier":"cve@mitre.org","published":"1999-10-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ypserv allows local administrators to modify password tables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-nis:ypserv:*:*:*:*:*:*:*:*","matchCriteriaId":"4BA59589-2AD0-48F3-9879-7BB2F47E9884"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0902","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0903","sourceIdentifier":"cve@mitre.org","published":"1999-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0904","sourceIdentifier":"cve@mitre.org","published":"1999-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:byte_fusion:bftelnet:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C251D7F-09C0-4553-8266-1E989B1F28D0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0905","sourceIdentifier":"cve@mitre.org","published":"1999-10-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Axent Raptor firewall via malformed zero-length IP options."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axent:raptor_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"AC858FDD-D2A4-49DF-B36B-8641F4410130"}]}]}],"references":[{"url":"http://www.osvdb.org/1121","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/736","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0906","sourceIdentifier":"cve@mitre.org","published":"1999-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/656","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0907","sourceIdentifier":"cve@mitre.org","published":"1999-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sccw allows local users to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steven_j._merrifield:soundcard_cw:1.1:*:linux:*:*:*:*:*","matchCriteriaId":"A99542E6-89F0-4459-A5FA-F04C14DFB10B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0907","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0908","sourceIdentifier":"cve@mitre.org","published":"1999-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0909","sourceIdentifier":"cve@mitre.org","published":"1999-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the \"Spoofed Route Pointer\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:0a:*:*:*:*:*:*:*","matchCriteriaId":"8429C080-F550-4D03-A87A-4546273712AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:0b:*:*:*:*:*:*:*","matchCriteriaId":"5D153766-0C57-46F4-8865-6F1ED597B53C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238453","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/646","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-038","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0910","sourceIdentifier":"cve@mitre.org","published":"1999-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"81514AB5-388D-4D13-B63A-C237A502B86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"879AFDCC-B9D8-41EF-85DD-70CC1BD5227C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"35EBE0A3-F521-4B04-95B7-3C57D3090A20"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/625","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0911","sourceIdentifier":"cve@mitre.org","published":"1999-08-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"CE1015CB-9A33-48D5-861A-A1FC0D8D0FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre2:*:*:*:*:*:*:*","matchCriteriaId":"66C825FE-91EC-43A2-9EEA-65A31DF46570"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre3:*:*:*:*:*:*:*","matchCriteriaId":"1C563389-39DB-45BA-9C84-DD6837900440"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre4:*:*:*:*:*:*:*","matchCriteriaId":"E2ABE74B-3D17-45D9-A87A-CE562DDB4454"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre5:*:*:*:*:*:*:*","matchCriteriaId":"9166C42C-340D-4E7E-915C-BC2E4A373ACE"}]}]}],"references":[{"url":"http://www.debian.org/security/1999/19990210","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/612","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/1999/19990210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0912","sourceIdentifier":"cve@mitre.org","published":"1999-09-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}]}]}],"references":[{"url":"http://www.osvdb.org/1079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/653","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0913","sourceIdentifier":"cve@mitre.org","published":"1999-08-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_security_wizards:dragon-fire_ids:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CCCA766-49E6-464D-BCC4-1B49A83BA060"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93383593909438&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/564","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93383593909438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0914","sourceIdentifier":"cve@mitre.org","published":"1999-01-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the FTP client in the Debian GNU/Linux netstd package."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A9EDD1D3-6E5C-4D98-9360-33949353BD7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"87E89840-3B57-4CBA-BE90-0BBA61F21F96"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"745ACC17-B6D6-4B4E-9648-A8B45C4A3F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A632089-47D7-410D-AE12-F801193FA18F"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/324","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0915","sourceIdentifier":"cve@mitre.org","published":"1999-10-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pacific_software:url_live:1.0:*:*:*:*:*:*:*","matchCriteriaId":"76EAB542-B436-4DA9-853F-46B3C2E09A35"}]}]}],"references":[{"url":"http://www.osvdb.org/1129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/746","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0916","sourceIdentifier":"cve@mitre.org","published":"1999-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebTrends software stores account names and passwords in a file which does not have restricted access permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_enterprise_suite:v3.5:*:*:*:*:*:*:*","matchCriteriaId":"348E16C7-B584-40CF-A55D-AB6B0EB3BFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_for_firewalls:v1.2:*:*:*:*:*:*:*","matchCriteriaId":"7D58A5DF-2F5E-47F9-8395-BED1D23EBB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_log_analyzer:v4.51:*:*:*:*:*:*:*","matchCriteriaId":"39A0B2A1-B52F-477E-918B-FF2E41583F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_professional_suite:v3.01:*:*:*:*:*:*:*","matchCriteriaId":"3C5BECF2-9C47-4C1F-BA1E-317FB5FC569A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_security_analyzer:v2.0:*:*:*:*:*:*:*","matchCriteriaId":"426FF7E2-C6AD-4638-BC6B-928D73F217F7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0917","sourceIdentifier":"cve@mitre.org","published":"1999-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231452","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ231452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0918","sourceIdentifier":"cve@mitre.org","published":"1999-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in various Windows systems via malformed, fragmented IGMP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/514","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-034","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0919","sourceIdentifier":"cve@mitre.org","published":"1998-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A memory leak in a Motorola CableRouter allows remote attackers to conduct a denial of service via a large number of telnet connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:motorola_cablerouter:*:*:*:*:*:*:*:*","matchCriteriaId":"AE17FEA2-BF36-418D-9E34-29928ACDE8F1"}]}]}],"references":[{"url":"http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2004","source":"cve@mitre.org"},{"url":"http://www.netspace.org/cgi-bin/wa?A2=ind9805B&L=bugtraq&P=R1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0920","sourceIdentifier":"cve@mitre.org","published":"1999-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:4.4:*:*:*:*:*:*:*","matchCriteriaId":"131E16E8-69F2-4299-B8DB-F87F7AF3E969"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pop2d:*:*:*:*:*:*:*:*","matchCriteriaId":"9EE7A1E4-401F-4063-A3C5-94175ACD5E10"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/283","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0921","sourceIdentifier":"cve@mitre.org","published":"1999-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7B1CDFC2-10EC-4955-B254-5A22F910EFE8"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/4291.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/13204","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1879","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/4291.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/13204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0922","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0923","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0924","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3236","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1742","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0925","sourceIdentifier":"cve@mitre.org","published":"1999-09-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:messagemedia:unitymail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"472E58A9-A2A1-4F09-B6F3-5BCBB63AB40E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90486243124867&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90486243124867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0926","sourceIdentifier":"cve@mitre.org","published":"1999-09-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache allows remote attackers to conduct a denial of service via a large number of MIME headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AB26F3B0-04F8-43C1-9136-B85932F1C2F1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/1998_3/0742.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/1998_3/0742.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-0927","sourceIdentifier":"cve@mitre.org","published":"1999-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gordano:ntmail:4.20:*:*:*:*:*:*:*","matchCriteriaId":"3A3DCF83-E020-4879-9DDA-1FC1A68C639D"}]}]}],"references":[{"url":"http://www.eeye.com/html/Research/Advisories/AD05261999.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/279","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD05261999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0928","sourceIdentifier":"cve@mitre.org","published":"1999-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartdesk:websuite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4AE1044E-7091-4624-9F4F-AE051BC0C577"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/278","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0929","sourceIdentifier":"cve@mitre.org","published":"1999-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:http_server:2.51r1:*:*:*:*:*:*:*","matchCriteriaId":"7E8A518B-7753-4E25-9336-460A70E52541"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:http_server:3.1r1:*:*:*:*:*:*:*","matchCriteriaId":"041D1F45-8E68-4C00-955E-4A374B4B4A37"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.1:*:*:*:*:*:*:*","matchCriteriaId":"01439E99-85F3-47B6-802A-909B737071D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.11:*:*:*:*:*:*:*","matchCriteriaId":"771CB488-4109-453E-9C76-590A7805A6A0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0929","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0930","sourceIdentifier":"cve@mitre.org","published":"1998-09-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wwwboard allows a remote attacker to delete message board articles via a malformed argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:wwwboard:*:*:*:*:*:*:*:*","matchCriteriaId":"5C21AAC7-45B9-4A4D-8905-86827353D8E7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1795","source":"cve@mitre.org"},{"url":"http://www.worldwidemart.com/scripts/faq/wwwboard/q5.shtml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2344","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.worldwidemart.com/scripts/faq/wwwboard/q5.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0931","sourceIdentifier":"cve@mitre.org","published":"1999-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediahouse_software:statistics_server:4.28:*:*:*:*:*:*:*","matchCriteriaId":"23874677-B5B3-4485-BD19-168E2693A048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediahouse_software:statistics_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F4D3F01D-6EBC-436E-9E56-5CE14081D132"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/734","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0932","sourceIdentifier":"cve@mitre.org","published":"1999-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediahouse_software:statistics_server:4.28:*:*:*:*:*:*:*","matchCriteriaId":"23874677-B5B3-4485-BD19-168E2693A048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediahouse_software:statistics_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"6250AF10-CCBB-4FD9-8C13-1C6EE9725C6A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/735","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0933","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teamshare:teamtrack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4D408A75-F191-4470-844B-E5CCA0219737"}]}]}],"references":[{"url":"http://www.osvdb.org/1096","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/689","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0934","sourceIdentifier":"cve@mitre.org","published":"1999-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.securityfocus.com/bid/2020","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3102","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0935","sourceIdentifier":"cve@mitre.org","published":"1999-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0936","sourceIdentifier":"cve@mitre.org","published":"1998-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0936","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0937","sourceIdentifier":"cve@mitre.org","published":"1998-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0938","sourceIdentifier":"cve@mitre.org","published":"1999-06-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_college_london:sdr:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.2","matchCriteriaId":"8A051C27-0A80-427D-870C-B1D2AF0470EC"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0938","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0939","sourceIdentifier":"cve@mitre.org","published":"1999-08-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Debian IRC Epic/epic4 client via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:pre_potato:*:*:*:*:*","matchCriteriaId":"2B19ABCB-70F0-450E-9A71-2EE8F2BFB2EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/605","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0940","sourceIdentifier":"cve@mitre.org","published":"1999-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt_mail_client:*:*:*:*:*:*:*:*","matchCriteriaId":"2A691003-779A-46E5-9625-678D90C10AB0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0941","sourceIdentifier":"cve@mitre.org","published":"1998-07-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mutt mail client allows a remote attacker to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:0.95.6:*:*:*:*:*:*:*","matchCriteriaId":"7D43FB4B-1E1A-4F07-9587-09E335565654"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104526154&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526154&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0942","sourceIdentifier":"cve@mitre.org","published":"1999-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0942","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0943","sourceIdentifier":"cve@mitre.org","published":"1999-10-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openlink:openlink:a:*:*:*:*:*:*:*","matchCriteriaId":"7E794EB7-79BB-4359-B642-75AE9E554F16"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/720","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0944","sourceIdentifier":"cve@mitre.org","published":"1999-10-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere ikeyman tool uses weak encryption to store a password for a key database that is used for SSL connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0945","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via AUTH or AUTHINFO commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*","matchCriteriaId":"D823C88E-8560-469B-8655-4755E0484F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-080.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise4.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1223","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ169174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/i-080.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise4.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0946","sourceIdentifier":"cve@mitre.org","published":"1999-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yamaha:midiplug:1.1bj:*:*:*:*:*:*:*","matchCriteriaId":"50DEFAD6-56E1-4AD6-A0C6-2D38AA420B6E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94157187815629&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/760","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94157187815629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0947","sourceIdentifier":"cve@mitre.org","published":"1999-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AN-HTTPd provides example CGI scripts test.bat, input.bat, input2.bat, and envout.bat, which allow remote attackers to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.2b:*:*:*:*:*:*:*","matchCriteriaId":"CAD1527A-4BE5-47BA-9FA9-C19DE1718E28"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94157187815629&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/762","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94157187815629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0948","sourceIdentifier":"cve@mitre.org","published":"1999-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uum program for Canna input system allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/757","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0949","sourceIdentifier":"cve@mitre.org","published":"1999-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in canuum program for Canna input system allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/757","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0950","sourceIdentifier":"cve@mitre.org","published":"1999-10-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via\ta series of MKD and CWD commands that create nested directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0951","sourceIdentifier":"cve@mitre.org","published":"1999-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OmniHTTPd CGI program imagemap.exe allows remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0908E70E-2609-46F7-B09B-862F85B1B5C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.4pro:*:*:*:*:*:*:*","matchCriteriaId":"6B7B96C7-EB32-45AC-BCD2-F5DE009E104A"}]}]}],"references":[{"url":"http://www.osvdb.org/3380","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/739","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0952","sourceIdentifier":"cve@mitre.org","published":"1999-01-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris lpstat via class argument allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91759216618637&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91759216618637&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0953","sourceIdentifier":"cve@mitre.org","published":"1999-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:wwwboard:2.0_alpha_2.1:*:*:*:*:*:*:*","matchCriteriaId":"C90C4757-D39C-4C19-B183-61C244F4EAA7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0953","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0954","sourceIdentifier":"cve@mitre.org","published":"1999-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WWWBoard has a default username and default password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:wwwboard:2.0_alpha_2:*:*:*:*:*:*:*","matchCriteriaId":"5525A19D-52D5-445A-83DE-1B8D440340C7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/649","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0955","sourceIdentifier":"cve@mitre.org","published":"1997-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in wu-ftpd and BSDI ftpd allows remote attackers to gain root access via the SITE EXEC command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"28E5257A-F5ED-482C-9A0B-3B576513E7D7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0956","sourceIdentifier":"cve@mitre.org","published":"1997-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NeXT NetInfo _writers property allows local users to gain root privileges or conduct a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4902BDC4-9FEC-4EB9-9D93-54FF81AF138C"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"D9583554-25FF-46B5-BFA6-5B0F3CEDA725"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:2.0:*:*:*:*:*:*:*","matchCriteriaId":"286C0359-C286-4CA8-B017-046FCE58B544"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D08ADE-122E-4836-9335-96D153E39128"},{"vulnerable":true,"criteria":"cpe:2.3:o:next:nextstep:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC203236-BBF4-4D76-B17F-EF03472DBB7D"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0957","sourceIdentifier":"cve@mitre.org","published":"1997-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MajorCool mj_key_cache program allows local users to modify files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majorcool:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"D8ED2EA0-60FA-4640-A5C3-8490579F1894"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0957","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0958","sourceIdentifier":"cve@mitre.org","published":"1998-01-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9D796959-61D2-42D5-BF93-1A93AE1392BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"61D6855B-2B49-4695-9C8F-38CBE95E115A"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E8D768E6-6B55-448E-B6B6-58391971CA86"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88465708614896&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88465708614896&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0959","sourceIdentifier":"cve@mitre.org","published":"1997-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX startmidi program allows local users to modify arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8447","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/469","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1634","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0960","sourceIdentifier":"cve@mitre.org","published":"1998-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX cdplayer allows local users to create directories in arbitrary locations via a command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0961","sourceIdentifier":"cve@mitre.org","published":"1996-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167419906&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167419906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0962","sourceIdentifier":"cve@mitre.org","published":"1997-05-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"http://www.osvdb.org/6415","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9701-045","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9701-045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0963","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD mount_union command allows local users to gain root privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}]}]}],"references":[{"url":"http://www.osvdb.org/6088","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0964","sourceIdentifier":"cve@mitre.org","published":"2000-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"}]}]}],"references":[{"url":"http://www.osvdb.org/6086","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0965","sourceIdentifier":"cve@mitre.org","published":"1997-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in xterm allows local users to modify arbitrary files via the logging option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0","matchCriteriaId":"521AF03D-6C7D-4BF0-8C28-A887F3054E56"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:-:*:*:*:*:*:*","matchCriteriaId":"12EC442A-3481-481A-8927-86771F01A58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-01:*:*:*:*:*:*","matchCriteriaId":"13B209F8-CB94-4224-A7FD-118915BA8136"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-02:*:*:*:*:*:*","matchCriteriaId":"CC6E576D-C6FC-409C-BD48-5FC721FE3C39"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-03:*:*:*:*:*:*","matchCriteriaId":"E318087C-875A-49FC-9198-B98E0622F756"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-04:*:*:*:*:*:*","matchCriteriaId":"C0747942-FA57-4FAB-91B6-BA59612C5C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-05:*:*:*:*:*:*","matchCriteriaId":"D18A3EDB-8AF8-4AFC-BCDF-983199B16F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-06:*:*:*:*:*:*","matchCriteriaId":"1A41167C-4BD6-41D8-B1A4-28F6A1664196"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-07:*:*:*:*:*:*","matchCriteriaId":"E99C601A-2B21-4284-8FE9-AF5BE6AF2786"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-08:*:*:*:*:*:*","matchCriteriaId":"673743D8-31CD-459F-A9DA-0D3188FBCEB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-09:*:*:*:*:*:*","matchCriteriaId":"3BCE835E-101C-4929-82D4-EA0D66B03607"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-10:*:*:*:*:*:*","matchCriteriaId":"D46F4C68-4462-41F4-B839-336A9AEAFB76"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-11:*:*:*:*:*:*","matchCriteriaId":"041E5856-C20F-4B9A-848C-AF64462385F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-12:*:*:*:*:*:*","matchCriteriaId":"13147C3B-1954-4703-A5FA-32487ED63DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-13:*:*:*:*:*:*","matchCriteriaId":"35CFF2E5-7F6C-4CFD-85A9-216063878251"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-14:*:*:*:*:*:*","matchCriteriaId":"CD25DE0F-A81C-4797-B66D-0645EC3486F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-15:*:*:*:*:*:*","matchCriteriaId":"754B62CF-5B7D-4E24-A471-ADBFCF096540"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-16:*:*:*:*:*:*","matchCriteriaId":"33571663-B72B-4E53-A715-12409D67D015"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-17:*:*:*:*:*:*","matchCriteriaId":"DD503B54-9000-4BF7-B0AE-7CE9A58D1AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-18:*:*:*:*:*:*","matchCriteriaId":"801B1D9F-9890-446F-940F-F02A910DF4AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-19:*:*:*:*:*:*","matchCriteriaId":"5587CAA0-BE8A-4F5B-94B1-02097090D8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-20:*:*:*:*:*:*","matchCriteriaId":"8DEA7068-88C1-4A3B-9A35-2E3DA940C2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-21:*:*:*:*:*:*","matchCriteriaId":"B81E853E-2F4E-4B07-A191-9A636B868315"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-22:*:*:*:*:*:*","matchCriteriaId":"8552A4FD-5A27-41DD-9C71-6F77E2FAFDEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-23:*:*:*:*:*:*","matchCriteriaId":"BBBDFAC9-FF27-43C1-9295-62ED2AAB3776"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-24:*:*:*:*:*:*","matchCriteriaId":"95F63320-E86F-4DDA-82B5-6958F2E5E85D"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11:5.0:fix-25:*:*:*:*:*:*","matchCriteriaId":"8C01027A-7DBE-4E9D-A13E-59687BE919E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0965","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-1999-0966","sourceIdentifier":"cve@mitre.org","published":"1997-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0966","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0967","sourceIdentifier":"cve@mitre.org","published":"1997-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:*:*:*:*:*:*:*:*","matchCriteriaId":"1FD2BCA5-9DA0-472C-B0DF-A4A8BC54B4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"0802EC98-E220-46F6-84CF-7FA4E3696887"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0968","sourceIdentifier":"cve@mitre.org","published":"1998-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:james_seter:bnc_irc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"D1BD1CEE-FC91-48B1-8180-FFD550382353"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11711","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1927","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1546","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/11711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0969","sourceIdentifier":"cve@mitre.org","published":"1998-09-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ193233","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-014","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ193233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0970","sourceIdentifier":"cve@mitre.org","published":"1999-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:*:*:*:*:*:*:*:*","matchCriteriaId":"29AF27ED-3F69-4678-AF21-724923183401"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/14311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1808","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2271","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/14311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0971","sourceIdentifier":"cve@mitre.org","published":"1997-07-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*","versionEndIncluding":"1.62","matchCriteriaId":"7DDCEFC3-A54C-4F55-ABB0-DA7299D5A8CF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/7301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0972","sourceIdentifier":"cve@mitre.org","published":"1999-12-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xshipwars xsw program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfpack_development:xshipwars:1.0:*:*:*:*:*:*:*","matchCriteriaId":"22B32300-4C56-4ECB-8438-2251FDBDE5B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfpack_development:xshipwars:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"BC96F3FA-02BE-4A34-B5BD-75CAEF3B7148"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0973","sourceIdentifier":"cve@mitre.org","published":"1999-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0974","sourceIdentifier":"cve@mitre.org","published":"1999-12-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/190","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/864","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0975","sourceIdentifier":"cve@mitre.org","published":"1999-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0976","sourceIdentifier":"cve@mitre.org","published":"1999-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D4273E93-B536-4B2C-8DAD-84A6F5E38890"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/857","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0977","sourceIdentifier":"cve@mitre.org","published":"1999-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2354","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/866","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0978","sourceIdentifier":"cve@mitre.org","published":"1999-12-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htdig allows remote attackers to execute commands via filenames with shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/867","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0979","sourceIdentifier":"cve@mitre.org","published":"2000-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94530783815434&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/869","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94530783815434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0980","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT Service Control Manager (SCM) allows remote attackers to cause a denial of service via a malformed argument in a resource enumeration request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246045","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-055","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0981","sourceIdentifier":"cve@mitre.org","published":"1999-12-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka \"Server-side Page Reference Redirect.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.01","matchCriteriaId":"E451A785-9BAF-4F62-932A-A9D8ED86D40C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246094","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-050","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0982","sourceIdentifier":"cve@mitre.org","published":"1999-12-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:web-based_enterprise_management:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D1BDFB6D-F48D-4AF0-A634-262D1954D426"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:web-based_enterprise_management:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D36D45B5-0A8A-4720-BA64-ABCF2C71E77C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*","matchCriteriaId":"11847B60-D66B-4386-940A-C53B11853E50"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0982","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0983","sourceIdentifier":"cve@mitre.org","published":"1999-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internic:whois_lookup:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F3A0ABD0-E326-4584-AF8F-FC2157AD0731"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0983","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0984","sourceIdentifier":"cve@mitre.org","published":"1999-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matts_whois:matts_whois:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3D692BAA-35DA-463C-8923-B139912EDF3B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0984","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0985","sourceIdentifier":"cve@mitre.org","published":"1999-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cc:cc_whois:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A81CD86-8B5B-4BEA-9D1D-786C4BFB7733"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0986","sourceIdentifier":"cve@mitre.org","published":"1999-12-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"92555500-16EB-4F76-B2C7-61A00A1AC722"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"1E55F8A8-1ABD-4760-9074-353BBAEE005B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"F873503F-C6E2-4AC2-859E-9431FE0FA0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/870","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0987","sourceIdentifier":"cve@mitre.org","published":"1999-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237923","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ237923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0988","sourceIdentifier":"cve@mitre.org","published":"1999-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"43D2F319-DF69-4E52-AF29-06DF1E312030"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B3AC5333-BC57-48EB-BB77-1E258791EFEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"168248AC-E4F6-4C8F-9A21-0E6ABE029DFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.16:*:*:*:*:*:*:*","matchCriteriaId":"EB069CA5-F5F8-447D-997D-481E5158DABB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0988","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0989","sourceIdentifier":"cve@mitre.org","published":"1999-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"7AAA310C-7DED-40B3-B5EF-80C7407BB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/861","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0990","sourceIdentifier":"cve@mitre.org","published":"1999-12-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:2.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"FA0A11C1-AF35-4006-A5BA-634B814DAC73"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0990","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0991","sourceIdentifier":"cve@mitre.org","published":"1999-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goodtech:telnet_server_nt:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97138DD7-9D7A-4B93-8D5F-D02BD4F1EB4F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0992","sourceIdentifier":"cve@mitre.org","published":"2000-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP VirtualVault with the PHSS_17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:*:*:*:*:*:*:*:*","matchCriteriaId":"7AADED85-FA20-4D93-8921-A4933181ADF5"}]}]}],"references":[{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9912-107","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX9912-107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0993","sourceIdentifier":"cve@mitre.org","published":"1999-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Modifications to ACLs (Access Control Lists) in Microsoft Exchange  5.5 do not take effect until the directory store cache is refreshed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*","matchCriteriaId":"D823C88E-8560-469B-8655-4755E0484F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0994","sourceIdentifier":"cve@mitre.org","published":"1999-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248183","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/873","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-056","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0995","sourceIdentifier":"cve@mitre.org","published":"1999-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka \"Malformed Security Identifier Request.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/875","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-057","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0996","sourceIdentifier":"cve@mitre.org","published":"1999-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infoseek:ultraseek_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"3DD7E397-BD6B-419F-8835-63122B2D32F6"}]}]}],"references":[{"url":"http://www.eeye.com/html/Research/Advisories/AD19991215.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6490","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD19991215.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0997","sourceIdentifier":"cve@mitre.org","published":"1999-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider CVE-1999-0997 to be a security vulnerability.  The wu-ftpd process chroots itself into the target ftp directory and will only run external commands as the user logged into the ftp server.  Because the process chroots itself, an attacker needs a valid login with write access to the ftp server, and even then they could only potentially execute commands as themselves.","lastModified":"2006-09-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:millenux_gmbh:anonftp:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"54BD613B-52C9-4F57-B1B3-C7E38F829F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:wu-ftpd:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"82A23988-1494-4BFD-908A-78FE2BC7C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:wu-ftpd:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"54D2322D-BBA4-4C36-81EC-E37FE8C87689"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:wu-ftpd:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"688CB1B7-D36C-4DA2-A261-07B23FCE1230"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-377","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0998","sourceIdentifier":"cve@mitre.org","published":"1999-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Cache Engine allows an attacker to replace content in the cache."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine:2:*:*:*:*:*:*:*","matchCriteriaId":"B7D41695-13E0-45AD-A83F-5414BF1498CF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0998","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-0999","sourceIdentifier":"cve@mitre.org","published":"1999-11-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/817","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-059","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1000","sourceIdentifier":"cve@mitre.org","published":"1999-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine:2:*:*:*:*:*:*:*","matchCriteriaId":"B7D41695-13E0-45AD-A83F-5414BF1498CF"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1000","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1001","sourceIdentifier":"cve@mitre.org","published":"1999-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Cache Engine allows a remote attacker to gain access via a null username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC01CC57-A2C6-4E39-9CCD-E5908C08F65E"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1002","sourceIdentifier":"cve@mitre.org","published":"2000-01-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Navigator uses weak encryption for storing a user's Netscape mail password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94536309217214&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94570673523998&w=2","source":"cve@mitre.org"},{"url":"http://www.rstcorp.com/news/bad-crypto.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94536309217214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94570673523998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rstcorp.com/news/bad-crypto.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1003","sourceIdentifier":"cve@mitre.org","published":"1999-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jgaa:warftpd:1.70:*:*:*:*:*:*:*","matchCriteriaId":"979D5A22-E5CD-4195-8FC3-BCEF829549B1"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1003","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1004","sourceIdentifier":"cve@mitre.org","published":"1999-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2000:*:*:*:*:*:*:*","matchCriteriaId":"A40E47AA-884D-40B4-8AD6-2532F2D9CB3E"}]}]}],"references":[{"url":"http://service1.symantec.com/SUPPORT/nav.nsf/df0a595864594c86852567ac0063608c/6206f660a1f2516a882568660082c930?OpenDocument&Highlight=0%2Cpoproxy","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6267","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/38970","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/39194","source":"cve@mitre.org"},{"url":"http://service1.symantec.com/SUPPORT/nav.nsf/df0a595864594c86852567ac0063608c/6206f660a1f2516a882568660082c930?OpenDocument&Highlight=0%2Cpoproxy","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/38970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/39194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1005","sourceIdentifier":"cve@mitre.org","published":"1999-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"4F386C07-2C07-4C68-A8F6-D2B590A99133"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.2:*:*:*:*:*:*:*","matchCriteriaId":"22426725-2204-4750-87F6-A57BA727F213"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94571433731824&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3413","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/879","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94571433731824&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1006","sourceIdentifier":"cve@mitre.org","published":"1999-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.2:*:*:*:*:*:*:*","matchCriteriaId":"22426725-2204-4750-87F6-A57BA727F213"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94571433731824&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94571433731824&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1007","sourceIdentifier":"cve@mitre.org","published":"1999-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vdonet:vdolive_player:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7E856AE4-110C-4002-8D8F-34337B99A4FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94512259331599&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/872","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94512259331599&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1008","sourceIdentifier":"cve@mitre.org","published":"2000-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xsoldier program allows local users to gain root access via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"}]}]}],"references":[{"url":"http://marc.info/?l=freebsd-security&m=94531826621620&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/871","source":"cve@mitre.org"},{"url":"http://marc.info/?l=freebsd-security&m=94531826621620&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1009","sourceIdentifier":"cve@mitre.org","published":"1999-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:disney:go_express_search:*:*:*:*:*:*:*:*","matchCriteriaId":"2B497A96-CEAF-4CBF-B929-23F0DF97DE54"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1009","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-1009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1010","sourceIdentifier":"cve@mitre.org","published":"1999-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An SSH 1.2.27 server allows a client to use the \"none\" cipher, even if it is not allowed by the server policy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"114134F3-BDFD-465D-8317-82F9D6EFA5A7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94519142415338&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94519142415338&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1011","sourceIdentifier":"cve@mitre.org","published":"1999-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1B1985AB-FCAB-4ABC-BF03-9E11CD015596"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D331DB4-AA55-4E1B-8B73-14EE2F13E09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A3BFD086-7F94-4482-AC27-E4FAD418B767"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-054.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/272","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025","source":"cve@mitre.org"},{"url":"https://www.securityfocus.com/bid/529","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/j-054.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.securityfocus.com/bid/529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1012","sourceIdentifier":"cve@mitre.org","published":"1999-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:4.6.1:*:as_400:*:*:*:*:*","matchCriteriaId":"DCEF37BA-4294-4F11-BCA9-CBA04370921A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/13527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/13527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1013","sourceIdentifier":"cve@mitre.org","published":"1999-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93837026726954&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/673","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93837026726954&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1014","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93727925026476&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93846422810162&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/672","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3297","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93727925026476&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93846422810162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1015","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a denial of service (crash) via a long HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:appleshare_mail_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9BB5CA34-6F8B-42A8-9E2A-C13C648ED379"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89200657216213&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/61","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=89200657216213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/61","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1016","sourceIdentifier":"cve@mitre.org","published":"1999-08-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:express:*:*:*:*:*","matchCriteriaId":"39EC4E10-AE31-4F20-B04E-35A14F326EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:*:*:*:*:*:*:*:*","matchCriteriaId":"4E9BCC03-1C5A-4674-BE84-235B9225C074"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93578772920970&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/606","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=93578772920970&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1017","sourceIdentifier":"cve@mitre.org","published":"1999-07-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting enabled, which allows a malicious ASP file attachment to execute when the recipient opens the message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:emurl:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"EFB97341-3A0E-4B6C-AA51-9E3922B42598"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93316253431588&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/544","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=93316253431588&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1018","sourceIdentifier":"cve@mitre.org","published":"1999-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.10","matchCriteriaId":"45204613-D254-43D9-9261-EFC4DDD8576E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93312523904591&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/543","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93312523904591&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1019","sourceIdentifier":"cve@mitre.org","published":"1999-06-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cabletron:spectrum_enterprise_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7F2FA5E1-2E37-457D-9E29-D1E77AEACA43"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93024398513475&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93024398713491&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/495","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93024398513475&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93024398713491&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1020","sourceIdentifier":"cve@mitre.org","published":"1998-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.1:*:*:*:*:*:*:*","matchCriteriaId":"01439E99-85F3-47B6-802A-909B737071D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.11:sp5b:*:*:*:*:*:*","matchCriteriaId":"063118A6-F4AA-4D3C-865C-DCD0F3623EF2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90613355902262&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/484","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1364","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90613355902262&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1021","sourceIdentifier":"cve@mitre.org","published":"1992-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-1992-15.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/47","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/117&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-1992-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/47","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1022","sourceIdentifier":"cve@mitre.org","published":"1994-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execute the ls program, which allows local users to gain root privileges via a Trojan horse ls program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4:*:*:*:*:*:*:*","matchCriteriaId":"C6AACDE0-00BA-4A29-8305-5AA0A4BC273C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/930","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/464","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1023","sourceIdentifier":"cve@mitre.org","published":"1999-06-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the \"-e\" (expiration date) argument, which could allow users to login after their accounts have expired."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92904175406756&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/426","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=92904175406756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1024","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, which causes an infinite loop and core dump when tcpdump prints the packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9B50919-7C67-416D-BA2F-50747CDBE08F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92955903802773&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92963447601748&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92989907627051&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/313","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=92955903802773&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92963447601748&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92989907627051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1025","sourceIdentifier":"cve@mitre.org","published":"1998-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90831127921062&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/294","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90831127921062&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F106027&zone_32=411568%2A%20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1026","sourceIdentifier":"cve@mitre.org","published":"1996-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420343&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/292","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420343&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1027","sourceIdentifier":"cve@mitre.org","published":"1998-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101925880&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/290","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7296","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101925880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1028","sourceIdentifier":"cve@mitre.org","published":"1999-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:8.0:*:*:*:*:*:*:*","matchCriteriaId":"447EE4D0-ED48-490E-BC1C-831A165CFF29"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92807524225090&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/2256.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/288","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=92807524225090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/2256.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1029","sourceIdentifier":"cve@mitre.org","published":"1999-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A7DB2FA-58A8-45B9-AE2E-AE20A872BF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2DD92EA8-8C01-4E4E-9AFE-2B1242AB10CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FB31028-59BA-4833-BF14-3CB1CA18DAAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A3E89B6-872D-4541-A413-88A956FDAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"98CC86ED-CA78-4E2A-8A12-4F766DB79733"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BD500A33-4D0E-44B5-9BBE-A30AA999F662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EBB8D72F-51E7-47DF-96A4-4EBB517A79D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC2379BA-621E-4986-AAC5-AF359FD57381"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9972B3A4-369E-40B5-9415-F92B7394604A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1B6E719F-010B-4B8A-B508-0491BD15C465"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E44D2AE3-DD8B-46D0-B6AB-9F0E6B4DCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B7735CDD-8BFC-4E30-9C88-27C8943637CA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92663402004280&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/277","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2193","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92663402004280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1030","sourceIdentifier":"cve@mitre.org","published":"1999-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (newline), which causes a malformed entry in the counter log that produces an access violation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:behold_software:web_page_counter:2.7:*:*:*:*:*:*:*","matchCriteriaId":"88D22226-F7FB-49F0-A5F8-BB80D14A3073"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92713790426690&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92707671717292&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/267","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=92713790426690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92707671717292&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1031","sourceIdentifier":"cve@mitre.org","published":"1999-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:behold_software:web_page_counter:2.7:*:*:*:*:*:*:*","matchCriteriaId":"88D22226-F7FB-49F0-A5F8-BB80D14A3073"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92713790426690&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92707671717292&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/267","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92713790426690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92707671717292&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1032","sourceIdentifier":"cve@mitre.org","published":"1991-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0699893A-AE83-4605-BF2B-FC0C17BF2A69"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"08B83DF0-860D-4A8C-ACA7-A1A68D81B8DB"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/b-36.shtml","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-11.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/26","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/584","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/b-36.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1991-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1033","sourceIdentifier":"cve@mitre.org","published":"1999-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:*:*:*:*:*:*:*:*","versionEndIncluding":"4.72.3612.1700","matchCriteriaId":"00B9B00C-F15C-4876-BE02-5FD6DBBBB488"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.27.3110.1:*:*:*:*:*:*:*","matchCriteriaId":"6BAE90D0-1637-49F4-8453-5E9959B55002"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3120.0:*:*:*:*:*:*:*","matchCriteriaId":"7769EE2E-A740-4AE8-B1B1-A5256C12601D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92647407427342&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92663402004275&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/252","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=92647407427342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92663402004275&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1034","sourceIdentifier":"cve@mitre.org","published":"1991-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:att:svr4:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6F6554C4-666E-42A0-87B2-50F28CE58997"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/b-28.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/23","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/583","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/b-28.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1035","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS \"GET\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q192/2/96.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1823","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q192/2/96.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1036","sourceIdentifier":"cve@mitre.org","published":"1998-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_diff, (2) ca.src, and (3) mail.chk."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cops:cops:1.04:*:*:*:*:*:*:*","matchCriteriaId":"DA637C49-E2E3-4691-8075-E5E9B88F0B9B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103125976&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1037","sourceIdentifier":"cve@mitre.org","published":"1998-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coast:satan:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"68B95230-3074-4D66-AE18-DB678565C48D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103125976&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125986&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7167.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3147","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221103125986&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7167.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1038","sourceIdentifier":"cve@mitre.org","published":"1998-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tamu:tiger:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"097F55B7-FA47-4BB9-B816-08382B0642A9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103125976&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1039","sourceIdentifier":"cve@mitre.org","published":"1998-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1040","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980501-01-P2869","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-055.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=89217373930054&w=2","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980501-01-P2869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-055.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=89217373930054&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1041","sourceIdentifier":"cve@mitre.org","published":"1998-08-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2v4:*:*:*:*:*:*:*","matchCriteriaId":"51756048-EB32-4A72-9ED4-937AF2B9DE37"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-98.05a","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90686250717719&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/vendor_bulletins/VB-98.10.sco.mscreen","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/10420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-98.05a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90686250717719&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/vendor_bulletins/VB-98.10.sco.mscreen","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/10420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1042","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:resource_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CD172F3-4964-410A-A7E9-5659DE662734"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:resource_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8305C239-6496-4CF9-9515-FDE7478877E7"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/770/crmtmp-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/crmtmp-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1043","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, which allows remote attackers to cause a denial of service (application error)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*","matchCriteriaId":"D823C88E-8560-469B-8655-4755E0484F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1044","sourceIdentifier":"cve@mitre.org","published":"1998-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:*:*:*:*:*:*:*:*","versionEndIncluding":"v4.0d","matchCriteriaId":"4223D0CB-F8AE-4786-92A4-E8D695541525"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:v4.0:*:*:*:*:*:*:*","matchCriteriaId":"6F1EAD30-C252-42BD-A5F6-1E2A285F0061"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/i-050.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-050.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7431.php","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-050.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-050.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7431.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1045","sourceIdentifier":"cve@mitre.org","published":"1998-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE671A54-2E76-467E-8945-10982B79F4CE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88490880523890&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88492978527261&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90338245305236&w=2","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/serv501.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7297.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6979","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88490880523890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88492978527261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90338245305236&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/serv501.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7297.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1046","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92038879607336&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1897","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92038879607336&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1047","sourceIdentifier":"cve@mitre.org","published":"1999-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bsdi:gauntlet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8FB453C2-51F4-4CEB-91BD-E913CCE1F5B9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94026690521279&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94036662326185&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/3397.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94026690521279&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94036662326185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/3397.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1048","sourceIdentifier":"cve@mitre.org","published":"1998-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory name, which is inserted into the password prompt via the \\w option in the PS1 environmental variable when another user changes into that directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7A632089-47D7-410D-AE12-F801193FA18F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602746719555&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/1998/19980909","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10542","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3414","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602746719555&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/1998/19980909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/10542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1049","sourceIdentifier":"cve@mitre.org","published":"1999-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"06562367-E088-443A-B2DE-F75A71241E18"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91972006211238&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91972006211238&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1050","sourceIdentifier":"cve@mitre.org","published":"1999-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formhandler.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E4B14ED-6423-487E-9185-6000CC906506"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formhandler.cgi:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CDA6F66D-C578-46B9-BECB-13971A87F9FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formhandler.cgi:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4B5C3D76-85DA-45BF-9397-4C7DD6186BF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/34600","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/34939","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/798","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/799","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3550","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/34600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/34939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1051","sourceIdentifier":"cve@mitre.org","published":"1999-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formhandler.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E4B14ED-6423-487E-9185-6000CC906506"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formhandler.cgi:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CDA6F66D-C578-46B9-BECB-13971A87F9FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formhandler.cgi:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4B5C3D76-85DA-45BF-9397-4C7DD6186BF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/34939","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/34939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1052","sourceIdentifier":"cve@mitre.org","published":"1999-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93582550911564&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93582550911564&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1053","sourceIdentifier":"cve@mitre.org","published":"1999-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"guestbook.pl cleanses user-inserted SSI commands by removing text between \"<!--\" and \"-->\" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides \"-->\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:matt_wright_guestbook:2.3:*:*:*:*:*:*:*","matchCriteriaId":"68093AEC-1493-486F-BD00-3E90A505E035"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/33674","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/27296","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/27560","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/776","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/33674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/27296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/27560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1054","sourceIdentifier":"cve@mitre.org","published":"1998-09-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globetrotter:flexlm:6.0d:*:*:*:*:*:*:*","matchCriteriaId":"1613C444-1046-40F1-B6E8-B6F89E487B12"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90675672323825&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90675672323825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1055","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, aka the Excel \"CALL Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:97:*:*:*:*:*:*:*","matchCriteriaId":"A78536AA-8694-4E0E-B7C6-9E5C3787D849"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/179","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1737","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1056","sourceIdentifier":"cve@mitre.org","published":"1992-12-31T05:00:00.000","lastModified":"2023-11-07T01:55:06.290","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-1395.  Reason: This candidate is a duplicate of CVE-1999-1395.  Notes: All CVE users should reference CVE-1999-1395 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-1057","sourceIdentifier":"cve@mitre.org","published":"1990-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:vms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3","matchCriteriaId":"FC6FCF3E-910B-44F0-A946-BCC90308222E"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/b-04.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7137.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/b-04.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7137.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1058","sourceIdentifier":"cve@mitre.org","published":"1999-11-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcane_software:vermillion_ftp_daemon:1.23:*:*:*:*:*:*:*","matchCriteriaId":"EEB7F46E-9949-43F3-8B7C-912D17AD7E39"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94329968617085&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94337185023159&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/818","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3543","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94329968617085&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94337185023159&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1059","sourceIdentifier":"cve@mitre.org","published":"1992-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:att:svr4:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6F6554C4-666E-42A0-87B2-50F28CE58997"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-04.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/3159.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/36","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/3159.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1060","sourceIdentifier":"cve@mitre.org","published":"1999-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by connecting to port 31457 from a host with a long DNS hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tetrix:tetrinet:1.13.16:*:*:*:*:*:*:*","matchCriteriaId":"8DD10D50-353E-434F-9796-992001ADB7A3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91937090211855&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/340","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=91937090211855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-1999-1061","sourceIdentifier":"cve@mitre.org","published":"1997-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which allows remote attackers to connect to the printer and change its IP address or disable logging."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:*:*:*:*:*:*:*:*","matchCriteriaId":"32DD7F1F-F9EF-495A-8992-110DFB18F88A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602248518480&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1876","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602248518480&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1062","sourceIdentifier":"cve@mitre.org","published":"1997-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters by directly sending PostScript documents to TCP ports 9099 and 9100."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:*:*:*:*:*:*:*:*","matchCriteriaId":"32DD7F1F-F9EF-495A-8992-110DFB18F88A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602248518480&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1876","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602248518480&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1063","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cdomain:cdomainfree:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A5161B34-3898-4585-B9C9-B10F3B5A5F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cdomain:cdomainfree:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F47E6F32-C2CC-494F-8576-09FE99A71FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cdomain:cdomainfree:2.1:*:*:*:*:*:*:*","matchCriteriaId":"49E3C4E5-3702-485F-802A-B72700F748F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cdomain:cdomainfree:2.2:*:*:*:*:*:*:*","matchCriteriaId":"73A6DB69-8D0F-4C4D-82BA-1908FB071F05"},{"vulnerable":true,"criteria":"cpe:2.3:a:cdomain:cdomainfree:2.3:*:*:*:*:*:*:*","matchCriteriaId":"79A142F9-2A67-45F5-9CE0-9B561D3BC867"},{"vulnerable":true,"criteria":"cpe:2.3:a:cdomain:cdomainfree:2.4:*:*:*:*:*:*:*","matchCriteriaId":"D1B83A16-25FE-4F19-8E8F-870924F2522C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/14019","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/304","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/14019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1064","sourceIdentifier":"cve@mitre.org","published":"1999-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly execute arbitrary commands by executing WindowMaker with a long program name (argv[0])."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:*:*:*:*:*:*:*:*","versionEndIncluding":"0.60.0","matchCriteriaId":"0CEC6182-2201-4DFC-89A4-E20CF819AB0F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93555317429630&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93582070508957&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/596","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93555317429630&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93582070508957&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1065","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:palm_pilot:hotsync_manager:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BDCD0288-1793-484B-9F45-98C2361BC897"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94175465525422&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94175465525422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1066","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a \"Smurf\" style attack on another host, by spoofing the connection request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:quake_1_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88349841-7A06-4200-8ADA-EB5965C017AB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94589559631535&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94589559631535&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1067","sourceIdentifier":"cve@mitre.org","published":"1997-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420919&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420919&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1068","sourceIdentifier":"cve@mitre.org","published":"1997-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6E2CAB4B-7CF6-4671-8E3C-5CA57B935403"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602661419366&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602661419366&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1069","sourceIdentifier":"cve@mitre.org","published":"1997-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icat:electronic_commerce_suite:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"03AFE70C-EB1A-4141-86C5-70021174DE74"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7943","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2126","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/7943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1070","sourceIdentifier":"cve@mitre.org","published":"1998-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xylogics:annex:*:*:*:*:*:*:*:*","matchCriteriaId":"61A47022-B84F-4458-8E3C-0F675E803D7A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10021","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/10021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1071","sourceIdentifier":"cve@mitre.org","published":"1998-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:excite:ews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F69DC10-474D-44C8-BE36-7F77EFBB0955"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91248445931140&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1417","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91248445931140&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1072","sourceIdentifier":"cve@mitre.org","published":"1998-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:excite:ews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F69DC10-474D-44C8-BE36-7F77EFBB0955"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91248445931140&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91248445931140&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1073","sourceIdentifier":"cve@mitre.org","published":"1998-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:excite:ews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5F69DC10-474D-44C8-BE36-7F77EFBB0955"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91248445931140&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91248445931140&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1074","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"30E3CF12-D0B7-4C7F-96C8-36A3FAFA8EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"C808C470-F0A1-4338-A988-3968EABE78E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"C16685C0-94E9-4AE6-8221-1D32112808F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.4:*:*:*:*:*:*:*","matchCriteriaId":"EDACA626-1687-4192-A2E8-C74823B715A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.21:*:*:*:*:*:*:*","matchCriteriaId":"84B5A02C-96AB-46FD-A958-86AC0DFD1F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1B8073-C512-4ACA-8E3F-92D46D63FBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.31:*:*:*:*:*:*:*","matchCriteriaId":"B368FAD0-39A7-4115-9327-1D32BECF2F7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.41:*:*:*:*:*:*:*","matchCriteriaId":"2B3D7B7A-0426-4176-A759-E96024DC492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.42:*:*:*:*:*:*:*","matchCriteriaId":"1E3EFDEE-A99B-4D0E-B6A7-E7C285A5DFBC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9138","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98","source":"cve@mitre.org"},{"url":"http://www.webmin.com/webmin/changes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/9138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webmin.com/webmin/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1075","sourceIdentifier":"cve@mitre.org","published":"1998-03-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89025820612530&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=89025820612530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1076","sourceIdentifier":"cve@mitre.org","published":"1999-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting the \"Log Out\" option and selecting a \"Cancel\" option in the dialog box for an application that attempts to verify that the user wants to log out, which returns the attacker into the locked session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:9:*:*:*:*:*:*:*","matchCriteriaId":"9D22617D-622E-442B-A2C7-C2571978DC42"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94096348604173&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/745","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94096348604173&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1077","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:9:*:*:*:*:*:*:*","matchCriteriaId":"9D22617D-622E-442B-A2C7-C2571978DC42"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94149318124548&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/756","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94149318124548&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1078","sourceIdentifier":"cve@mitre.org","published":"1999-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:6.0:*:*:*:*:*:*:*","matchCriteriaId":"69C53D89-E5B6-4734-8CDC-D81C1975640B"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/547","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1079","sourceIdentifier":"cve@mitre.org","published":"1999-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92601792420088&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93587956513233&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/439","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=92601792420088&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93587956513233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1080","sourceIdentifier":"cve@mitre.org","published":"1995-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could allow local users with physical access to gain root privileges by mounting a floppy or CD-ROM that contains a setuid program and running volcheck, when the file systems do not have the nosuid option specified in rmmount.conf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92633694100270&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93971288323395&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/250","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8350","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92633694100270&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93971288323395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1081","sourceIdentifier":"cve@mitre.org","published":"2002-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files."},{"lang":"es","value":"Vulnerabilidad en el script files.pl en Novell WebServer Examples Toolkit 2 permite a atacantes remotos leer ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:web_server:2.0:*:examples_toolkit:*:*:*:*:*","matchCriteriaId":"8018C0CA-3E44-42DF-A155-B9F8DFC8A3F2"}]}]}],"references":[{"url":"http://www.roxanne.org/faqs/www-secure/wwwsf4.html#Q35","source":"cve@mitre.org"},{"url":"http://www.w3.org/Security/Faq/wwwsf8.html#Q87","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2054","source":"cve@mitre.org"},{"url":"http://www.roxanne.org/faqs/www-secure/wwwsf4.html#Q35","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.w3.org/Security/Faq/wwwsf8.html#Q87","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1082","sourceIdentifier":"cve@mitre.org","published":"1999-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a \"......\" (modified dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.40:*:*:*:*:*:*:*","matchCriteriaId":"35AE9E3D-2E36-47E3-9B24-746DA7252029"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93941794201059&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/699","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93941794201059&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1083","sourceIdentifier":"cve@mitre.org","published":"1999-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95730430727064&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/699","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=95730430727064&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1084","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"AEDebug\" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=90222453431604&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q103/8/61.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/k-029.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1044","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=90222453431604&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q103/8/61.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/k-029.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1085","sourceIdentifier":"cve@mitre.org","published":"1998-06-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the \"SSH insertion attack.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"4E0D7922-3968-4469-BF37-D99978F2CD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"1D829774-3507-4145-91B4-273E3EA90E9A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103125884&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525878&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/1126.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/13877","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=90221103125884&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104525878&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/1126.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/13877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-1999-1086","sourceIdentifier":"cve@mitre.org","published":"1999-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"55D70745-2A40-4A7A-A33F-B68443ACC303"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.1:*:*:*:*:*:*:*","matchCriteriaId":"01439E99-85F3-47B6-802A-909B737071D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.11:sp5b:*:*:*:*:*:*","matchCriteriaId":"063118A6-F4AA-4D3C-865C-DCD0F3623EF2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93214475111651&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/528","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93214475111651&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1087","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4 treats a 32-bit number (\"dotless IP address\") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0AF9C64F-9A67-4BA9-A653-75507935E6EA"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q168/6/17.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/Windows/Ie/security/dotless.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7828","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2209","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q168/6/17.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/Windows/Ie/security/dotless.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1088","sourceIdentifier":"cve@mitre.org","published":"1997-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.02","matchCriteriaId":"E9919679-0F7D-47B7-8F94-49E2DE8DBBCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2012","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1089","sourceIdentifier":"cve@mitre.org","published":"1996-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.20","matchCriteriaId":"BBC898E5-04EC-4AF5-ACA3-7080D8AAA493"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-16.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420285&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2008","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-16.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1090","sourceIdentifier":"cve@mitre.org","published":"1991-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an \"ftp=yes\" line, which allows remote attackers to read and modify arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncsa:telnet:*:*:*:*:*:*:*:*","matchCriteriaId":"5CA584DD-D936-4EA3-A6E6-D39763480191"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-15.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1844","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1091","sourceIdentifier":"cve@mitre.org","published":"2002-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack."},{"lang":"es","value":"Los lectores de 'news' (grupos de noticias) de UNIX tin y rtin crean un fichero /tmp/.tin_log con permisos inseguros, y sigue enlaces simbólicos, lo que permite a atacantes modificar permisos de ficheros escribibles por el usuario mediante un ataque de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rtin:rtin:*:*:*:*:*:*:*:*","matchCriteriaId":"5F5E9FF4-CC02-40FA-BD08-09EB66D86EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tin:tin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"49D9C4D6-C222-42B4-977D-7E81192744FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167419835&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167419839&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420726&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/431","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167419835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167419839&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1092","sourceIdentifier":"cve@mitre.org","published":"1999-11-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iain_lea:tin:1.40:*:*:*:*:*:*:*","matchCriteriaId":"733B9371-E0B2-4DC3-B216-CC160099F8A2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94286179032648&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94286179032648&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1093","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:sp1:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"F185D0D0-43CE-4C46-9D34-47B7B26F6E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q191/2/00.asp","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/1276.php","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q191/2/00.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/1276.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1094","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the \"mk:\" protocol, aka the \"MK Overrun security issue.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"40B7DC57-531A-4BE6-8FB4-83975971F88C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88480839506155&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/917","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88480839506155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1095","sourceIdentifier":"cve@mitre.org","published":"1997-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87619953510834&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88886870129518&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88890116304676&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87619953510834&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88886870129518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88890116304676&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1096","sourceIdentifier":"cve@mitre.org","published":"1998-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*","matchCriteriaId":"30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101925954&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101925959&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1644","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101925954&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221101925959&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1097","sourceIdentifier":"cve@mitre.org","published":"1999-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"15B0FC30-A23E-435C-8B15-9C544CFB99F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92586457816446&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2187","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92586457816446&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1098","sourceIdentifier":"cve@mitre.org","published":"1995-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B44D379F-F380-42EC-9C9A-A4C8314A4BDF"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1995-03.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/f-12.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/516.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4881","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1995-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/f-12.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/516.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1099","sourceIdentifier":"cve@mitre.org","published":"1996-11-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadvertently includes the realm name and the last user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"A04BDD12-4421-49FA-9322-25F00B0402F3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420184&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/65","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1100","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_private_link:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1\\(6\\)","matchCriteriaId":"E124299F-F51D-4603-B0E8-10E542360372"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/i-056.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/770/pixkey-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1579","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-056.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/770/pixkey-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1101","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kab_software:lydia:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"8B027B36-D8C1-4093-8D41-C0B58CD05C39"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12618","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/12618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1102","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"32EF3E35-E1CA-41E3-BB94-0A914E3B7883"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:a_ux:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BDBAF8D-C7F4-470C-8A74-F0BF178D07EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"388BB5C2-53B3-4597-913C-7D86E585CCD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"BD213C54-28D3-4584-95D2-E28732BC649A"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/e-25.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm","source":"cve@mitre.org"},{"url":"http://www.phreak.org/archives/security/8lgm/8lgm.lpr","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/e-25.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.aenigma.net/resources/maillist/bugtraq/1994/0091.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phreak.org/archives/security/8lgm/8lgm.lpr","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1103","sourceIdentifier":"cve@mitre.org","published":"1996-04-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2c","matchCriteriaId":"FC787AC7-B485-4ACD-B739-D8C3A68C1557"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/g-18.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/vendor_bulletins/VB-96.05.dec","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7138.php","source":"cve@mitre.org"},{"url":"http://www.tao.ca/fire/bos/0209.html","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-18.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/vendor_bulletins/VB-96.05.dec","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7138.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tao.ca/fire/bos/0209.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1104","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167418931&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88536273725787&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=88540877601866&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q140/5/57.asp","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/71.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167418931&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88536273725787&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=88540877601866&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q140/5/57.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/71.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1105","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7231.php","source":"cve@mitre.org"},{"url":"http://www.net-security.sk/bugs/NT/netware1.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zdnet.com/eweek/reviews/1016/tr42bug.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7231.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.net-security.sk/bugs/NT/netware1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zdnet.com/eweek/reviews/1016/tr42bug.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1106","sourceIdentifier":"cve@mitre.org","published":"1998-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:*:*:*:*:*:*:*:*","matchCriteriaId":"D54C9BCD-7544-4005-8F61-45C3EC054385"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9121","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1643","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/92","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1107","sourceIdentifier":"cve@mitre.org","published":"1998-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*","matchCriteriaId":"30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1650","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91141486301691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1108","sourceIdentifier":"cve@mitre.org","published":"1998-11-18T05:00:00.000","lastModified":"2023-11-07T01:55:06.680","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-1107.  Reason: This candidate is a duplicate of CVE-1999-1107.  Notes: All CVE users should reference CVE-1999-1107 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-1109","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.10.0","matchCriteriaId":"08ADDC65-35BF-49BE-98C9-3BEA81183E81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94632241202626&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94780566911948&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7760.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/904","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94632241202626&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94780566911948&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7760.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1110","sourceIdentifier":"cve@mitre.org","published":"1999-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/34675","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/793","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/34675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1111","sourceIdentifier":"cve@mitre.org","published":"1999-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack which directly modifies a pointer to a return address instead of using a buffer overflow to reach the return address entry itself."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:stackguard:*:*:*:*:*:*:*:*","versionEndIncluding":"1.21","matchCriteriaId":"CE4FF4A5-0F12-458F-8635-7C93DCCC3870"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94218618329838&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/786","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3524","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94218618329838&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1112","sourceIdentifier":"cve@mitre.org","published":"1999-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the \"8BPS\" image type in a Photo Shop image header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irfanview:irfanview:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.7","matchCriteriaId":"3CAEFA7F-A24E-41F6-85F1-6D080D38C781"}]}]}],"references":[{"url":"http://stud4.tuwien.ac.at/~e9227474/main2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/34066","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/781","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3549","source":"cve@mitre.org"},{"url":"http://stud4.tuwien.ac.at/~e9227474/main2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/34066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1113","sourceIdentifier":"cve@mitre.org","published":"1998-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eudora:internet_mail_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.01","matchCriteriaId":"794243C7-D921-48D0-8551-E48392C4F2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:eudora:internet_mail_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E4B446B6-174D-4D84-9444-143E58E3BF6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eudora:internet_mail_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"187BD926-036F-46E3-83B9-2BC037A3D5E7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89258194718577&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/75","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=89258194718577&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1114","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.17.suid_exec.vul","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980405-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-15a.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/467","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2100","source":"cve@mitre.org"},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.17.suid_exec.vul","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980405-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-15a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1115","sourceIdentifier":"cve@mitre.org","published":"1990-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:apollo_domain_os:*:beta:*:*:*:*:*:*","versionEndIncluding":"sr10.3","matchCriteriaId":"F327CEF7-6EDD-4BA2-A60D-AC96588A824F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:apollo_domain_os:sr10.2:*:*:*:*:*:*:*","matchCriteriaId":"8B3564F9-ACAE-4E98-BE5D-912B257C93B1"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1990-04.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/a-30.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6721.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1990-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/a-30.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6721.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1116","sourceIdentifier":"cve@mitre.org","published":"1997-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970503-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/462","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2108","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970503-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1117","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-13.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420195&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420196&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&w=2&r=1&s=lquerypv&q=b","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1752","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-13.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420195&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420196&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&w=2&r=1&s=lquerypv&q=b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1118","sourceIdentifier":"cve@mitre.org","published":"1998-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/165&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/433","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/817","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/165&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1119","sourceIdentifier":"cve@mitre.org","published":"1992-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:32-bit:*:*:*:*:*","matchCriteriaId":"EA45EFBA-7900-4277-9177-2D2A8316577D"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-09.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/41","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3154","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/41","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1120","sourceIdentifier":"cve@mitre.org","published":"1997-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","matchCriteriaId":"BD2D5C10-ED78-4A1C-B0D1-68F34EAD2614"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420403&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/993","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/395","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2107","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420403&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1121","sourceIdentifier":"cve@mitre.org","published":"1992-03-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2","matchCriteriaId":"7984C6CE-B4DB-4863-93FB-799BD0BE589A"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/38","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/554","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1122","sourceIdentifier":"cve@mitre.org","published":"1989-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.3","matchCriteriaId":"8ABF98B1-CBDE-4E12-8F3F-9D9E22E72236"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2839042D-7706-4059-B069-72E36297ECEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3791C6C1-2B30-4746-B4D5-A728914C3589"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1989-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/ciac-08.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6695","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1989-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/ciac-08.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1123","sourceIdentifier":"cve@mitre.org","published":"1991-05-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) makeinstall or (2) winstall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/107&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1991-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/21","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/22","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/582","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/107&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1991-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1124","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion:*:*:*:*:*:*:*:*","matchCriteriaId":"6DA88352-88EF-48A1-A50B-572C78A090A6"}]}]}],"references":[{"url":"http://packetstorm.securify.com/mag/phrack/phrack54/P54-08","source":"cve@mitre.org"},{"url":"http://packetstorm.securify.com/mag/phrack/phrack54/P54-08","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1125","sourceIdentifier":"cve@mitre.org","published":"1997-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gain privileges or modify arbitrary files by modifying the configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"53E647B9-2588-452A-93FF-2B6D1E7F8674"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"627D0994-5BAE-455A-8413-1FBFD0D2256F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602880019796&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602880019796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1126","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with \"DPR_\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:resource_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"28FD65FA-AF10-44E8-B13C-69CB4CA1A124"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/i-086.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/crmtmp-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1575","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-086.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/crmtmp-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1127","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the \"Named Pipes Over RPC\" vulnerability."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:enterprise:*:*:*","matchCriteriaId":"FA9FD6FB-7D96-42C9-AA8D-654A29FCA465"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:server:*:*:*","matchCriteriaId":"B48A648C-7D20-4546-B288-FBC795D8FE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:terminal_server:*:*:*","matchCriteriaId":"E30F6C9C-3371-44FF-AD0B-3CAA0AB6F1B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:workstation:*:*:*","matchCriteriaId":"22BA7A30-849D-411B-A790-FC175435379B"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q195/7/33.asp","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/523.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/support/kb/articles/Q195/7/33.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/523.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1128","sourceIdentifier":"cve@mitre.org","published":"1997-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F62AC866-A06F-47DB-AEDF-E345CE0B14A4"}]}]}],"references":[{"url":"http://members.tripod.com/~unibyte/iebug3.htm","source":"cve@mitre.org"},{"url":"http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html","source":"cve@mitre.org"},{"url":"http://members.tripod.com/~unibyte/iebug3.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1129","sourceIdentifier":"cve@mitre.org","published":"1999-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa5:*:*:*:*:*:*:*","matchCriteriaId":"754F06BF-EB7D-4DAD-BF5D-7DF2619A7499"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2900_vlan:*:*:*:*:*:*:*:*","matchCriteriaId":"643219DD-5795-48F9-899D-19A27A614F90"}]}]}],"references":[{"url":"http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/26008","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/615","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3294","source":"cve@mitre.org"},{"url":"http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/26008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1130","sourceIdentifier":"cve@mitre.org","published":"1999-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"AAF865EE-D927-41E3-AB70-2E90D2C84685"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93346448121208&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93337389603117&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/559","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93346448121208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93337389603117&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1131","sourceIdentifier":"cve@mitre.org","published":"1997-10-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980601-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-060.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/vendor_bulletins/VB-97.12.opengroup","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1123","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980601-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-060.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/vendor_bulletins/VB-97.12.opengroup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1132","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information Field (RIF) field with a hop count greater than 7, or (2) a list containing duplicate Token Ring IDs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90763508011966&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=90760603030452&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q179/1/57.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/1399.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90763508011966&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=90760603030452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/Q179/1/57.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/1399.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1133","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfile, or (4) dtpad, which do not authenticate users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602880019776&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/499","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602880019776&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1134","sourceIdentifier":"cve@mitre.org","published":"1994-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/e-23.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstorm.securify.com/advisories/hpalert/008","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/2284.php","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/e-23.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstorm.securify.com/advisories/hpalert/008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/2284.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1135","sourceIdentifier":"cve@mitre.org","published":"1994-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://packetstorm.securify.com/advisories/hpalert/027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2284","source":"cve@mitre.org"},{"url":"http://packetstorm.securify.com/advisories/hpalert/027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1136","sourceIdentifier":"cve@mitre.org","published":"1998-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7698B452-3096-40D1-8770-FAC2C539C6FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"529F6FE1-96F5-47C3-8E0D-22A461002A55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.00","matchCriteriaId":"59AD3EDE-3ABD-4686-98CB-42BB56345AE3"}]}]}],"references":[{"url":"http://cert.ip-plus.net/bulletin-archive/msg00040.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90221104526177&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-081.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9807-081.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1413","source":"cve@mitre.org"},{"url":"http://cert.ip-plus.net/bulletin-archive/msg00040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90221104526177&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/i-081.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9807-081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1137","sourceIdentifier":"cve@mitre.org","published":"1993-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","matchCriteriaId":"11AEFEC9-5DB4-44CB-977D-6561DC1680C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"672DD6BA-F3B2-4F1A-BA2C-0DA68A47853A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/e-01.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/549","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/122&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/e-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1138","sourceIdentifier":"cve@mitre.org","published":"1993-09-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4624BE70-B14C-470A-B0ED-133FAE688882"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop_lite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DFB7EF-5D8E-4BA9-A543-3997FA4DC433"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system:*:*:*:*:*:*:*","matchCriteriaId":"BFE6762F-886D-4FC9-8AE5-C462BF42E403"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system_2.0:*:*:*:*:*:*:*","matchCriteriaId":"02948256-49AE-415E-8B64-27DA246B7A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system_4.0:*:*:*:*:*:*:*","matchCriteriaId":"1005628A-0E07-485C-9E88-353A86E83BD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system_4.x:*:*:*:*:*:*:*","matchCriteriaId":"207FB7B7-C6FF-4D9F-9E6D-34E6CF7E2146"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1993-13.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/546","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1139","sourceIdentifier":"cve@mitre.org","published":"1997-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.00","matchCriteriaId":"59AD3EDE-3ABD-4686-98CB-42BB56345AE3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602880019745&w=2","source":"cve@mitre.org"},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-199801/0122.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/i-027b.shtml","source":"cve@mitre.org"},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9801-074.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/2007.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602880019745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-199801/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/i-027b.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9801-074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/2007.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1140","sourceIdentifier":"cve@mitre.org","published":"1997-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alec_muffet:cracklib:2.5:*:*:*:*:*:*:*","matchCriteriaId":"235DD283-3E6E-4124-A80A-9CBD84DA8943"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88209041500913&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/vendor_bulletins/VB-97.16.CrackLib","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1539","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88209041500913&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/vendor_bulletins/VB-97.16.CrackLib","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1141","sourceIdentifier":"cve@mitre.org","published":"1997-05-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by entering debug mode through a sequence of CTRL-D characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ascom:timeplex_routers:*:*:*:*:*:*:*:*","matchCriteriaId":"71A33E80-AAFF-428A-908E-39C824954F8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420981&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1824","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420981&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1142","sourceIdentifier":"cve@mitre.org","published":"1992-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunOS 4.1.2 and earlier allows local users to gain privileges via \"LD_*\" environmental variables to certain dynamically linked setuid or setgid programs such as (1) login, (2) su, or (3) sendmail, that change the real and effective user ids to the same user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.2","matchCriteriaId":"B756EC9D-B72C-4A5F-9C17-A2F73583B7D2"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-11.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3152","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1992-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1143","sourceIdentifier":"cve@mitre.org","published":"1997-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"6969163C-88F4-4C1C-AD32-FB4801C39E01"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970504-01-PX","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-65.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2109","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19970504-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-65.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1144","sourceIdentifier":"cve@mitre.org","published":"1997-01-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-051.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2056","source":"cve@mitre.org"},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1145","sourceIdentifier":"cve@mitre.org","published":"1997-01-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"10.20","matchCriteriaId":"BBC898E5-04EC-4AF5-ACA3-7080D8AAA493"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/advisory.html?id=1514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2059","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/advisory.html?id=1514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1146","sourceIdentifier":"cve@mitre.org","published":"1994-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"9","matchCriteriaId":"22CDE177-1414-45C9-835C-FD15A0B9FC9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8:*:*:*:*:*:*:*","matchCriteriaId":"19587780-3515-484C-BCB4-F2BB90106C5C"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/1555","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/1555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1147","sourceIdentifier":"cve@mitre.org","published":"1998-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to the Agent port (1827), which is handled by smaxagent.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:platinum:policy_compliance_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EB43F151-1FDF-42BE-8785-3DFF6D4AA819"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91273739726314&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3164","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1430","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91273739726314&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1148","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"4B21A3CA-6F3B-4C27-A704-A9B8D9A60C15"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1215","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q189/2/62.ASP","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1149","sourceIdentifier":"cve@mitre.org","published":"1998-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the FTP port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_software_manufaktur:csm_proxy:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B2F03FC7-4EB8-4F7E-8639-B5E5169F3E1C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525993&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1422","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525993&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1150","sourceIdentifier":"cve@mitre.org","published":"1998-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:livingston_portmaster:portmaster:initial:*:*:*:*:*:*:*","matchCriteriaId":"CBBFF404-7EDB-417C-B530-7EDEC38B3475"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9723","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1151","sourceIdentifier":"cve@mitre.org","published":"1998-06-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, which allows remote attackers to cause a denial of service by connecting to the integrator without providing a username or password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:compaq_microcom:microcom_6000_access_integrator:initial:*:*:*:*:*:*:*","matchCriteriaId":"A95C8121-5757-41B3-A633-E96D847E8758"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90296493106214&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2089","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90296493106214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1152","sourceIdentifier":"cve@mitre.org","published":"1998-06-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:microcom_6000_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"15D5A948-4AC0-458B-BE97-9645C403B476"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:compaq:microcom_6000:-:*:*:*:*:*:*:*","matchCriteriaId":"4591EAE6-42A5-409D-A480-7B80CE152043"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90296493106214&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=90296493106214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-1999-1153","sourceIdentifier":"cve@mitre.org","published":"1998-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hamcards_postcard_cgi:hamcards_postcard_cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1BA3A1FF-5CFD-464B-95B8-612B51E8F63A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11175","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/11175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1154","sourceIdentifier":"cve@mitre.org","published":"1998-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lakeweb:filemail_cgi_script:*:*:*:*:*:*:*:*","matchCriteriaId":"22EABBF1-6D2F-4166-B8D9-D845C5AE0BEB"}]}]}],"references":[{"url":"http://lakeweb.com/scripts/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/11175","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1400","source":"cve@mitre.org"},{"url":"http://lakeweb.com/scripts/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/11175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1155","sourceIdentifier":"cve@mitre.org","published":"1998-11-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lakeweb:mail_list_cgi_script:*:*:*:*:*:*:*:*","matchCriteriaId":"75701CE6-3747-40B8-972C-2EE39E25E856"}]}]}],"references":[{"url":"http://lakeweb.com/scripts/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/11175","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1400","source":"cve@mitre.org"},{"url":"http://lakeweb.com/scripts/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/11175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1156","sourceIdentifier":"cve@mitre.org","published":"1999-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-numeric character and a large number of carriage returns."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bisonware:bisonware_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"D856B65A-48E8-4175-B10F-EFE6EE788AE4"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1157","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"2DA4F4D4-444B-4CD8-A6E6-159303786DF8"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q192/7/74.ASP","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3894","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q192/7/74.ASP","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1158","sourceIdentifier":"cve@mitre.org","published":"1997-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain root privileges via programs that use these modules such as passwd, yppasswd, and nispasswd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.09.Solaris.passwd.buffer.overrun.vul","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/139&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1159","sourceIdentifier":"cve@mitre.org","published":"1998-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B7735CDD-8BFC-4E30-9C88-27C8943637CA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91495920911490&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1471","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91495920911490&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1160","sourceIdentifier":"cve@mitre.org","published":"1997-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-33.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420581&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7437.php","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-33.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420581&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7437.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1161","sourceIdentifier":"cve@mitre.org","published":"1996-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"10","matchCriteriaId":"992B5A83-60E4-490B-803D-C9C2E12C7BBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-32.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420102&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420103&w=2","source":"cve@mitre.org"},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9704-057.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/7438.php","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-32.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420102&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9704-057.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/7438.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1162","sourceIdentifier":"cve@mitre.org","published":"1993-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:1.1:*:*:*:*:*:*:*","matchCriteriaId":"45809A38-B903-49CF-835A-A678A840B14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"AB0CCDB1-0D44-4868-8CD6-7EACE691E1C2"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1993-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/542.php","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/542.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1163","sourceIdentifier":"cve@mitre.org","published":"1999-11-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9000:800:*:*:*:*:*:*:*","matchCriteriaId":"487DFFD8-F648-4D8F-8919-FC600A5D828B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94347039929958&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7439.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94347039929958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7439.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1164","sourceIdentifier":"cve@mitre.org","published":"1999-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:*:*:*:*:*:*:*:*","matchCriteriaId":"1FD2BCA5-9DA0-472C-B0DF-A4A8BC54B4DE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93041631215856&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93041631215856&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1165","sourceIdentifier":"cve@mitre.org","published":"1999-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privileges via a malicious program in the .fingerrc file, or (2) read arbitrary files via symbolic links from .plan, .forward, or .project files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:fingerd:1.37:*:*:*:*:*:*:*","matchCriteriaId":"7DD364F0-40E7-47D9-ADDF-8BA089FE8796"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93268249021561&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/2478","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/535","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93268249021561&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/2478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1166","sourceIdentifier":"cve@mitre.org","published":"1999-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"1E55F8A8-1ABD-4760-9074-353BBAEE005B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/18156","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/523","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/18156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1167","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:third_voice:third_voice_web:*:*:*:*:*:*:*:*","matchCriteriaId":"39EAEEEC-D079-4F30-AA71-F021D48F14C0"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7252.php","source":"cve@mitre.org"},{"url":"http://www.wired.com/news/technology/0%2C1282%2C20636%2C00.html","source":"cve@mitre.org"},{"url":"http://www.wired.com/news/technology/0%2C1282%2C20677%2C00.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7252.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wired.com/news/technology/0%2C1282%2C20636%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.wired.com/news/technology/0%2C1282%2C20677%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1168","sourceIdentifier":"cve@mitre.org","published":"1999-02-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:internet_security_scanner:5.3:*:linux:*:*:*:*:*","matchCriteriaId":"F960A59D-4D00-4AD0-85F1-6B457DAB547E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12640","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/12640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1169","sourceIdentifier":"cve@mitre.org","published":"1999-02-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flavio_veloso:nobo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"A83F305D-DDBB-48B2-AC94-690CA506F397"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/12284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1170","sourceIdentifier":"cve@mitre.org","published":"1999-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the \"flags\" registry key to 1920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.1.e:*:*:*:*:*:*:*","matchCriteriaId":"D9BE1954-74C5-4A91-9C9A-C0647F281017"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.2.e:*:*:*:*:*:*:*","matchCriteriaId":"3DE6789D-5DA5-489F-A900-F4788286ACE5"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91816507920544&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/218","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=ntbugtraq&m=91816507920544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1171","sourceIdentifier":"cve@mitre.org","published":"1999-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the \"flags\" registry key to 1920."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.1.e:*:*:*:*:*:*:*","matchCriteriaId":"D9BE1954-74C5-4A91-9C9A-C0647F281017"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.2.e:*:*:*:*:*:*:*","matchCriteriaId":"3DE6789D-5DA5-489F-A900-F4788286ACE5"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91816507920544&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/218","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91816507920544&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1172","sourceIdentifier":"cve@mitre.org","published":"1999-01-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maximizer:maximizer_enterprise:4:*:*:*:*:*:*:*","matchCriteriaId":"E0BA5470-4FC1-4BCA-9C20-A3757C02B508"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11947","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/11947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1173","sourceIdentifier":"cve@mitre.org","published":"1998-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to (1) modify Word Perfect behavior by modifying files in the working directory, or (2) modify files of other users via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:corel:wordperfect:8:*:linux:*:*:*:*:*","matchCriteriaId":"3D332FC0-CDDD-4BB6-A4D5-B2A2392F791F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91404045014047&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91404045014047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1174","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk."},{"lang":"es","value":"La unidad ZIP para discos Iomego ZIP-100 permite a atacantes con acceso físico a la unidad permite evitar la protección con contraseña insertando un disco conocido con una contraseña conocida, esperarando a que la unidad se pare y reemplazando manualmente el disco conocido por el disco objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iomega:zip_100_mb_drive:*:*:*:*:*:*:*:*","matchCriteriaId":"C6606ECF-EB43-4B3C-AFEE-2D5979349562"}]}]}],"references":[{"url":"http://www.counterpane.com/crypto-gram-9812.html#doghouse","source":"cve@mitre.org"},{"url":"http://www.counterpane.com/crypto-gram-9812.html#doghouse","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1175","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"11.2","matchCriteriaId":"CEE938DF-8451-46DD-A532-1EF99DE8852D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/i-054.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/wccpauth-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1577","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/i-054.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/wccpauth-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1176","sourceIdentifier":"cve@mitre.org","published":"1998-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aaron_ledbetter:cidentd:*:*:*:*:*:*:*:*","matchCriteriaId":"B72C8BB6-861A-47E1-8D4F-8A2521C0792B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jidentd:jidentd:*:*:*:*:*:*:*:*","matchCriteriaId":"FE57F796-4FA3-417D-AA26-3C951728D61A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88466930416716&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90554230925545&w=2","source":"cve@mitre.org"},{"url":"http://spisa.act.uji.es/spi/progs/codigo/www.hack.co.za/exploits/daemon/ident/cidentd.c","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88466930416716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90554230925545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://spisa.act.uji.es/spi/progs/codigo/www.hack.co.za/exploits/daemon/ident/cidentd.c","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1177","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lincoln_d._stein:nph-publish:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"4B1AFE71-C20B-4FD8-A43A-563F42048715"}]}]}],"references":[{"url":"http://www-genome.wi.mit.edu/WWW/tools/CGI_scripts/server_publish/nph-publish","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.w3.org/Security/Faq/wwwsf4.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2055","source":"cve@mitre.org"},{"url":"http://www-genome.wi.mit.edu/WWW/tools/CGI_scripts/server_publish/nph-publish","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.w3.org/Security/Faq/wwwsf4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1178","sourceIdentifier":"cve@mitre.org","published":"1998-06-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for the dumpenv.pl script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.1:beta:*:*:*:*:*:*","matchCriteriaId":"AC67D71C-1FBE-452B-BB91-EF29AB699CEC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9505","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3223","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1179","sourceIdentifier":"cve@mitre.org","published":"1998-05-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sysadmin_magazine:man.sh:*:*:*:*:*:*:*:*","matchCriteriaId":"5E300C52-C018-42B6-9EF5-AB99BC43B3CB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9330","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/9330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1180","sourceIdentifier":"cve@mitre.org","published":"1999-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"O'Reilly has corrected this issue in WebSite Professional 2.5, which is now available from:  http://website.oreilly.com","cveTags":[],"descriptions":[{"lang":"en","value":"O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website:1.1e:*:*:*:*:*:*:*","matchCriteriaId":"2B146157-C821-410B-919E-856A5F1A8F2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"3557C5A7-5359-4D3D-BBAE-0E5CA7CEA679"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B4814EF8-FC41-4CBE-A405-07FDE65D0C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_pro:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6B476C94-D3B1-4959-A75E-921A3E8F5C71"}]}]}],"references":[{"url":"http://oliver.efri.hr/~crv/security/bugs/NT/buffer.html","source":"cve@mitre.org"},{"url":"http://www.tryc.on.ca/archives/bugtraq/1999_1/0612.html","source":"cve@mitre.org"},{"url":"http://oliver.efri.hr/~crv/security/bugs/NT/buffer.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tryc.on.ca/archives/bugtraq/1999_1/0612.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1181","sourceIdentifier":"cve@mitre.org","published":"1998-09-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4","matchCriteriaId":"BD2D5C10-ED78-4A1C-B0D1-68F34EAD2614"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980901-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-003.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7441.php","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980901-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-003.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7441.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1182","sourceIdentifier":"cve@mitre.org","published":"1997-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a long program name (argv[0]) and forcing ld.so/ld-linux.so to report an error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:delix:dld:5.2:*:*:*:*:*:*:*","matchCriteriaId":"8B149610-0B27-4CE2-8A2E-D460529B524F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_lite:1.1:*:*:*:*:*:*:*","matchCriteriaId":"183C974A-3C40-4DB0-8883-76C589873422"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:lst:lst_power_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DABB88D7-AF77-4460-B5FD-23CB2CDE280D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"830D48B8-D21D-4D31-99A1-20C231804DBE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602661419318&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602661419351&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88661732807795&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602661419318&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602661419351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88661732807795&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1183","sourceIdentifier":"cve@mitre.org","published":"1998-04-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse (1) runtask or (2) runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980403-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980403-02-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/809.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8556","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980403-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980403-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/809.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1184","sourceIdentifier":"cve@mitre.org","published":"1997-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elm_development_group:elm:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"F0E66345-9760-4061-A1D4-24DBF9711740"},{"vulnerable":true,"criteria":"cpe:2.3:a:elm_development_group:elm:2.3:*:*:*:*:*:*:*","matchCriteriaId":"51E0D7CF-6A88-40AC-A113-BD4E69AE07D8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420967&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420970&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420967&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420970&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1185","sourceIdentifier":"cve@mitre.org","published":"1998-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sco:cmw:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C28F3AC9-EC84-402B-987D-9F8891B81906"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:all_versions:*:*:*:*:*:*:*","matchCriteriaId":"BB2712AB-ABFB-4EEC-B07A-31B4025E8FEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_enterprise_system:5.0.4p:*:*:*:*:*:*:*","matchCriteriaId":"77B0A8C5-DAE1-468C-B8EC-05CF40C78695"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90686250717719&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1379","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90686250717719&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1186","sourceIdentifier":"cve@mitre.org","published":"1996-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and RedHat 2.1, allows local users to gain root privileges by specifying a malicious program using the -print-pipe command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:*:*:*:*:*:*:*:*","matchCriteriaId":"A9305637-EC79-4BD5-82FC-A1DF3A3D32F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"674066BB-2576-4AAE-B97F-A4470815F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FFC0D816-7D38-4CE1-B78C-3A02195713D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167418966&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167418966&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1187","sourceIdentifier":"cve@mitre.org","published":"1996-08-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:*:*:*:*:*:*:*:*","versionEndIncluding":"3.94","matchCriteriaId":"1685EF8F-74A5-40EF-9A7E-200D32AA5C84"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FFC0D816-7D38-4CE1-B78C-3A02195713D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167419803&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/416","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167419803&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1188","sourceIdentifier":"cve@mitre.org","published":"1998-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.21:*:*:*:*:*:*:*","matchCriteriaId":"B82E464F-3871-40C7-A758-B81582D193AE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91479159617803&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1568","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91479159617803&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1189","sourceIdentifier":"cve@mitre.org","published":"1999-11-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"F2AE46C7-6538-4DE6-B3EA-81AD7F7C43E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/36306","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/36608","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/822","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/36306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/36608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1190","sourceIdentifier":"cve@mitre.org","published":"1999-11-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long \"From\" header in an e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:admiral_systems:emailclub:1.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"68D6A7F0-1132-4BEC-9950-4C6BEA8CA4C1"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/801","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/exploits/E-MailClub__FROM__remote_buffer_overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1191","sourceIdentifier":"cve@mitre.org","published":"1997-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.1","matchCriteriaId":"FB3AF849-6EC6-4C9A-B4AB-91C871FD205B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"}]}]}],"references":[{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.18.solaris.chkey.buffer.overflow.vul","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=87602167418335&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/144","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7442.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/207","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-97.18.solaris.chkey.buffer.overflow.vul","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=87602167418335&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7442.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1192","sourceIdentifier":"cve@mitre.org","published":"1997-06-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.1","matchCriteriaId":"FB3AF849-6EC6-4C9A-B4AB-91C871FD205B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7444.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7444.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1193","sourceIdentifier":"cve@mitre.org","published":"1991-05-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"me\" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"ACE9BEA7-5F68-4861-B7F8-7C9A8889DBAB"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/20","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/581","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1194","sourceIdentifier":"cve@mitre.org","published":"1991-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges."},{"lang":"es","value":"chroot en Digital Ultrix 4.1 y 4.0 es instalado de forma insegura, lo que permite a usuarios locales para ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"18EE0235-30CD-4104-ADB8-45AA5B3CBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0699893A-AE83-4605-BF2B-FC0C17BF2A69"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-05.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/17","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/577","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1195","sourceIdentifier":"cve@mitre.org","published":"1999-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:virusscan:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DBB7848B-0E1D-4EEA-8C1B-38C8EB3B6C09"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92588169005196&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92587579032534&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/169","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92588169005196&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92587579032534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1196","sourceIdentifier":"cve@mitre.org","published":"1999-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to a non-vulnerable version of Exceed (Hummingbird Exceed 6.0.1 Hummingbird Exceed 6.0.2 Hummingbird Exceed 6.1)","cveTags":[],"descriptions":[{"lang":"en","value":"Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CFE7E6AB-7DA4-47EA-A197-D20E37ED19B7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/13451","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/158","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/13451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1197","sourceIdentifier":"cve@mitre.org","published":"1990-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1990-12.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7140.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/14","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1990-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7140.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/14","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1198","sourceIdentifier":"cve@mitre.org","published":"1990-10-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"AB5B9086-EC83-47C1-985A-7C088C84D858"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/b-01.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7141.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/b-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7141.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1199","sourceIdentifier":"cve@mitre.org","published":"1998-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the \"sioux\" vulnerability."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.2:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.1","matchCriteriaId":"2CC36A25-1E07-49F0-9725-3F72EAEE6CAF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90252779826784&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90276683825862&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90280517007869&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90286768232093&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#apache","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90252779826784&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90276683825862&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90280517007869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90286768232093&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#apache","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1200","sourceIdentifier":"cve@mitre.org","published":"1998-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed \"EXPN *@\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vintra_systems:smtp_mailserver:*:*:*:*:*:*:*:*","matchCriteriaId":"5C697500-EEA2-4562-A234-273ABF8A1103"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=90222454131610&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1617","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=90222454131610&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1201","sourceIdentifier":"cve@mitre.org","published":"1999-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91849617221319&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/225","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7542","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91849617221319&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1202","sourceIdentifier":"cve@mitre.org","published":"1998-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:startech:pop3_proxy_server:*:*:*:*:*:*:*:*","matchCriteriaId":"9761271D-FC0A-4E3B-9180-DE743A9403A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:startech:telnet_server:*:*:*:*:*:*:*:*","matchCriteriaId":"0C39E2DA-B549-47B4-A425-D097B2F55F7F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525873&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2088","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525873&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1203","sourceIdentifier":"cve@mitre.org","published":"1999-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identifier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ascend:multilink_ppp_for_isdn:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"490D93A3-D6B1-49F3-A24E-78DE9406740F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91868964203769&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91888117502765&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7498.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91868964203769&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91888117502765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7498.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1204","sourceIdentifier":"cve@mitre.org","published":"1998-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default \"ANY\" address and result in access to more systems than intended by the administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:*:*:*:*:*:*","matchCriteriaId":"85711114-A402-4B53-AA91-DC66937606F1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101925912&w=2","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/config/keywords.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4416","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7293","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101925912&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.checkpoint.com/techsupport/config/keywords.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1205","sourceIdentifier":"cve@mitre.org","published":"1996-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical networking configuration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167419195&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/advisories/ibm-ers/96-08","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/414","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167419195&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/advisories/ibm-ers/96-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1206","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:systemsoft:systemwizard:*:*:*:*:*:*:*:*","matchCriteriaId":"E5B57640-D538-4DB5-8E68-7B06B08EEDE5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93336970231857&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/555","source":"cve@mitre.org"},{"url":"http://www.systemsoft.com/l-2/l-3/support-systemwizard.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93336970231857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.systemsoft.com/l-2/l-3/support-systemwizard.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1207","sourceIdentifier":"cve@mitre.org","published":"1998-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_general:netxray:all_versions:*:*:*:*:*:*:*","matchCriteriaId":"A266DB19-6CA5-41AC-88BD-91CD83C1FD1F"}]}]}],"references":[{"url":"http://www.efri.hr/~crv/security/bugs/NT/netxtray.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/907","source":"cve@mitre.org"},{"url":"http://www.efri.hr/~crv/security/bugs/NT/netxtray.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1208","sourceIdentifier":"cve@mitre.org","published":"1997-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602661419330&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602661419337&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/803","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602661419330&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602661419337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1209","sourceIdentifier":"cve@mitre.org","published":"1997-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88131151000069&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/vendor_bulletins/VB-97.14.scoterm","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/690","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88131151000069&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/vendor_bulletins/VB-97.14.scoterm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1210","sourceIdentifier":"cve@mitre.org","published":"1997-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a core dump file, which is created when xterm is called with a DISPLAY environmental variable set to a display that xterm cannot access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"07476CFD-859F-4AD7-8514-130E7A86BAE5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87936891504885&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/613","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87936891504885&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1211","sourceIdentifier":"cve@mitre.org","published":"1991-03-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"BD213C54-28D3-4584-95D2-E28732BC649A"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/574","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1212","sourceIdentifier":"cve@mitre.org","published":"1991-03-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"27C5561B-F8AE-4AD2-BD1C-E9089F315277"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/574","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1213","sourceIdentifier":"cve@mitre.org","published":"1997-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"}]}]}],"references":[{"url":"http://www2.dataguard.no/bugtraq/1997_4/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/571","source":"cve@mitre.org"},{"url":"http://www2.dataguard.no/bugtraq/1997_4/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1214","sourceIdentifier":"cve@mitre.org","published":"1997-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B44D379F-F380-42EC-9C9A-A4C8314A4BDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"3C37EB61-50BE-451A-916B-B05BAC79962B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"}]}]}],"references":[{"url":"http://www.openbsd.com/advisories/signals.txt","source":"cve@mitre.org"},{"url":"http://www.openbsd.com/advisories/signals.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/556","source":"cve@mitre.org"},{"url":"http://www.openbsd.com/advisories/signals.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.com/advisories/signals.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1215","sourceIdentifier":"cve@mitre.org","published":"1993-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.0:*:*:*:*:*:*:*","matchCriteriaId":"98DA9E1F-E489-4D63-9CCA-6C011E6B08C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:4.01:*:*:*:*:*:*:*","matchCriteriaId":"76536FFE-4745-4F8D-A1E3-337FF5ED1F20"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/d-21.shtml","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-12.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/545","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/d-21.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1993-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1216","sourceIdentifier":"cve@mitre.org","published":"1993-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the \"no ip source-route\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:*:*:*:*:*:*:*:*","versionEndIncluding":"9.17","matchCriteriaId":"990D0766-8FDF-43A0-B46C-09F2E75B4760"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:8.2:*:*:*:*:*:*:*","matchCriteriaId":"70C8F944-01A5-45E8-B963-E68B85F86165"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:8.3:*:*:*:*:*:*:*","matchCriteriaId":"DE7D0623-0F18-4486-B4DF-B49635A70EDF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9EA7D7D0-B445-4F24-A86E-569291EA2456"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router:9.1:*:*:*:*:*:*:*","matchCriteriaId":"27604364-99CA-4942-ABCD-8F2B4CB20092"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/d-15.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1993-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/541","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/d-15.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1993-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1217","sourceIdentifier":"cve@mitre.org","published":"1997-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=87602726319426&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=87602726319435&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/526","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=87602726319426&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=87602726319435&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1218","sourceIdentifier":"cve@mitre.org","published":"1993-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:commodore:amiga_unix:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1p2a","matchCriteriaId":"86CE2F2F-EB73-42C3-9341-9E0F363C2016"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1993-04.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/522","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1219","sourceIdentifier":"cve@mitre.org","published":"1994-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain root privileges, possibly through the clogin command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/e-33.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1994-13.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/468","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/511","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/e-33.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1994-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1220","sourceIdentifier":"cve@mitre.org","published":"1997-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise directive is used in a configuration file, via shell metacharacters in the Reply-To header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majordomo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.94.3","matchCriteriaId":"37C9445A-0F39-4664-8F08-F22B17346655"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7527","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/502","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/7527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1221","sourceIdentifier":"cve@mitre.org","published":"1996-11-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:3:*:*:*:*:*:*:*","matchCriteriaId":"6936C57F-0574-41C7-B3EA-323FADA11552"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420141&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/399","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420141&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1222","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q188/5/71.ASP","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3893","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q188/5/71.ASP","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1223","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q187/5/03.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3892","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q187/5/03.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1224","sourceIdentifier":"cve@mitre.org","published":"1997-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imapd:*:*:*:*:*:*:*:*","matchCriteriaId":"358DA403-C53C-41C5-8BA2-ECCD90A08FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imapd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F96386E6-0756-4181-9A05-1AA8AA202982"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87635124302928&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/349","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87635124302928&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1225","sourceIdentifier":"cve@mitre.org","published":"1997-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:*:*:*:*:*:*:*:*","matchCriteriaId":"EE8B41E9-5792-4ADA-A140-2E709321E147"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7526","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/347","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/7526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1226","sourceIdentifier":"cve@mitre.org","published":"1999-10-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"5921E5E6-3D97-4075-B557-968340FB6E7B"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/Netscape_4_7_and_earlier_vulnerable_to__Huge_Key__DoS.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3436","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/Netscape_4_7_and_earlier_vulnerable_to__Huge_Key__DoS.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1227","sourceIdentifier":"cve@mitre.org","published":"1999-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*","matchCriteriaId":"4D7AF472-DA34-4E6F-801E-C06C135779B6"}]}]}],"references":[{"url":"http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3334","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/lists/ethereal-dev/199907/msg00126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/lists/ethereal-dev/199907/msg00130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1228","sourceIdentifier":"cve@mitre.org","published":"1998-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers to execute arbitrary modem commands such as ATH, ATH0, etc., via a \"+++\" sequence that appears in ICMP packets, the subject of an e-mail message, IRC commands, and others."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logicode:quicktel:28.8:*:*:*:*:*:*:*","matchCriteriaId":"B177A271-09B3-48BC-B5D1-E1E17427813D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:diamond:supra:33.6:*:*:*:*:*:*:*","matchCriteriaId":"03638F27-02F0-4438-83B2-3D489090F35D"},{"vulnerable":true,"criteria":"cpe:2.3:h:diamond:supra:v.90:*:*:*:*:*:*:*","matchCriteriaId":"1CA4A31C-2DA6-4E0D-AA9C-73FB707ABCAE"},{"vulnerable":true,"criteria":"cpe:2.3:h:us_robotics:us_robotics:33.6:*:*:*:*:*:*:*","matchCriteriaId":"1D89043A-7602-452F-BF33-2A8E85D6BF9A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90695973308453&w=2","source":"cve@mitre.org"},{"url":"http://www.macintouch.com/modemsecurity.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3320","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90695973308453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macintouch.com/modemsecurity.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1229","sourceIdentifier":"cve@mitre.org","published":"1998-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_2_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.13","matchCriteriaId":"1277274B-03EE-4EE5-BF59-794337493F4A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8590","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/733","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/8590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1230","sourceIdentifier":"cve@mitre.org","published":"1997-12-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_2:*:*:*:*:*:*:*:*","matchCriteriaId":"4D1FCAF1-2BF0-4CA4-B107-832063EE0F9C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8282","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/8282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1231","sourceIdentifier":"cve@mitre.org","published":"1999-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A7DB2FA-58A8-45B9-AE2E-AE20A872BF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2DD92EA8-8C01-4E4E-9AFE-2B1242AB10CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FB31028-59BA-4833-BF14-3CB1CA18DAAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A3E89B6-872D-4541-A413-88A956FDAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"98CC86ED-CA78-4E2A-8A12-4F766DB79733"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BD500A33-4D0E-44B5-9BBE-A30AA999F662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EBB8D72F-51E7-47DF-96A4-4EBB517A79D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC2379BA-621E-4986-AAC5-AF359FD57381"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9972B3A4-369E-40B5-9415-F92B7394604A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1B6E719F-010B-4B8A-B508-0491BD15C465"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E44D2AE3-DD8B-46D0-B6AB-9F0E6B4DCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B7735CDD-8BFC-4E30-9C88-27C8943637CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A1582187-F4BA-44D6-97F0-E78D814A9E9E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/14758","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/14758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1232","sourceIdentifier":"cve@mitre.org","published":"1997-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands via a modified PATH environment variable that points to a malicious cp program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420994&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3316","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420994&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1233","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the \"Domain Resolution\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q241/5/62.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/657","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3306","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q241/5/62.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1234","sourceIdentifier":"cve@mitre.org","published":"1999-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=94096671308565&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3293","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94096671308565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1235","sourceIdentifier":"cve@mitre.org","published":"1999-08-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing (\"shoulder surfing\") another user to read the information from the status bar when the user moves the mouse over a link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179","source":"cve@mitre.org"},{"url":"http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3289","source":"cve@mitre.org"},{"url":"http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind9904&L=NTBUGTRAQ&P=R179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetderm.cotse.com/mailing-lists/ntbugtraq/1999/0364.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1236","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E35F96E1-E254-4CBA-856A-8772BC31F374"},{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B09BD4FD-C2A8-4272-8E48-051E5416FEBA"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/731","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3285","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9910&L=ntbugtraq&F=&S=&P=662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1237","sourceIdentifier":"cve@mitre.org","published":"1999-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/14384","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2272","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/14384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1238","sourceIdentifier":"cve@mitre.org","published":"1994-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"9.05","matchCriteriaId":"DBF5B8E5-8CFA-4D46-A67A-13FA4033F1DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8:*:*:*:*:*:*:*","matchCriteriaId":"19587780-3515-484C-BCB4-F2BB90106C5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/1531","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2262","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/1531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1239","sourceIdentifier":"cve@mitre.org","published":"1994-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/1559","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/1559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1240","sourceIdentifier":"cve@mitre.org","published":"1996-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gracenote:cddbd:*:*:*:*:*:*:*:*","matchCriteriaId":"2F6E50C6-7439-495B-B8A1-3613E5595997"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/5784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2203","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/5784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1241","sourceIdentifier":"cve@mitre.org","published":"1999-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"}]}]}],"references":[{"url":"http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2173","source":"cve@mitre.org"},{"url":"http://oliver.efri.hr/~crv/security/bugs/NT/activex4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1242","sourceIdentifier":"cve@mitre.org","published":"1994-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"}]}]}],"references":[{"url":"http://packetstormsecurity.org/advisories/hpalert/003","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2162","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/advisories/hpalert/003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1243","sourceIdentifier":"cve@mitre.org","published":"1995-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"FE16D86A-0C84-4B36-90B0-F5F10B6146D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19950301-01-P373","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-16.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2113","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19950301-01-P373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-16.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1244","sourceIdentifier":"cve@mitre.org","published":"1999-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B0B3CD7E-742F-43DD-9179-348D345EBCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B304AA52-CA2E-4BB6-8083-DA23F5E3666B"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8651AFB6-AE6B-476E-9040-686E8D3B3E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"9D06BB0F-7C38-4D0F-8F1D-DDEA5BA72FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"DE1C3525-3BA8-4198-9932-394E77290863"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"802826A3-6CF8-4821-A186-6BE979CE536D"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"ADEB76BF-F6DA-47DF-8212-85700E147D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"FA4E6702-F0F0-42CA-A135-839C09C061E6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/13303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2087","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/13303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1245","sourceIdentifier":"cve@mitre.org","published":"1999-04-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability was fixed in version 3.6 of ucd-snmpd.","cveTags":[],"descriptions":[{"lang":"en","value":"vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could allow remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ucd-snmp:ucd-snmp:3.52:*:*:*:*:*:*:*","matchCriteriaId":"3D376CDE-B6B8-4F7B-A1D7-71DAB61CEA45"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2086","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1246","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which has insecure default permissions, allowing remote attackers to read the passwords and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q229/9/72.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2068","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q229/9/72.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1247","sourceIdentifier":"cve@mitre.org","published":"1999-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9:*:*:*:*:*:*:*","matchCriteriaId":"5E54D276-792B-40D2-B39B-5050028DE988"}]}]}],"references":[{"url":"http://packetstormsecurity.org/advisories/hpalert/006","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2061","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/advisories/hpalert/006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1248","sourceIdentifier":"cve@mitre.org","published":"1994-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"9.00","matchCriteriaId":"1626B849-4E5A-4431-8651-74B75F61010E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.00:*:*:*:*:*:*:*","matchCriteriaId":"A573388D-BD8F-48D3-8BA9-E4D11402CA22"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.02:*:*:*:*:*:*:*","matchCriteriaId":"6973B4FC-8009-4336-BED4-7B032EA1E570"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.06:*:*:*:*:*:*:*","matchCriteriaId":"D0EB2E93-9774-442C-BB60-E428F53EE6F4"}]}]}],"references":[{"url":"http://packetstormsecurity.org/advisories/hpalert/019","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2058","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/advisories/hpalert/019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1249","sourceIdentifier":"cve@mitre.org","published":"1997-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.osvdb.org/8099","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2057","source":"cve@mitre.org"},{"url":"http://www.codetalker.com/advisories/vendor/hp/hpsbux9701-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.osvdb.org/8099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1250","sourceIdentifier":"cve@mitre.org","published":"1997-08-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blue_world_communications:lasso_cgi:*:*:*:*:*:*:*:*","matchCriteriaId":"D5D09A50-B19B-491A-AD5E-65DD54BED7F2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7506","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2044","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/7506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1251","sourceIdentifier":"cve@mitre.org","published":"1996-12-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://packetstormsecurity.org/advisories/hpalert/043","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2010","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/advisories/hpalert/043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1252","sourceIdentifier":"cve@mitre.org","published":"1996-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.0.x:*:*:*:*:*:*:*","matchCriteriaId":"597CABF3-021F-44F8-BE78-FABFE7337D1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C0F61CC4-74D7-4E8D-A409-90A89ACC4981"}]}]}],"references":[{"url":"ftp://ftp.sco.COM/SSE/security_bulletins/SB.96:02a","source":"cve@mitre.org"},{"url":"http://www.cert.org/vendor_bulletins/VB-96.15.sco","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1966","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.COM/SSE/security_bulletins/SB.96:02a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/vendor_bulletins/VB-96.15.sco","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1253","sourceIdentifier":"cve@mitre.org","published":"1996-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:internet_faststart:1.0:*:*:*:*:*:*:*","matchCriteriaId":"61FEF2E3-1939-42B3-B32F-A22C173A186A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.2","matchCriteriaId":"F95AC07F-8326-4E55-8E62-CE5934F7512C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB.96:01a","source":"cve@mitre.org"},{"url":"http://www.cert.org/vendor_bulletins/VB-96.10.sco","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1965","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB.96:01a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/vendor_bulletins/VB-96.10.sco","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1254","sourceIdentifier":"cve@mitre.org","published":"1999-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92099515709467&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1947","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92099515709467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1255","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ccs_network:hyperseek_search_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"2000","matchCriteriaId":"78378424-44A3-49DB-BDA8-F6AE1B6C028F"}]}]}],"references":[{"url":"http://www.rootshell.com/archive-j457nxiqi3gq59dv/199902/hyperseek.txt.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1914","source":"cve@mitre.org"},{"url":"http://www.rootshell.com/archive-j457nxiqi3gq59dv/199902/hyperseek.txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1256","sourceIdentifier":"cve@mitre.org","published":"1999-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in the spoolmain.log file when a new database is created, which allows local users to obtain the password from that file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_assistant:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E405BD60-DB79-45B9-BA62-2DDB29B580B3"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92056752115116&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12744","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1902","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92056752115116&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/12744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1257","sourceIdentifier":"cve@mitre.org","published":"1997-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by entering (1) a CTRL-Z character, or (2) a ? (question mark)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xyplex:maxserver_xyplex_terminal_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.2_s4","matchCriteriaId":"4EE7BCE3-4780-4EDF-9C30-EF1956CA1E6B"},{"vulnerable":true,"criteria":"cpe:2.3:h:xyplex:maxserver_xyplex_terminal_server:6.0.1_s1:*:*:*:*:*:*:*","matchCriteriaId":"DD6035F1-1E42-4905-94F7-6D2762223168"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/8134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1258","sourceIdentifier":"cve@mitre.org","published":"1991-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"BD213C54-28D3-4584-95D2-E28732BC649A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/102","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1782","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1259","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data from previously deleted files into the Office file, which could allow attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:98:*:mac:*:*:*:*:*","matchCriteriaId":"36227AF5-8A53-41E3-88E3-5978C22BBAB2"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q189/5/29.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1780","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q189/5/29.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1260","sourceIdentifier":"cve@mitre.org","published":"1999-02-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database names, and server version via the ServerStats query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.6","matchCriteriaId":"826AF2F8-DAB3-4B7A-B9BF-41840FADA14F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91910115718150&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1777","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91910115718150&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1777","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1261","sourceIdentifier":"cve@mitre.org","published":"1997-10-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname (nick) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metamail_corporation:metamail:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"CB6F8DFB-5EA4-4572-9BCF-5D0ECD56DB6C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1772","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1262","sourceIdentifier":"cve@mitre.org","published":"1997-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.01:*:*:*:*:*:*:*","matchCriteriaId":"3CF253BE-2FCF-40B6-8279-65255833EA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"61268CF9-E279-4F63-B228-F9ED4B93BB99"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12231","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1727","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12231","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1264","sourceIdentifier":"cve@mitre.org","published":"1999-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp:300:*:*:*:*:*:*:*","matchCriteriaId":"917A7968-E410-46FE-A44D-585B8BC3E34A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp:m3:*:*:*:*:*:*:*","matchCriteriaId":"7032B75E-7490-42D8-8284-22CB61F1E5DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp:m3i:*:*:*:*:*:*:*","matchCriteriaId":"31C9BDDE-03E6-4C10-A6C3-D71E5A152C8E"},{"vulnerable":true,"criteria":"cpe:2.3:h:ramp_networks:webramp:m3t:*:*:*:*:*:*:*","matchCriteriaId":"24053FF2-851C-4AB9-B4A6-864A4C94065D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91815321510224&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1670","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91815321510224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/12048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1265","sourceIdentifier":"cve@mitre.org","published":"1998-09-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose arguments begin with a \"(\" (parenthesis) character, such as (1) SEND, (2) VRFY, (3) EXPN, (4) MAIL FROM, (5) RCPT TO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seatle_lab_software:slmail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"84FADB0F-FD14-45BC-A44E-53AE30730E36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90649892424117&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=90650438826447&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1664","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90649892424117&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=90650438826447&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1266","sourceIdentifier":"cve@mitre.org","published":"1997-06-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which allows remote attackers to determine valid users on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metamail_corporation:metamail:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"CB6F8DFB-5EA4-4572-9BCF-5D0ECD56DB6C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/6978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1660","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/6978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1267","sourceIdentifier":"cve@mitre.org","published":"1997-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:*:*:*:*:*:*:*:*","matchCriteriaId":"D54C9BCD-7544-4005-8F61-45C3EC054385"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420906&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1646","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1268","sourceIdentifier":"cve@mitre.org","published":"1999-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devices."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:*:*:*:*:*:*:*:*","matchCriteriaId":"D54C9BCD-7544-4005-8F61-45C3EC054385"}]}]}],"references":[{"url":"http://lists.kde.org/?l=kde-devel&m=91560433413263&w=2","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1645","source":"cve@mitre.org"},{"url":"http://lists.kde.org/?l=kde-devel&m=91560433413263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1269","sourceIdentifier":"cve@mitre.org","published":"1998-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde_beta_3:initial:*:*:*:*:*:*:*","matchCriteriaId":"91208CE7-A5D0-4003-85CF-1D6C31DA378C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8506","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1641","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/8506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1270","sourceIdentifier":"cve@mitre.org","published":"1998-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users to obtain the passphrase and compromise the PGP keys of other users by viewing the arguments via programs that list process information, such as ps."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.0:*:*:*:*:*:*:*","matchCriteriaId":"30661C23-9BE4-4F6E-AEB9-1B9D7DAA6FC9"}]}]}],"references":[{"url":"http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1639","source":"cve@mitre.org"},{"url":"http://lists.kde.org/?l=kde-devel&m=90221974029738&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1271","sourceIdentifier":"cve@mitre.org","published":"1998-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the passwords of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:dreamweaver:initial:*:*:*:*:*:*:*","matchCriteriaId":"20ACC8F7-47AF-4298-8104-E531035D16DF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9511","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1272","sourceIdentifier":"cve@mitre.org","published":"1998-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1635","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980301-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1273","sourceIdentifier":"cve@mitre.org","published":"1998-02-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadecimal escape sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"C92A4975-559A-4789-AFE9-495A9AE595D3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8551","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/8551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1274","sourceIdentifier":"cve@mitre.org","published":"1997-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPass RoamServer 3.1 creates temporary files with world-writable permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipass:roamserver:3.1:*:*:*:*:*:*:*","matchCriteriaId":"7343911B-BDBB-4F46-8B1C-BE71DAD30CE1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1625","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/8307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1275","sourceIdentifier":"cve@mitre.org","published":"1997-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_cc_mail:8.0:*:*:*:*:*:*:*","matchCriteriaId":"34C7F8F3-8C15-4876-AABA-6DBFA6FE4153"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1276","sourceIdentifier":"cve@mitre.org","published":"1998-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual console device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://www.debian.org/security/1998/19981207","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1609","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/1998/19981207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1277","sourceIdentifier":"cve@mitre.org","published":"1998-12-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:backweb_technologies:backweb_client:*:*:*:*:*:*:*:*","matchCriteriaId":"379ED4B7-2E58-4BF3-A5C8-3DED7A2BC739"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91487886514546&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1565","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91487886514546&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1565","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1278","sourceIdentifier":"cve@mitre.org","published":"1998-12-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via (1) nlog-smb.pl or (2) rpc-nlog.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nlog:nlog:*:*:*:*:*:*:*:*","matchCriteriaId":"24DC9CD3-1F29-425F-9207-0892C55DA9D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91470326629357&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91471400632145&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1549","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1550","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91470326629357&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91471400632145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1279","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sna_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"15075075-9FD9-4E2E-B77F-E143855B86AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sna_server:2.11:*:*:*:*:*:*:*","matchCriteriaId":"E9DD2968-5976-450D-8741-D86931246DF7"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q138/0/01.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1548","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q138/0/01.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1280","sourceIdentifier":"cve@mitre.org","published":"1998-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:6.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8E15EF3-8EB4-4D1A-B831-3CEE8A4B14FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11512","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1547","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/11512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1281","sourceIdentifier":"cve@mitre.org","published":"1998-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winddance_networks_corporation:breeze_network_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2215497A-E303-405D-B9C2-E6CFBFC388F8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11720","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1544","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/11720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1282","sourceIdentifier":"cve@mitre.org","published":"1998-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realsystem_g2_server:*:*:*:*:*:*:*:*","matchCriteriaId":"E855DA0F-BC37-4FBF-80C9-0F84FC8ED26D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11543","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/11543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1283","sourceIdentifier":"cve@mitre.org","published":"1998-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra / in the http:// tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"11CCD2F1-114C-430E-9D03-55F13017ED38"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10320","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1284","sourceIdentifier":"cve@mitre.org","published":"1998-11-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:puppets_place:nukenabber:*:*:*:*:*:*:*:*","matchCriteriaId":"8D32C111-52DD-4467-A379-DBAD14463954"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91063407332594&w=2","source":"cve@mitre.org"},{"url":"http://www.dynamsol.com/puppet/text/new.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/11131","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1540","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91063407332594&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dynamsol.com/puppet/text/new.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/11131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1285","sourceIdentifier":"cve@mitre.org","published":"1998-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.132","matchCriteriaId":"C8F50E78-7DEC-44B7-A07B-EAFDBF060CBC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91495921611500&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1472","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91495921611500&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1286","sourceIdentifier":"cve@mitre.org","published":"1997-05-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"5B4C48CE-7E12-454C-8DE8-F86976249F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420927&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8560","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/330","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1433","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420927&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1287","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"895314ED-7265-400B-8329-A7DA403F4788"}]}]}],"references":[{"url":"http://www.statslab.cam.ac.uk/~sret1/analog/security.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1410","source":"cve@mitre.org"},{"url":"http://www.statslab.cam.ac.uk/~sret1/analog/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1288","sourceIdentifier":"cve@mitre.org","published":"1998-11-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:*","matchCriteriaId":"EF3C20A1-F21D-41FF-8B87-B50E1AE8219E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8A9DB15-1F04-4864-A8AD-FCCB35A63B2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A5C77FA7-C977-4223-B6AC-91B82C45129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EED21F27-4ADA-42AC-B28E-F849F47D4043"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:*:*:*:*:*:*:*:*","matchCriteriaId":"6A03039A-881A-44C6-B69E-0BDC7914216F"}]}]}],"references":[{"url":"http://www.caldera.com/support/security/advisories/SA-1998.35.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/11397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1406","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/SA-1998.35.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/11397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1289","sourceIdentifier":"cve@mitre.org","published":"1998-11-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g. through NAT), which provides remote attackers with potentially sensitive information about the client or the internal network configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:98_beta:*:*:*:*:*:*:*","matchCriteriaId":"FD1BC08E-A587-421D-9B79-1ED40AD54699"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/11233","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1398","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/11233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1290","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chris_matthee:nftp:1.40:*:*:*:*:*:*:*","matchCriteriaId":"31FF23CA-2441-4C94-A5D2-ECA896EA7129"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91127951426494&w=2","source":"cve@mitre.org"},{"url":"http://www.ayukov.com/nftp/history.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1397","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91127951426494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ayukov.com/nftp/history.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1291","sourceIdentifier":"cve@mitre.org","published":"1998-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1383","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1292","sourceIdentifier":"cve@mitre.org","published":"1998-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kolban:webcam32:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.3","matchCriteriaId":"4D108406-E89B-40FF-B6BD-619F75EB17F7"}]}]}],"references":[{"url":"http://xforce.iss.net/alerts/advise7.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1366","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1293","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5","matchCriteriaId":"12268438-58C9-401E-8B20-7D7097797759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88413292830649&w=2","source":"cve@mitre.org"},{"url":"http://www.apache.org/info/security_bulletin_1.2.5.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=88413292830649&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/info/security_bulletin_1.2.5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1294","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.51:*:*:*:*:*:*:*","matchCriteriaId":"60A471C3-BE72-440E-84A8-55C6F9D362F4"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q146/6/04.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/562","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q146/6/04.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1295","sourceIdentifier":"cve@mitre.org","published":"1996-09-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for users who belong to a large number of groups, which could allow those users to gain access to resources that are protected by DFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transarc:dce_distributed_file_system:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C6B357-06FF-4FEA-871B-4426AECA6A1C"}]}]}],"references":[{"url":"http://www.cert.org/vendor_bulletins/VB-96.16.transarc","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7154","source":"cve@mitre.org"},{"url":"http://www.cert.org/vendor_bulletins/VB-96.16.transarc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1296","sourceIdentifier":"cve@mitre.org","published":"1997-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges via a long line in a kerberos configuration file, which can be specified via the KRB_CONF environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2B904DCE-D59F-45C7-A814-DE42CF02792D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420878&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420878&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1297","sourceIdentifier":"cve@mitre.org","published":"1998-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7482","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1298","sourceIdentifier":"cve@mitre.org","published":"1997-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the shell, which could allow attackers to gain access to certain system resources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"F7A5E8F9-E3C1-47BD-B080-B64985AD2EB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF4F7002-A525-4A66-BE8B-E50ABBF144B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7537.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6087","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-97:03.sysinstall.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7537.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1299","sourceIdentifier":"cve@mitre.org","published":"1997-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rcp on various Linux systems including Red Hat 4.0 allows a \"nobody\" user or other user with UID of 65535 to overwrite arbitrary files, since 65535 is interpreted as -1 by chown and other system calls, which causes the calls to fail to modify the ownership of the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"9FDBA67D-84A7-42D6-A994-7C967B6306D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420509&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420509&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1300","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3E7725DD-085A-4D3A-8F9E-55C3D4BBDD1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACCD6F58-9E37-40F0-AFD5-49523BEA301E"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/b-31.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/b-31.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1301","sourceIdentifier":"cve@mitre.org","published":"1996-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz in the rzsz module of FreeBSD before 2.1.5, and possibly other programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.5","matchCriteriaId":"CE5639A0-BF14-47C9-9271-E081FCFCE40A"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-31.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7540.php","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:17.rzsz.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-31.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7540.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1302","sourceIdentifier":"cve@mitre.org","published":"1994-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop_lite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DFB7EF-5D8E-4BA9-A543-3997FA4DC433"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_enterprise_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"456818AD-1B4C-4FE5-AE2E-5D8253CDC2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_network_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D5896E82-2CE0-41E1-B362-4AF7F760F7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"109E66CC-D6A2-401C-A78F-7670DA0BF790"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C7704187-37B1-454B-A928-257D401819BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4CBA0A34-C963-4A7A-ABDF-5EA7A02FDBCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA09A1EF-E03D-452E-AA80-0D8F294449FC"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ftp.cerias.purdue.edu/pub/advisories/cert/cert_bulletins/VB-94:01.sco","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7586","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.cerias.purdue.edu/pub/advisories/cert/cert_bulletins/VB-94:01.sco","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1303","sourceIdentifier":"cve@mitre.org","published":"1994-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop_lite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DFB7EF-5D8E-4BA9-A543-3997FA4DC433"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_enterprise_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"456818AD-1B4C-4FE5-AE2E-5D8253CDC2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_network_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D5896E82-2CE0-41E1-B362-4AF7F760F7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"109E66CC-D6A2-401C-A78F-7670DA0BF790"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C7704187-37B1-454B-A928-257D401819BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4CBA0A34-C963-4A7A-ABDF-5EA7A02FDBCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA09A1EF-E03D-452E-AA80-0D8F294449FC"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1304","sourceIdentifier":"cve@mitre.org","published":"1994-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop_lite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DFB7EF-5D8E-4BA9-A543-3997FA4DC433"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_enterprise_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"456818AD-1B4C-4FE5-AE2E-5D8253CDC2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_network_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D5896E82-2CE0-41E1-B362-4AF7F760F7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"109E66CC-D6A2-401C-A78F-7670DA0BF790"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C7704187-37B1-454B-A928-257D401819BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4CBA0A34-C963-4A7A-ABDF-5EA7A02FDBCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA09A1EF-E03D-452E-AA80-0D8F294449FC"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1305","sourceIdentifier":"cve@mitre.org","published":"1994-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in \"at\" program in SCO UNIX 4.2 and earlier allows local users to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop_lite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DFB7EF-5D8E-4BA9-A543-3997FA4DC433"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_enterprise_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"456818AD-1B4C-4FE5-AE2E-5D8253CDC2DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver_network_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D5896E82-2CE0-41E1-B362-4AF7F760F7DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"109E66CC-D6A2-401C-A78F-7670DA0BF790"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C7704187-37B1-454B-A928-257D401819BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4CBA0A34-C963-4A7A-ABDF-5EA7A02FDBCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA09A1EF-E03D-452E-AA80-0D8F294449FC"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-05.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1306","sourceIdentifier":"cve@mitre.org","published":"1992-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the \"established\" keyword is set, which could allow attackers to bypass filters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"91986F0D-94E5-4ED9-A98D-123C99FD43CE"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-20.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-1992-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-1999-1307","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:unixware:1.1:*:*:*:*:*:*:*","matchCriteriaId":"C9B59744-C8BE-4ED8-9820-ECF29C5C7EB3"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/f-06.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_4/0676.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-06.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_4/0676.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1308","sourceIdentifier":"cve@mitre.org","published":"1997-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-09.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-91.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-91.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7594.php","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-09.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-91.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-91.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7594.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1309","sourceIdentifier":"cve@mitre.org","published":"1996-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6.7","matchCriteriaId":"21B4A707-2F44-447E-A134-05EE7C848EE0"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-94.12.sendmail.vulnerabilities","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0040.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0042.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0043.html","source":"cve@mitre.org"},{"url":"http://www.dataguard.no/bugtraq/1994_1/0048.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0078.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7155","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-94.12.sendmail.vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dataguard.no/bugtraq/1994_1/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dataguard.no/bugtraq/1994_1/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1310","sourceIdentifier":"cve@mitre.org","published":"1994-11-04T05:00:00.000","lastModified":"2023-11-07T01:55:08.250","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-1999-1022.  Reason: This candidate is a duplicate of CVE-1999-1022.  Notes: All CVE users should reference CVE-1999-1022 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-1999-1311","sourceIdentifier":"cve@mitre.org","published":"1997-01-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/h-21.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1312","sourceIdentifier":"cve@mitre.org","published":"1993-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_axp:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F14BE7DD-8FE0-47DC-929A-35F20D9E3CE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_vax:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.2","matchCriteriaId":"52FE6481-1AEF-4C90-800C-AB5C4FB34344"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1993-05.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7142","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1313","sourceIdentifier":"cve@mitre.org","published":"1996-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"0963E658-392C-4B64-8358-1CCF8444852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:11.man.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-24.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7348","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:11.man.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-24.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1314","sourceIdentifier":"cve@mitre.org","published":"1996-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users to cause a denial of service (system reload) via a series of certain mount_union commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"0963E658-392C-4B64-8358-1CCF8444852C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1:stable:*:*:*:*:*:*","matchCriteriaId":"F25E27BA-F884-456B-9600-A4A0B8877A6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:current:*:*:*:*:*:*","matchCriteriaId":"FE799983-DF99-428E-B560-321680C85A75"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:10.mount_union.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-24.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7429.php","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:10.mount_union.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/g-24.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7429.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1315","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8","matchCriteriaId":"7770FB2F-EA4E-4DF9-A2FC-8C2723610414"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/f-04.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/f-04.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1316","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q247/9/75.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7391","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q247/9/75.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1317","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \\?? object folder using a different case letter (upper or lower) to point to a different device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:sp4:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"0CC5B755-839E-494F-A96B-0BC94CF15C97"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92127046701349&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92162979530341&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q222/1/59.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7398","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92127046701349&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92162979530341&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q222/1/59.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1318","sourceIdentifier":"cve@mitre.org","published":"1993-09-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.3","matchCriteriaId":"EB4CA8D0-B4E3-4B4E-A7D0-771B5C405004"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7480.php","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100630&zone_32=112193%2A%20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7480.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1319","sourceIdentifier":"cve@mitre.org","published":"1996-01-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in certain configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"766C1270-2F54-47CF-A13A-8AB68D3C76ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19960101-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7430.php","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19960101-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7430.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1320","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"07D7AF4E-1AC1-4615-A389-5C16AA7003BE"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/d-01.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7213.php","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/d-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7213.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1321","sourceIdentifier":"cve@mitre.org","published":"1998-11-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:v:*:*:*:*:*:*:*","matchCriteriaId":"0DB38284-7E3B-4D2C-A147-D9B3898E31A0"}]}]}],"references":[{"url":"http://lists.netspace.org/cgi-bin/wa?A2=ind9811A&L=bugtraq&P=R4814","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4883","source":"cve@mitre.org"},{"url":"http://lists.netspace.org/cgi-bin/wa?A2=ind9811A&L=bugtraq&P=R4814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1322","sourceIdentifier":"cve@mitre.org","published":"1998-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, which contains usernames and passwords in plaintext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:*:*:*:*:*:*:*:*","matchCriteriaId":"1DC5F560-7B2E-426E-AC3B-EB4CE16DCE02"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculan:*:*:*:*:*:*:*:*","matchCriteriaId":"55A180FA-9D61-44C5-B174-75DBAB2074ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*","matchCriteriaId":"261FB692-DD0F-494F-A25A-AFCC00BE4585"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91096758513985&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91133714919229&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91096758513985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91133714919229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1323","sourceIdentifier":"cve@mitre.org","published":"1999-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the administrator password in cleartext in (1) the navieg.ini file for NAVIEG, and (2) the ModifyPassword registry key in NAVMSE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:*:*:internet_email_gateways:*:*:*:*:*","versionEndIncluding":"1.0.1.7","matchCriteriaId":"0653E1AA-4FE6-42A2-B221-52DF556544C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:*:*:exchange:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"478F8894-81D8-43F3-8C2D-098419BFD96D"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92370067416739&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92370067416739&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1324","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the break-in limit threshold for failed login attempts, which makes it easier for attackers to conduct brute force password guessing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:openvms_vax:*:*:*:*:*:*:*:*","versionStartIncluding":"5.3","versionEndIncluding":"5.5.2","matchCriteriaId":"8EC148C6-C2CE-4347-AB6A-6B58C84CDF77"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/d-06.shtml","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7225","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/d-06.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1325","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vax_vms:sas_system:5.18:*:*:*:*:*:*:*","matchCriteriaId":"AB89B11E-753E-4A80-97CE-531D21D4783E"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/c-19.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7261","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/c-19.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1326","sourceIdentifier":"cve@mitre.org","published":"1997-07-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A86BB4F6-210F-448A-A3CB-127BEB5BD0D2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420401&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420408&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7169","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420401&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420408&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1327","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103125826&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7239.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6065","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125826&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7239.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1328","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90383955231511&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7232.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6068","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90383955231511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7232.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1329","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"64596B09-9E41-479E-9C66-01DCACE2282F"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7250.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#SysVinit","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7250.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#SysVinit","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1330","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"}]}]}],"references":[{"url":"http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602661419259&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7244.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh42-errata-general.html#db","source":"cve@mitre.org"},{"url":"http://lists.openresources.com/Debian/debian-bugs-closed/msg00581.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602661419259&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7244.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh42-errata-general.html#db","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1331","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows local users to cause a denial of service by shutting down the interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7245.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh42-errata-general.html#netcfg","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7245.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh42-errata-general.html#netcfg","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1332","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"040166C7-CB3A-485E-9337-CB679B779BF8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88603844115233&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-308","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7241.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3812","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#gzip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7845","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88603844115233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7241.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#gzip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1333","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"040166C7-CB3A-485E-9337-CB679B779BF8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89042322924057&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7240.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6111","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=89042322924057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7240.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#ncftp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1334","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elm_development_group:elm:2.4:*:*:*:*:*:*:*","matchCriteriaId":"5265C254-5FB6-4238-BD28-4176C70A29F4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88609666024181&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#elm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88609666024181&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#elm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1335","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"FCFC97A3-14D7-4B17-AB49-1A395A11CF64"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7251","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh40-errata-general.html#cmu-snmp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1336","sourceIdentifier":"cve@mitre.org","published":"1999-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC packets to the telnet port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:hiperarc:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.29","matchCriteriaId":"C841828F-3170-40F5-9D53-C8D2D8EE2294"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93458364903256&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93492615408725&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6057","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93458364903256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93492615408725&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1337","sourceIdentifier":"cve@mitre.org","published":"1999-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.11","matchCriteriaId":"24D76D39-F002-44B5-857D-3E6B158AD541"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93370073207984&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9873.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5921","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93370073207984&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9873.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1338","sourceIdentifier":"cve@mitre.org","published":"1999-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.3","matchCriteriaId":"B52E9623-AFCD-4AA6-A47B-DC3596897042"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93259112204664&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93259112204664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1339","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.10","matchCriteriaId":"45204613-D254-43D9-9261-EFC4DDD8576E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93277426802802&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93277766505061&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7257.php","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6105","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93277426802802&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93277766505061&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7257.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1340","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC80A56E-941A-440F-9141-DDAFCB76462B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94173799532589&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/765","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94173799532589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1341","sourceIdentifier":"cve@mitre.org","published":"1999-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD option on tty devices."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.13","matchCriteriaId":"145E3348-78A6-46D6-BC2C-21F5AB5DE4FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.3.0","versionEndExcluding":"2.3.18","matchCriteriaId":"05E1CCDA-7C67-46C5-B6F0-324A5DCE0E47"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94061108411308&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7858","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=94061108411308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1342","sourceIdentifier":"cve@mitre.org","published":"1999-10-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server's UDP port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:activelist_server:*:*:*:*:*:*:*:*","matchCriteriaId":"6844DD0E-8AE8-48A9-9355-ABBC59BC1FEA"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=94042342010662&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94042342010662&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1343","sourceIdentifier":"cve@mitre.org","published":"1999-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docucolor_4lp:*:*:*:*:*:*:*:*","matchCriteriaId":"21AEC119-CE59-47AC-843E-DE1694A3B818"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93986405412867&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93986405412867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1344","sourceIdentifier":"cve@mitre.org","published":"1999-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auto_ftp:auto_ftp:0.2:*:*:*:*:*:*:*","matchCriteriaId":"368229D8-CDF9-4665-9378-088E4DC0E28D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93923873006014&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93923873006014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1345","sourceIdentifier":"cve@mitre.org","published":"1999-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:auto_ftp:auto_ftp:0.2:*:*:*:*:*:*:*","matchCriteriaId":"368229D8-CDF9-4665-9378-088E4DC0E28D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93923873006014&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93923873006014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1346","sourceIdentifier":"cve@mitre.org","published":"1999-10-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"143809B4-A40E-426D-9800-C268AECBCA88"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93942774609925&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93942774609925&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1347","sourceIdentifier":"cve@mitre.org","published":"1999-10-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xsession file by starting kde, gnome or anotherlevel from kdm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1","matchCriteriaId":"143809B4-A40E-426D-9800-C268AECBCA88"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93942774609925&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93942774609925&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1348","sourceIdentifier":"cve@mitre.org","published":"1999-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which could allow local users to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"CA8CD46B-C22E-4576-9EA9-909B64D9EAC5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93220073515880&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93220073515880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1349","sourceIdentifier":"cve@mitre.org","published":"1999-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via certain packets, possibly with the Urgent (URG) flag set, to port 111."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlink_technology:omni-nfs_x_enterprise:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B07E1D03-763D-40B1-9514-172781BDAC86"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93923679004325&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93923679004325&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1350","sourceIdentifier":"cve@mitre.org","published":"1999-09-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcad_systemhaus:arcad:0.078_5:*:*:*:*:*:*:*","matchCriteriaId":"B05113AB-8A94-4AE0-B012-FFEE2EC300C9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93871933521519&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93871933521519&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1351","sourceIdentifier":"cve@mitre.org","published":"1999-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the \"Listen to !nick <soundname> requests\" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kvirc:irc_client:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F1022B58-B1B1-4935-B0DB-01B8C5575051"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93845560631314&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7761.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93845560631314&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7761.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1352","sourceIdentifier":"cve@mitre.org","published":"1999-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93855134409747&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93855134409747&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1353","sourceIdentifier":"cve@mitre.org","published":"1999-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2) user passwords in the Userbase.dbf data file, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nosque:msgcore:2.14:*:*:*:*:*:*:*","matchCriteriaId":"743DF18E-E2BD-4AC5-B7AA-D585F66ABB58"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93698162708211&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93698162708211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1354","sourceIdentifier":"cve@mitre.org","published":"1999-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in the files (1) home.fc for version 5.506, (2) network.fc for version 3.5, or (3) FCCLIENT.LOG when logging is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softarc:firstclass_internet_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.506","matchCriteriaId":"5C1B3787-4488-45B2-A2F0-1A2E055CABDE"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93637687305327&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93698283309513&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93637687305327&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93698283309513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1355","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"4.20","matchCriteriaId":"1185A4ED-A75A-413C-9D79-91E154A1EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:management_agents_for_servers:*:*:*:*:*:*:*:*","versionEndIncluding":"4.40","matchCriteriaId":"6EE31BED-8CFD-4F36-8A47-20C3E440A1ED"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93542118727732&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93654336516711&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93759822430801&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94183795025294&w=2","source":"cve@mitre.org"},{"url":"http://www.compaq.com/products/servers/management/advisory.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3231","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93542118727732&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93654336516711&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93759822430801&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94183795025294&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.compaq.com/products/servers/management/advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1356","sourceIdentifier":"cve@mitre.org","published":"1999-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (LegalNoticeCaption) and text (LegalNoticeText) in Windows NT, which could produce a legal notice that is in violation of the security policy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:smartstart:*:*:*:*:*:*:*:*","versionEndIncluding":"4.50","matchCriteriaId":"ED239855-5A0A-4C76-806A-DEDEC9819A74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93646669500991&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93637792706047&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93759822830815&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7763.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93646669500991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93637792706047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93759822830815&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7763.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1357","sourceIdentifier":"cve@mitre.org","published":"1999-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a \"<\" sign, and the 0x9b character to a \">\" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"5921E5E6-3D97-4075-B557-968340FB6E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.04:*:*:*:*:*:*:*","matchCriteriaId":"94F9EFE4-7853-4809-8D94-03B3EFD739E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93915331626185&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93915331626185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1358","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q157/6/73.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7400.php","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q157/6/73.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7400.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1359","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q163/8/75.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7401.php","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q163/8/75.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7401.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1360","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q160/6/50.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7402.php","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q160/6/50.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7402.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1361","sourceIdentifier":"cve@mitre.org","published":"1998-05-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101925891&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101925891&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1362","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incorrect parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"2DA4F4D4-444B-4CD8-A6E6-159303786DF8"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q160/6/01.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7403.php","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q160/6/01.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7403.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1363","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D0D4EAC2-A948-461F-B5DD-0AE73CF05D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q163/1/43.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7405.php","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q163/1/43.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7405.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1364","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContext or (2) SetThreadContext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q142/6/53.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7421.php","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q142/6/53.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7421.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1365","sourceIdentifier":"cve@mitre.org","published":"1999-06-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93069418400856&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93127894731200&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/515","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2336","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93069418400856&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93127894731200&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1366","sourceIdentifier":"cve@mitre.org","published":"1999-05-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:pegasus_mail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"BA789358-19BB-4F92-A11E-0622E48B355D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92714118829880&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92714118829880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1367","sourceIdentifier":"cve@mitre.org","published":"1999-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp","source":"cve@mitre.org"},{"url":"http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1368","sourceIdentifier":"cve@mitre.org","published":"1999-05-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft Exchange server, which could allow viruses to escape detection if a user's rules cause the message to be moved to a different mailbox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculateit:4.53:*:*:*:*:*:*:*","matchCriteriaId":"040E3DEF-F707-48EC-926F-B2CE00C8B90A"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92652152723629&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=97439568517355&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92652152723629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=97439568517355&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1369","sourceIdentifier":"cve@mitre.org","published":"1999-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:6.0.3.353:*:*:*:*:*:*:*","matchCriteriaId":"A0E48281-E72C-437C-8329-DC4E9F9AD04D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92411181619110&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92411181619110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1370","sourceIdentifier":"cve@mitre.org","published":"1999-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92220197414799&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92220197414799&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1371","sourceIdentifier":"cve@mitre.org","published":"1999-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92100752221493&w=2","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5ZP0O1P35O.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7546","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92100752221493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5ZP0O1P35O.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1372","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:triactive:remote_management:*:*:*:*:*:*:*:*","matchCriteriaId":"D2FE8FAC-7CE9-4965-8F3A-3F51AE963548"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91966339502073&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91966339502073&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1375","sourceIdentifier":"cve@mitre.org","published":"1999-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by specifying the name in the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91877455626320&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/230","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=91877455626320&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1376","sourceIdentifier":"cve@mitre.org","published":"1999-01-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91638375309890&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91632724913080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91638375309890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91632724913080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1377","sourceIdentifier":"cve@mitre.org","published":"1999-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:download.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E235ED6-D87A-4770-8F1D-DBAE076E3170"}]}]}],"references":[{"url":"http://pulhas.org/phrack/55/P55-07.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://pulhas.org/phrack/55/P55-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1378","sourceIdentifier":"cve@mitre.org","published":"1999-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dbmlparser.exe:dbmlparser.exe:*:*:*:*:*:*:*:*","matchCriteriaId":"55325DB2-3870-4835-B2D9-C3B3B26344FD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93250710625956&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93250710625956&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1379","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dnstools_software:dnstools:*:*:*:*:*:*:*:*","matchCriteriaId":"B73D2BE6-5D5F-49E3-8737-43923A78FFF6"}]}]}],"references":[{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-063.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93348057829957&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93433758607623&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7238.php","source":"cve@mitre.org"},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-063.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93348057829957&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93433758607623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7238.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1380","sourceIdentifier":"cve@mitre.org","published":"1997-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_utilities:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D0B5B84-4720-4EA2-AAF9-29D5D507514B"}]}]}],"references":[{"url":"http://mlarchive.ima.com/win95/1997/May/0342.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7188.php","source":"cve@mitre.org"},{"url":"http://www.net-security.sk/bugs/NT/nu20.html","source":"cve@mitre.org"},{"url":"http://mlarchive.ima.com/win95/1997/May/0342.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7188.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.net-security.sk/bugs/NT/nu20.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1381","sourceIdentifier":"cve@mitre.org","published":"1998-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dbadmin:dbadmin:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1DC1B27B-AE89-4A67-97EE-4FAE5BBF1BFE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90786656409618&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90786656409618&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1382","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWare NFS mode 1 and 2 implements the \"Read Only\" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to \"Read Only,\" which NetWare-NFS changes to a setuid root program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*","matchCriteriaId":"BF45C68A-5F83-4090-A0C1-A09EC2987706"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88427711321769&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90295697702474&w=2","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7246.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88427711321769&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90295697702474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7246.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1383","sourceIdentifier":"cve@mitre.org","published":"1996-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \\w option in the PS1 variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:*:*:*:*:*:*:*:*","versionEndIncluding":"1.14.6","matchCriteriaId":"357D1D06-CC5B-47BA-98FE-2A6FA2160A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.0:*:*:*:*:*:*:*","matchCriteriaId":"FCAC75DF-FFF7-4721-9D47-6E29A5CCB7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4B4BB-C5A0-4283-9657-FC61BC95C014"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.2:*:*:*:*:*:*:*","matchCriteriaId":"9B04CBBD-E855-48D7-A5C9-AEC2B38FF1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.3:*:*:*:*:*:*:*","matchCriteriaId":"972BDA0A-25C8-4C02-8624-07D2462C214C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.4:*:*:*:*:*:*:*","matchCriteriaId":"5B9EDE56-A8C4-40A8-9D14-F6E86F464BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:bash:1.14.5:*:*:*:*:*:*:*","matchCriteriaId":"DAB4B8E1-E013-4DB5-AF65-70CC2AEC3B20"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcsh:tcsh:6.05:*:*:*:*:*:*:*","matchCriteriaId":"FDCD3DC8-DE2D-4B39-BC5B-17768A3F6539"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167419868&w=2","source":"cve@mitre.org"},{"url":"http://www.dataguard.no/bugtraq/1996_3/0503.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167419868&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dataguard.no/bugtraq/1996_3/0503.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1384","sourceIdentifier":"cve@mitre.org","published":"1996-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a Trojan horse .exitops program, which is called by the inst command that is executed by the RemoveSystemTour program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3","matchCriteriaId":"AD4F5EAB-8D13-4363-8E66-0BAB031B4233"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5:*:*:*:*:*:*:*","matchCriteriaId":"7A870F95-DB46-4069-82B3-819E2B690C61"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420095&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7456.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/470","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.08.SGI.systour.vul","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961101-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420095&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7456.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1385","sourceIdentifier":"cve@mitre.org","published":"1996-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.0","matchCriteriaId":"1B6DE106-4EE6-43F4-B580-0BA6941F4825"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"44EFD22E-02C9-4B80-8934-A9AC8DD858CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1B4D4A5-25EB-48FE-BDFD-A274CE802648"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:20.stack-overflow.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420332&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7465.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6085","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/old/FreeBSD-SA-96:20.stack-overflow.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420332&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7465.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1386","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.004_04","matchCriteriaId":"356EEFF0-DC56-4E12-B7B1-DB28784FF3B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88932165406213&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.iss.net/security_center/static/7243.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#perl","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=88932165406213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.iss.net/security_center/static/7243.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#perl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-1999-1387","sourceIdentifier":"cve@mitre.org","published":"1997-04-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420731&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420732&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420741&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420731&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420732&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602167420741&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1388","sourceIdentifier":"cve@mitre.org","published":"1994-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"}]}]}],"references":[{"url":"http://www.dataguard.no/bugtraq/1994_4/0755.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www2.dataguard.no/bugtraq/1994_2/0197.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www2.dataguard.no/bugtraq/1994_2/0207.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.dataguard.no/bugtraq/1994_4/0755.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www2.dataguard.no/bugtraq/1994_2/0197.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www2.dataguard.no/bugtraq/1994_2/0207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-1999-1389","sourceIdentifier":"cve@mitre.org","published":"1998-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the \"set host prompt\" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the \"host: \" prompt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:total_control_netserver_card:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.24","matchCriteriaId":"4E6281AA-520E-4694-94A9-0F40EDB62A98"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101925916&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/99","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90221101925916&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/99","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1390","sourceIdentifier":"cve@mitre.org","published":"1998-04-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program on the command line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"http://darwin.bio.uci.edu/~mcoogan/bugtraq/msg00890.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94","source":"cve@mitre.org"},{"url":"http://darwin.bio.uci.edu/~mcoogan/bugtraq/msg00890.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/94","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1391","sourceIdentifier":"cve@mitre.org","published":"1990-10-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combination of the npd program and weak directory permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB8A63B4-195D-4AF0-8FE9-EB882BFF098E"},{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"CB1D6AD5-9F62-496F-BF5A-7AE26ABC3D3C"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/b-01.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7143.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/b-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7143.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1392","sourceIdentifier":"cve@mitre.org","published":"1990-10-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges."},{"lang":"es","value":"Vulnerabilidad en el script de instalación restore0.9  en  NeXT 1.0a y 1.0 permite a usuarios locales conseguir privilegios de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:next:nex:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"B477FD08-1821-4825-845F-954665A264AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB8A63B4-195D-4AF0-8FE9-EB882BFF098E"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/b-01.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7144.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/b-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7144.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1393","sourceIdentifier":"cve@mitre.org","published":"1999-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Control Panel \"Password Security\" option for Apple Powerbooks allows attackers with physical access to the machine to bypass the security by booting it with an emergency startup disk and using a disk editor to modify the on/off toggle or password in the aaaaaaaAPWD file, which is normally inaccessible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:8.5:*:*:*:*:*:*:*","matchCriteriaId":"B228B2A1-8897-4028-9744-B30021CC6ECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:8.6:*:*:*:*:*:*:*","matchCriteriaId":"5CD596AD-EBF4-4A02-88E2-54952FD19E09"}]}]}],"references":[{"url":"http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/532","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://freaky.staticusers.net/macsec/data/powerbooksecurity-data.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1394","sourceIdentifier":"cve@mitre.org","published":"1999-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"3C37EB61-50BE-451A-916B-B05BAC79962B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93094058620450&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/510","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93094058620450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1395","sourceIdentifier":"cve@mitre.org","published":"1992-11-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1D42E089-9EE8-4B4E-8B25-20F54DA4D01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D2BFC6C5-9A3A-4A12-B7FD-095FD00DB89A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8E8B4954-4B16-47D7-9BC2-49E8CE34BC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BFB8258A-966B-4E25-9824-1A73F1AEF265"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EC967A85-49C7-4F1E-912F-E63363355ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"00A32138-FC94-4AE6-A0E8-B359F15CFC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.1b:*:*:*:*:*:*:*","matchCriteriaId":"3B94A8E5-1BC9-42AC-9176-7270352C1275"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.2:*:*:*:*:*:*:*","matchCriteriaId":"1E3CA2B4-63C9-4BBB-AD43-B54AEDB2039D"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"855536B6-B857-4721-BC1C-07FF6F309F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.3:*:*:*:*:*:*:*","matchCriteriaId":"DF157514-2080-4A16-BEBA-AFF6FCEE52E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"93468C27-04EC-4C81-816E-2E44D2C9372C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C0B611AE-9581-41E5-8AD8-7876EAA730A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.4:*:*:*:*:*:*:*","matchCriteriaId":"74642EFA-4E4B-4BA9-A1AA-5CF4DD659A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3A418295-3389-40B9-9D96-5DE7B720D12B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"178FBBB2-222C-4456-835E-2CFD94222154"}]}]}],"references":[{"url":"http://osvdb.org/59332","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-92.16.VMS.Monitor.vulnerability","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7136.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/51","source":"cve@mitre.org"},{"url":"http://osvdb.org/59332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-1992-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-92.16.VMS.Monitor.vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7136.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/51","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1396","sourceIdentifier":"cve@mitre.org","published":"1992-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service (crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-15.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7150.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/49","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1992-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7150.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/49","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1397","sourceIdentifier":"cve@mitre.org","published":"1999-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92242671024118&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92223293409756&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7559.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/476","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92242671024118&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92223293409756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7559.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1398","sourceIdentifier":"cve@mitre.org","published":"1997-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420921&w=2","source":"cve@mitre.org"},{"url":"http://www.insecure.org/sploits/irix.xfsdump.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/472","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420921&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.insecure.org/sploits/irix.xfsdump.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1399","sourceIdentifier":"cve@mitre.org","published":"1997-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME environmental variable to contain the commands to be executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602746719552&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/471","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602746719552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1400","sourceIdentifier":"cve@mitre.org","published":"1999-06-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Economist screen saver 1999 with the \"Password Protected\" option enabled allows users with physical access to the machine to bypass the screen saver and read files by running Internet Explorer while the screen is still locked."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_economist:the_economist_1999_screen_saver:*:*:*:*:*:*:*:*","matchCriteriaId":"AAF2C673-257E-4BC1-B936-51F75C3F1BCC"}]}]}],"references":[{"url":"http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0007.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=92851653600852&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/466","source":"cve@mitre.org"},{"url":"http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.indenial.com/hypermail/ntbugtraq/1999/June1999/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=92851653600852&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1401","sourceIdentifier":"cve@mitre.org","published":"1996-12-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files (iconbook and searchbook)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961201-01-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7575.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8563","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/463","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961201-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7575.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1402","sourceIdentifier":"cve@mitre.org","published":"1997-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2839042D-7706-4059-B069-72E36297ECEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167418317&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602248718482&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7172.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/456","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167418317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602248718482&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7172.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1403","sourceIdentifier":"cve@mitre.org","published":"1998-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_opc_tracker_agent:1.0x:*:*:*:*:*:*:*","matchCriteriaId":"2DE3B09E-766A-42B1-BCA9-894CC99F8DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_opc_tracker_agent:2.0x:*:*:*:*:*:*:*","matchCriteriaId":"A42A16FE-C968-4A27-A094-64DD31085C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_opc_tracker_agent:3.0x:*:*:*:*:*:*:*","matchCriteriaId":"4E77F32E-40E7-4766-B127-4C1F8DE89339"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1404","sourceIdentifier":"cve@mitre.org","published":"1998-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaustion) via malformed data to the localtracker client port (5011), which prevents the connection from being closed properly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_opc_tracker_agent:1.0x:*:*:*:*:*:*:*","matchCriteriaId":"2DE3B09E-766A-42B1-BCA9-894CC99F8DFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_opc_tracker_agent:2.0x:*:*:*:*:*:*:*","matchCriteriaId":"A42A16FE-C968-4A27-A094-64DD31085C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_opc_tracker_agent:3.0x:*:*:*:*:*:*:*","matchCriteriaId":"4E77F32E-40E7-4766-B127-4C1F8DE89339"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10771","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/382","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1405","sourceIdentifier":"cve@mitre.org","published":"1999-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Fixed in AIX 4.3 and 4.3.2\r\nAIX 4.3.x APAR: IX88263\r\nAIX 4.2.x APAR: IX88261","cveTags":[],"descriptions":[{"lang":"en","value":"snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which could allow local users to access the shadowed password file by creating /tmp/ibmsupt/general/passwd before root runs snap -a."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91936783009385&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91954824614013&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/375","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=91936783009385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91954824614013&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1406","sourceIdentifier":"cve@mitre.org","published":"1998-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104526185&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526192&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/372","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104526192&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1407","sourceIdentifier":"cve@mitre.org","published":"1998-03-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the dhcplog file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88950856416985&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7294.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#initscripts","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/368","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88950856416985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7294.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/rh50-errata-general.html#initscripts","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1408","sourceIdentifier":"cve@mitre.org","published":"1997-03-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420641&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/352","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420641&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1409","sourceIdentifier":"cve@mitre.org","published":"1998-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"071B436C-4D6F-4C7D-943E-C682B29A9701"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90233906612929&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7577.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/331","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90233906612929&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7577.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.shmoo.com/mail/bugtraq/jul98/msg00064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1410","sourceIdentifier":"cve@mitre.org","published":"1997-05-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a symlink attack on the printers temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420927&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/330","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19961203-02-PX","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420927&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1411","sourceIdentifier":"cve@mitre.org","published":"1998-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which could automatically enable anonymous FTP on some servers such as wu-ftp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"}]}]}],"references":[{"url":"http://lists.debian.org/debian-security-announce/debian-security-announce-1998/msg00033.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91228908407679&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91244712808780&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91936850009861&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7574.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/316","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://lists.debian.org/debian-security-announce/debian-security-announce-1998/msg00033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91228908407679&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91244712808780&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91936850009861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7574.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1412","sourceIdentifier":"cve@mitre.org","published":"1999-06-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*","matchCriteriaId":"D623D8C0-65D2-4269-A1D4-5CB3899F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:1.0:*:*:*:*:*:*:*","matchCriteriaId":"51575CB1-A800-410A-BE8C-028FFD938245"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/14215","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/306","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/14215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1413","sourceIdentifier":"cve@mitre.org","published":"1996-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167419549&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/296","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167419549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1414","sourceIdentifier":"cve@mitre.org","published":"1999-05-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs with system level privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:netfinity_remote_control:*:*:*:*:*:*:*:*","matchCriteriaId":"1A12AD28-B563-4F5F-8346-22BC4CE6D725"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92765856706547&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92902484317769&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/284","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92765856706547&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=92902484317769&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1415","sourceIdentifier":"cve@mitre.org","published":"1991-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"CFE03320-C658-48BC-93BA-B15DA5A29E3A"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/27","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1416","sourceIdentifier":"cve@mitre.org","published":"1998-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) via an HTTP POST request with a large content-length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inso:dwhttpd:3.1a4:*:*:*:*:*:*:*","matchCriteriaId":"CAF65A00-8271-466F-B6F5-D4E047E5D3C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1417","sourceIdentifier":"cve@mitre.org","published":"1998-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inso:answerbook2:*:*:*:*:*:*:*:*","matchCriteriaId":"9C7095B1-4DC1-4EC9-AA87-79C6D6B8D33C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/10383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1418","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ99 ICQ web server build 1701 with \"Active Homepage\" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists (\"404 Forbidden\") versus when a file does not exist (\"404 not found\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq_web_front:*:*:*:*:*:*:*:*","matchCriteriaId":"5BAA7C32-B6AE-4033-A91E-29962CCB0190"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/13508","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/246","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/13508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1419","sourceIdentifier":"cve@mitre.org","published":"1997-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7535.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/219","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7535.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1420","sourceIdentifier":"cve@mitre.org","published":"1998-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remote attackers to modify the switch's configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh2012:2.53:*:*:*:*:*:*:*","matchCriteriaId":"9400D8E4-D489-462D-9785-5345F4C1E1AA"},{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh2012r:2.53:*:*:*:*:*:*:*","matchCriteriaId":"CDE6FECC-2094-425B-82F2-2038E6F2EA4C"},{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh2015:2.51:*:*:*:*:*:*:*","matchCriteriaId":"E05D6ADC-5CC0-443E-B1E3-FFA023CC6D56"},{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh2048:1.33:*:*:*:*:*:*:*","matchCriteriaId":"0B54BAA0-7861-4DCC-A308-8DA4A71CAFCF"},{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh3012:2.1:*:*:*:*:*:*:*","matchCriteriaId":"14FEE263-6B97-401A-A01A-E21E08CDA503"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104526016&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526065&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/212","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526016&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104526065&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1421","sourceIdentifier":"cve@mitre.org","published":"1998-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service (crash) by guessing the target filenames, which have default names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh208:*:*:*:*:*:*:*:*","matchCriteriaId":"97E779FF-4447-4F7B-99D7-6B961D81391F"},{"vulnerable":true,"criteria":"cpe:2.3:h:n-base:nh215:*:*:*:*:*:*:*:*","matchCriteriaId":"37881B2D-A2D4-4006-9C38-559D1B19A286"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104526016&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526065&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/212","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526016&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104526065&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1422","sourceIdentifier":"cve@mitre.org","published":"1999-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the PATH environmental variable, which could allow local users to create Trojan horse programs that are inadvertently executed by other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"82E436BF-6017-4A3F-AD98-683019DCE436"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91540043023167&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/211","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91540043023167&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1423","sourceIdentifier":"cve@mitre.org","published":"1997-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602558319160&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602558319171&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602558319180&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602558319181&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/146","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7492.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/209","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602558319160&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602558319171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602558319180&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=87602558319181&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7492.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1424","sourceIdentifier":"cve@mitre.org","published":"1997-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"69DB4DAD-6F73-409B-8D9D-F8B04C39DAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:x86:*:*:*:*:*","matchCriteriaId":"9FF7DF93-A041-46E7-88A3-4AA875BDEF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A176015-C664-41FC-A1DF-785E7A65C482"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:x86:*:*:*:*:*","matchCriteriaId":"1E5706BE-3F22-4DDC-BDA5-17DE023F2A13"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1425","sourceIdentifier":"cve@mitre.org","published":"1997-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"69DB4DAD-6F73-409B-8D9D-F8B04C39DAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:x86:*:*:*:*:*","matchCriteriaId":"9FF7DF93-A041-46E7-88A3-4AA875BDEF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A176015-C664-41FC-A1DF-785E7A65C482"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:x86:*:*:*:*:*","matchCriteriaId":"1E5706BE-3F22-4DDC-BDA5-17DE023F2A13"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1426","sourceIdentifier":"cve@mitre.org","published":"1997-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"69DB4DAD-6F73-409B-8D9D-F8B04C39DAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:x86:*:*:*:*:*","matchCriteriaId":"9FF7DF93-A041-46E7-88A3-4AA875BDEF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A176015-C664-41FC-A1DF-785E7A65C482"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:x86:*:*:*:*:*","matchCriteriaId":"1E5706BE-3F22-4DDC-BDA5-17DE023F2A13"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1427","sourceIdentifier":"cve@mitre.org","published":"1997-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"69DB4DAD-6F73-409B-8D9D-F8B04C39DAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:x86:*:*:*:*:*","matchCriteriaId":"9FF7DF93-A041-46E7-88A3-4AA875BDEF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A176015-C664-41FC-A1DF-785E7A65C482"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:x86:*:*:*:*:*","matchCriteriaId":"1E5706BE-3F22-4DDC-BDA5-17DE023F2A13"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1428","sourceIdentifier":"cve@mitre.org","published":"1997-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:*:*:*:*:*:*","matchCriteriaId":"69DB4DAD-6F73-409B-8D9D-F8B04C39DAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.1:*:x86:*:*:*:*:*","matchCriteriaId":"9FF7DF93-A041-46E7-88A3-4AA875BDEF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A176015-C664-41FC-A1DF-785E7A65C482"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_adminsuite:2.2:*:x86:*:*:*:*:*","matchCriteriaId":"1E5706BE-3F22-4DDC-BDA5-17DE023F2A13"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1429","sourceIdentifier":"cve@mitre.org","published":"1998-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to damage disks through the ff device driver."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dit:transferpro:*:*:*:*:*:*:*:*","matchCriteriaId":"7BE48640-4059-4437-B36E-958C710E6308"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88419633507543&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/204","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88419633507543&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1430","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:royal:davinci:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EB0B3280-54D4-4158-A9FC-98CE007EF904"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91540043723185&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/185","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91540043723185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1432","sourceIdentifier":"cve@mitre.org","published":"1998-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525997&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/160","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525997&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1433","sourceIdentifier":"cve@mitre.org","published":"1998-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:rev._d.01.09:*:*:*:*:*:*:*","matchCriteriaId":"80A1877A-2746-47C0-8ABC-C65F37AE0B81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525988&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526067&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/157","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525988&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104526067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1434","sourceIdentifier":"cve@mitre.org","published":"1998-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which prevents it from dropping privileges, causing it to assign root privileges to any local user who logs on to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"9FDBA67D-84A7-42D6-A994-7C967B6306D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.2:*:*:*:*:*:*:*","matchCriteriaId":"852B55FE-8180-4357-B717-399C16954C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"125918E7-53BB-407A-8D95-5D95CDF39A88"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525951&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/155","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525951&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1435","sourceIdentifier":"cve@mitre.org","published":"1998-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environmental variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nec:socks_5:1.0r5:*:*:*:*:*:*:*","matchCriteriaId":"85476271-78BE-4958-9A84-9EDC96C16463"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525933&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/154","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525933&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1436","sourceIdentifier":"cve@mitre.org","published":"1998-07-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the \"user\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ray_chan:www_authorization_gateway:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0937E18C-BABE-41E7-8648-03B55687A5F7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525905&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/152","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525905&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1437","sourceIdentifier":"cve@mitre.org","published":"1998-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"DAEFD4F6-73A1-4011-ABAE-5C5E86CB535A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104525890&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525927&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/151","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104525890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104525927&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1438","sourceIdentifier":"cve@mitre.org","published":"1991-02-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command line arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.1","matchCriteriaId":"BD213C54-28D3-4584-95D2-E28732BC649A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-91.01a.SunOS.mail.vulnerability","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/15","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-91.01a.SunOS.mail.vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/15","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1439","sourceIdentifier":"cve@mitre.org","published":"1998-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gcc:gcc:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"7AAD2943-904B-4AF9-A9CD-2D5C4A47DE21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88419592307388&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88492937727193&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88524071002939&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/146","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88419592307388&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88492937727193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=88524071002939&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1440","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is safe to open from the client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq_98a:*:*:*:*:*:*:*:*","versionEndIncluding":"1.30","matchCriteriaId":"496E6612-1278-4A40-891E-B1B9B6596107"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91522424302962&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/132","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91522424302962&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1441","sourceIdentifier":"cve@mitre.org","published":"1998-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users to cause a denial of service by sending SIGIO to processes that do not catch it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"92555500-16EB-4F76-B2C7-61A00A1AC722"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103126047&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/111","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103126047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1442","sourceIdentifier":"cve@mitre.org","published":"1998-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a particular sequence of instructions, possibly related to accessing addresses outside of segments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.39","matchCriteriaId":"91A62C26-D718-4180-8499-BCF7CAB7B6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.1.0","versionEndIncluding":"2.1.132","matchCriteriaId":"2FC25C71-E25A-47E1-913E-BD493B4C136C"}]}]}],"references":[{"url":"http://uwsg.iu.edu/hypermail/linux/kernel/9805.3/0855.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/Year-1998/1998-25/0816.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://uwsg.iu.edu/hypermail/linux/kernel/9805.3/0855.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/Year-1998/1998-25/0816.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1443","sourceIdentifier":"cve@mitre.org","published":"1998-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass the desktop protection by (1) using <CTRL><ALT><DEL> and kill the process using the task manager, (2) booting the system from a separate disk, or (3) interrupting certain processes that execute while the system is booting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:micah_software:full_armor:*:*:*:*:*:*:*:*","matchCriteriaId":"DDB0D068-DC17-440C-B83D-5761197FF3FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221103125869&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125889&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/103","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221103125869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221103125889&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1444","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_software_manufaktur:alibaba:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DD3CBF4-B593-4C4A-8B9C-D005846B4090"}]}]}],"references":[{"url":"http://catless.ncl.ac.uk/Risks/20.41.html#subj4","source":"cve@mitre.org"},{"url":"http://catless.ncl.ac.uk/Risks/20.41.html#subj4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1445","sourceIdentifier":"cve@mitre.org","published":"1998-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=88637951600184&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=88637951600184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1446","sourceIdentifier":"cve@mitre.org","published":"1997-08-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the \"Clear History\" option, and are not visible when the user browses the folders because of tailored displays."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=87602837719654&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=87602837719655&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=87602837719654&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=87602837719655&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1447","sourceIdentifier":"cve@mitre.org","published":"1998-07-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104526169&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526188&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526169&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221104526188&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1448","sourceIdentifier":"cve@mitre.org","published":"1998-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:*:*:*:*:*:*:*:*","versionEndIncluding":"3.05","matchCriteriaId":"AB4BC854-4F0F-49E2-9835-CC60917B0F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora_light:*:*:*:*:*:*:*:*","versionEndIncluding":"3.05","matchCriteriaId":"89CC80BD-750C-4EB7-8FA5-669C0A3DF5F6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221104526168&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221104526168&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1449","sourceIdentifier":"cve@mitre.org","published":"1997-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]}]}],"references":[{"url":"http://oamk.fi/~jukkao/bugtraq/before-971202/0498.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.insecure.org/sploits/sunos.dev.tcx0.write.wierd.shit.to.device.bug.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://oamk.fi/~jukkao/bugtraq/before-971202/0498.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.insecure.org/sploits/sunos.dev.tcx0.write.wierd.shit.to.device.bug.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1450","sourceIdentifier":"cve@mitre.org","published":"1999-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.5","matchCriteriaId":"641472D4-4143-47A7-B3CE-84021F67EC75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"B64BFE2D-88F0-4046-9D0C-96D215AD935E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1","matchCriteriaId":"1ED5F32A-8869-407C-B79B-49ECE360B3F3"}]}]}],"references":[{"url":"ftp://ftp.sco.COM/SSE/sse020.ltr","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.03b","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.06b","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.COM/SSE/sse020.ltr","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.03b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.06b","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1451","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q231/3/68.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3271","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q231/3/68.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1452","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91788829326419&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91764169410814&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91822011021558&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q214/8/02.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/198","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1975","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91788829326419&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91764169410814&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91822011021558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q214/8/02.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1453","sourceIdentifier":"cve@mitre.org","published":"1999-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=91979439932341&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/215","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=ntbugtraq&m=91979439932341&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1454","sourceIdentifier":"cve@mitre.org","published":"1999-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia \"The Matrix\" screen saver on Windows 95 with the \"Password protected\" option enabled allows attackers with physical access to the machine to bypass the password prompt by pressing the ESC (Escape) key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:matrix_screen_saver:*:*:*:*:*:*:*:*","matchCriteriaId":"A5DEDA15-AA6C-4699-95FB-DE4E45198AD9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93915027622690&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93915027622690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1455","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"2DA4F4D4-444B-4CD8-A6E6-159303786DF8"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q158/3/20.asp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7422","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q158/3/20.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1456","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thttpd:thttpd_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.03","matchCriteriaId":"522B451F-0400-4980-A49A-252684241AFF"}]}]}],"references":[{"url":"http://www.acme.com/software/thttpd/thttpd.html#releasenotes","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/10368","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1809","source":"cve@mitre.org"},{"url":"http://www.acme.com/software/thttpd/thttpd.html#releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/10368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1457","sourceIdentifier":"cve@mitre.org","published":"1999-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thttpd:thttpd_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04","matchCriteriaId":"60CA9476-1B47-41CA-953C-9119BD6165CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:thttpd:thttpd_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04.31","matchCriteriaId":"9227A693-2643-4477-93C7-4688E5E6DA4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:thttpd:thttpd_http_server:1.90a:*:*:*:*:*:*:*","matchCriteriaId":"7B360C87-05B2-43E4-B944-EAE5E5185080"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_30.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_30.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1458","sourceIdentifier":"cve@mitre.org","published":"1999-01-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0a:*:*:*:*:*:*:*","matchCriteriaId":"781D13E2-35BB-4D58-A68F-86401D08D438"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"07476CFD-859F-4AD7-8514-130E7A86BAE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0c:*:*:*:*:*:*:*","matchCriteriaId":"A5F097D7-CD52-44FC-851C-7DB42E57DCB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"8C250283-4343-4569-A6EA-988FB7319AA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"32AE5D68-92A0-4950-A6FF-ECD5F56FDD90"}]}]}],"references":[{"url":"http://ftp1.support.compaq.com/public/dunix/v4.0d/ssrt0583u.README","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/12121","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3138","source":"cve@mitre.org"},{"url":"http://ftp1.support.compaq.com/public/dunix/v4.0d/ssrt0583u.README","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/12121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1459","sourceIdentifier":"cve@mitre.org","published":"1998-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD670201-A070-4E0D-BE58-2329116681AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6C07DD3D-C806-4218-BBC8-B859940D9330"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/534","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise10.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1388","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise10.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1460","sourceIdentifier":"cve@mitre.org","published":"1999-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.7","matchCriteriaId":"5C00C28F-86B7-4DD0-94D0-835344ACAB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD670201-A070-4E0D-BE58-2329116681AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6C07DD3D-C806-4218-BBC8-B859940D9330"},{"vulnerable":true,"criteria":"cpe:2.3:a:bmc:patrol_agent:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"7B1CDFC2-10EC-4955-B254-5A22F910EFE8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93198293132463&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93372579004129&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/525","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93198293132463&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93372579004129&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1461","sourceIdentifier":"cve@mitre.org","published":"1997-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttsession program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse ttsession program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420921&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/381","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167420921&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1462","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bb4:big_brother:1.09b:*:*:*:*:*:*:*","matchCriteriaId":"A831C799-303E-487E-A7E3-67308E8ECEBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bb4:big_brother:1.09c:*:*:*:*:*:*:*","matchCriteriaId":"76561DA2-6188-476B-B4FF-46EF49F36EDA"}]}]}],"references":[{"url":"http://bb4.com/README.CHANGES","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/13440","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/142","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3755","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bb4.com/README.CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/13440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1463","sourceIdentifier":"cve@mitre.org","published":"1997-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:sp3:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"E2D64573-E3F4-488D-B15E-2715AC2526AE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7219","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/528","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/7219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1464","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1cc:*:*:*:*:*:*:*","matchCriteriaId":"D5F31EAA-F76F-4182-B90D-6997E52EEB25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1ct:*:*:*:*:*:*:*","matchCriteriaId":"8D419BED-A8C0-4304-A0E9-7805CE3E7FB1"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-016.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1401","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-016.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1465","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"11.3","matchCriteriaId":"2C53A003-5CF4-4657-A6DB-8A08489D11B6"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/j-016.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1401","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/j-016.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/iosdfsacl-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1466","sourceIdentifier":"cve@mitre.org","published":"1992-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the \"established\" keyword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E72B3032-154D-45C2-8380-CCB28E4F2E8C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:8.3:*:*:*:*:*:*:*","matchCriteriaId":"87395248-5E9C-4257-9CC7-2E2805B69F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.0:*:*:*:*:*:*:*","matchCriteriaId":"A476BFB0-E587-41A6-B691-2609E0146C2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.1:*:*:*:*:*:*:*","matchCriteriaId":"2E9A00D5-A594-4C64-B982-10CB4C554F51"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-20.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/53","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1992-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/53","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1467","sourceIdentifier":"cve@mitre.org","published":"1989-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2839042D-7706-4059-B069-72E36297ECEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3791C6C1-2B30-4746-B4D5-A728914C3589"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C25D2DE-7ED7-47E3-A49F-1F42B57500CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"27C5561B-F8AE-4AD2-BD1C-E9089F315277"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1989-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3165","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1989-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1468","sourceIdentifier":"cve@mitre.org","published":"1991-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE2FFB2A-88AD-483E-ABE8-38655528F081"},{"vulnerable":true,"criteria":"cpe:2.3:a:next:next:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4BB7B0B4-2E69-434C-BB18-4400001A9CBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*","matchCriteriaId":"41D0212C-EA41-4DF3-9A93-4559545BCD7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3567046C-FE3F-424D-A1B0-D7A43D00B79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"40511481-CD42-4EB7-BE2A-7A78964B7D3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D926CDA1-AF2B-4DED-93AE-8F12091E0B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3E7725DD-085A-4D3A-8F9E-55C3D4BBDD1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:6.0e:*:*:*:*:*:*:*","matchCriteriaId":"544736F7-0E4F-45C1-811B-114CFCBBC895"},{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACCD6F58-9E37-40F0-AFD5-49523BEA301E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"27C5561B-F8AE-4AD2-BD1C-E9089F315277"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1psr_a:*:*:*:*:*:*:*","matchCriteriaId":"FF90C17C-5B10-45D4-8296-D00EAFA1EB8E"}]}]}],"references":[{"url":"http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-91.20.rdist.vulnerability","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7160.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/31","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-91.20.rdist.vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7160.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1469","sourceIdentifier":"cve@mitre.org","published":"1999-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes_technologies:w3-auth:*:*:*:*:*:*:*:*","matchCriteriaId":"A7E02158-098A-4D46-AF4E-FCD46BDF722B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93871926821410&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93871926821410&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1470","sourceIdentifier":"cve@mitre.org","published":"1999-06-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eastman_software:work_management:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5BAD853C-7BBA-4B70-B0E4-54B61344C180"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93034788412494&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2303","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93034788412494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1471","sourceIdentifier":"cve@mitre.org","published":"1989-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"32E0E862-63E6-42DA-8CCC-AAAC581FE211"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"388BB5C2-53B3-4597-913C-7D86E585CCD5"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1989-01.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7152.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1989-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/7152.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1472","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87710897923098&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/support/kb/articles/q176/7/94.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/Windows/ie/security/freiburg.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7819","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/587","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87710897923098&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/support/kb/articles/q176/7/94.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/Windows/ie/security/freiburg.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1473","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the \"Page Redirect Issue.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7426.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7818","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q176/6/97.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7426.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1474","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:95:*:*:*:*:*:*:*","matchCriteriaId":"54CAE34D-7010-411D-94CB-25D2F0F99BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:97:*:*:*:*:*:*:*","matchCriteriaId":"3FFA2986-0E47-43C0-938E-65FC15F13C53"}]}]}],"references":[{"url":"http://www.microsoft.com/windows/ie/security/powerpoint.asp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/179","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/windows/ie/security/powerpoint.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1475","sourceIdentifier":"cve@mitre.org","published":"1999-11-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CE2243B4-8E0C-46BC-A003-EF52C30A030E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/35483","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/812","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/35483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1476","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the \"Invalid Operand with Locked CMPXCHG8B Instruction\" problem."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:pentium:*:*:mmx:*:*:*:*:*","matchCriteriaId":"130477DF-BB29-4E6F-B664-02AF0D8A5BA7"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:pentuim:*:*:overdrive:*:*:*:*:*","matchCriteriaId":"724A4E98-8650-4449-A54F-0882D5CC8D15"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/q163/8/52.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/704","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q163/8/52.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1477","sourceIdentifier":"cve@mitre.org","published":"1999-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gnome_libs:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F677491A-EB46-4AF3-BD85-00FF56E1F546"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/28717","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/663","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3349","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/28717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1478","sourceIdentifier":"cve@mitre.org","published":"1999-07-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93138827429589&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93240220324183&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/522","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2348","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93138827429589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93240220324183&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1479","sourceIdentifier":"cve@mitre.org","published":"1998-06-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:textcounter:1.2:*:*:*:*:*:*:*","matchCriteriaId":"5A18692E-E666-4F57-A2F4-359775E6CA19"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9609","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1480","sourceIdentifier":"cve@mitre.org","published":"1998-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/429","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1481","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:1.0:*:*:*:*:*:*:*","matchCriteriaId":"907DE399-6B3B-4A6F-AFDD-5BE5FD6E5E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:1.0novm:*:*:*:*:*:*:*","matchCriteriaId":"391B1569-3599-40E1-91AF-928101723AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C80314B-A472-416A-8B7C-E4A240A9ADCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"100F1BA1-3278-4917-9C42-80CEAE72CDB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7676D506-ED4C-4A3B-8CA7-B0E5D9B3156E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/33295","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/33295","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/741","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.2/bugs/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/33295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/33295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.2/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1482","sourceIdentifier":"cve@mitre.org","published":"1999-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to child processes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:svgalib:zgv:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.7","matchCriteriaId":"143C891B-8B11-4FCF-8FC1-0FCA3BDEC20D"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-02-15&msg=Pine.LNX.3.96.990219175605.9622A-100000%40ferret.lmh.ox.ac.uk","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-02-15&msg=Pine.LNX.3.96.990219175605.9622A-100000%40ferret.lmh.ox.ac.uk","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1483","sourceIdentifier":"cve@mitre.org","published":"1997-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:svgalib:svgalib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.10","matchCriteriaId":"D7A469AF-9087-46D8-9FEF-794233240927"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/7041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/7041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1484","sourceIdentifier":"cve@mitre.org","published":"1999-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_setup_bulletin_board_services:4.71.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E7A77FB8-F051-4B7B-ADB4-7B484765A7B2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/28719","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/668","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/28719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1485","sourceIdentifier":"cve@mitre.org","published":"1999-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files and cause a possible denial of service by mounting the nsd virtual file system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92818552106912&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8564","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2247","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92818552106912&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1486","sourceIdentifier":"cve@mitre.org","published":"1998-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sadc in IBM AIX 4.1 through 4.3, when called from programs such as timex that are setgid adm, allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/408","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7675","source":"cve@mitre.org"},{"url":"http://techsupport.services.ibm.com/aix/fixes/v4/os/bos.acct.4.3.1.0.info","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX75554&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76330&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX76853&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1487","sourceIdentifier":"cve@mitre.org","published":"1998-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www-1.ibm.com/servlet/support/manager?rt=0&rs=0&org=apars&doc=41D8B61D1E1C4FAB852567C9002C546C","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7477.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/servlet/support/manager?rt=0&rs=0&org=apars&doc=41D8B61D1E1C4FAB852567C9002C546C","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7477.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1488","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:system_data_repository:sp_2.0:*:*:*:*:*:*:*","matchCriteriaId":"70B63CEB-0F9E-407C-AB16-2B05D983CA9B"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/i-079a.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7217.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/371","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-079a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7217.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1489","sourceIdentifier":"cve@mitre.org","published":"1997-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privileges via a long -nopr argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"9FDBA67D-84A7-42D6-A994-7C967B6306D3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/6384","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/364","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/6384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1490","sourceIdentifier":"cve@mitre.org","published":"1998-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xosview 1.5.1 in Red Hat 5.1 allows local users to gain root access via a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101926021&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101926034&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8787.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/362","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=90221101926021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=90221101926034&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8787.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1491","sourceIdentifier":"cve@mitre.org","published":"1996-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to execute arbitrary commands via a path that points to a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"674066BB-2576-4AAE-B97F-A4470815F1AC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167418994&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/354","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=87602167418994&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1492","sourceIdentifier":"cve@mitre.org","published":"1998-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/348","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2104","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19980502-01-P3030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1493","sourceIdentifier":"cve@mitre.org","published":"1991-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privileges via insecure system calls, (1) pad_$dm_cmd and (2) pad_$def_pfk()."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:apollo_domain_os:*:*:*:*:*:*:*:*","versionEndIncluding":"sr10.3","matchCriteriaId":"976B0F09-89B1-45AA-A8F2-CA473ECDB300"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1991-23.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7158","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1991-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/34","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1494","sourceIdentifier":"cve@mitre.org","published":"1994-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/19950209-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/336","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.tryc.on.ca/archives/bugtraq/1995_1/0614.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2112","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/19950209-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.tryc.on.ca/archives/bugtraq/1995_1/0614.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1495","sourceIdentifier":"cve@mitre.org","published":"1999-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12580","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1792","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1496","sourceIdentifier":"cve@mitre.org","published":"1999-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attempting to execute the target filename as a program, which generates a different error message when the file does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9D796959-61D2-42D5-BF93-1A93AE1392BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/14665","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2277","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/14665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1497","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB3992E3-D0C8-4A48-B4E1-D31B0D79CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"65248233-61A3-4085-8808-6FC2FD87EAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B37214DE-41E8-4DD4-AFBF-E608B88D6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6E11FF5E-9B3D-4818-B091-1286ECF47937"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/39329","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/880","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/39329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1498","sourceIdentifier":"cve@mitre.org","published":"1998-04-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the reply file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/82","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/82","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1499","sourceIdentifier":"cve@mitre.org","published":"1998-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*","matchCriteriaId":"49A7C6F2-F769-447A-8C8B-9002BD6FBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:*","matchCriteriaId":"BB79EDA4-9B2C-4C4C-A5DE-CB8C6EB00BDC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8966","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/80","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/8966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/80","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1500","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:2.3:*:*:*:*:*:*:*","matchCriteriaId":"BCA7F1F4-1C43-4196-93E8-D38DCB8624B7"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93880357530599&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/733","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=93880357530599&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1501","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing system calls, which allows local users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89217373930054&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/70","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/71","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=89217373930054&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/70","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/71","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1502","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake:1.9:*:*:*:*:*:*:*","matchCriteriaId":"61028BF2-6AF9-4145-B096-DA93E3197040"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89205623028934&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/68","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/69","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=89205623028934&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/68","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/69","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1503","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nfr:nfr:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9C2B2622-BCD5-4B08-B153-22FEAC6D89EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfr:nfr:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F465E2E8-5B0F-40E7-A05B-620251B69DB4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/63","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/63","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1504","sourceIdentifier":"cve@mitre.org","published":"1998-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:stalker_internet_mail_server:1.6:*:*:*:*:*:*:*","matchCriteriaId":"014D31E5-50A1-41DE-BC8B-A9C7744D3D82"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/8951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/62","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/8951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/62","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1505","sourceIdentifier":"cve@mitre.org","published":"1998-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quakeworld:2.10:*:*:*:*:*:*:*","matchCriteriaId":"168BF639-B9D2-4994-948E-D10365797C10"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=89200537415923&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/60","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=89200537415923&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/60","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1506","sourceIdentifier":"cve@mitre.org","published":"1990-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDE2EAC5-0657-48FD-B4F8-D2DB6AABAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2839042D-7706-4059-B069-72E36297ECEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3791C6C1-2B30-4746-B4D5-A728914C3589"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C25D2DE-7ED7-47E3-A49F-1F42B57500CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5FF99415-1F8D-4926-BB55-240B1F116800"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"27C5561B-F8AE-4AD2-BD1C-E9089F315277"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-90.01.sun.sendmail.vulnerability","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-90.01.sun.sendmail.vulnerability","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1507","sourceIdentifier":"cve@mitre.org","published":"1993-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5955AC0-3036-4943-B6BD-52DD3E039089"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1psr_a:*:*:*:*:*:*:*","matchCriteriaId":"FF90C17C-5B10-45D4-8296-D00EAFA1EB8E"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1993-03.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/59","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/521","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/59","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1508","sourceIdentifier":"cve@mitre.org","published":"1999-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:tek:phaser_network_printer_740:*:*:*:*:*:*:*:*","matchCriteriaId":"92CD72BA-2587-4A2E-A093-A8312400B747"},{"vulnerable":true,"criteria":"cpe:2.3:h:tek:phaser_network_printer_750:*:*:*:*:*:*:*:*","matchCriteriaId":"330E2C4E-17A7-425A-ABE0-2B31FA023223"},{"vulnerable":true,"criteria":"cpe:2.3:h:tek:phaser_network_printer_750dp:*:*:*:*:*:*:*:*","matchCriteriaId":"EE99F094-977A-4B57-A04D-7A710D708390"},{"vulnerable":true,"criteria":"cpe:2.3:h:tek:phaser_network_printer_840:*:*:*:*:*:*:*:*","matchCriteriaId":"A1442E6F-2231-4511-B94D-7FFA5B35FADF"},{"vulnerable":true,"criteria":"cpe:2.3:h:tek:phaser_network_printer_930:*:*:*:*:*:*:*:*","matchCriteriaId":"A91B124E-241C-481B-88D7-9ACB8EC0A956"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94286041430870&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/806","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94286041430870&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1509","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.50:*:*:*:*:*:*:*","matchCriteriaId":"641A86B4-0348-4B14-B79F-E16A98459CA4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94183041514522&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94177470915423&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/773","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94183041514522&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94177470915423&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1510","sourceIdentifier":"cve@mitre.org","published":"1999-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bisonware:bisonware_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"D856B65A-48E8-4175-B10F-EFE6EE788AE4"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=92697301706956&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3234","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=92697301706956&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1511","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artisoft:xtramail:1.11:*:*:*:*:*:*:*","matchCriteriaId":"A30E10F1-7C33-4468-8E32-5B88C38EF3E3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94226003804744&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/791","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3488","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94226003804744&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1512","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amavis:virus_scanner:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2_pre4","matchCriteriaId":"D447C999-F49C-4981-8ED6-67CD7F752F91"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93219846414732&w=2","source":"cve@mitre.org"},{"url":"http://www.amavis.org/ChangeLog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/527","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2349","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93219846414732&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.amavis.org/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1513","sourceIdentifier":"cve@mitre.org","published":"1999-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identifier (.1.3.6.1.4.1.43.10.4.2) that is accessible by a read-only community string, but lists the entire table of community strings, which could allow attackers to conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:superstack_ii_hub:2.10:*:*:*:*:*:*:*","matchCriteriaId":"41314EFC-157C-47BF-9F97-D86E9896A0B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93616983223090&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93616983223090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1514","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:celtech_software:expressfs:2.6:*:*:*:*:*:*:*","matchCriteriaId":"1E50A5CA-AD6A-451E-AF06-CA383FB34ED6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94121377716133&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94130292519646&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/749","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3401","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94121377716133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94130292519646&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/749","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1515","sourceIdentifier":"cve@mitre.org","published":"1999-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages with incorrect sender and recipient addresses, which causes the gateway to continuously try to return the message every 10 seconds."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenfour:tfs_gateway:4.0:*:*:*:*:*:*:*","matchCriteriaId":"02292862-B566-407B-BEAF-CC2E0CC779B2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/613","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1516","sourceIdentifier":"cve@mitre.org","published":"1999-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tenfour:tfs_gateway_smtp:3.2:*:*:*:*:*:*:*","matchCriteriaId":"F38A1780-FA97-4729-9FFA-DD730B639D10"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93677241318492&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93677241318492&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1517","sourceIdentifier":"cve@mitre.org","published":"1999-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94148942818975&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/750","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94148942818975&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1518","sourceIdentifier":"cve@mitre.org","published":"1999-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:x86:*:*:*:*:*","matchCriteriaId":"4319B741-4376-4EA2-9FEB-236C148D1514"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93207728118694&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/526","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2351","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93207728118694&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1519","sourceIdentifier":"cve@mitre.org","published":"1999-11-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gene6:g6_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A93EE9-255E-499A-ABED-E9E94409AB39"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94286244700573&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/805","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3513","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94286244700573&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1520","sourceIdentifier":"cve@mitre.org","published":"1999-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A configuration problem in the Ad Server Sample directory (AdSamples) in Microsoft Site Server 3.0 allows an attacker to obtain the SITE.CSC file, which exposes sensitive SQL database information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92647407227303&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/256","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2270","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92647407227303&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1521","sourceIdentifier":"cve@mitre.org","published":"1999-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computalynx:cmail:2.3sp2:*:*:*:*:*:*:*","matchCriteriaId":"60A01A6F-35E8-408C-B772-4DF4C6A3043C"},{"vulnerable":true,"criteria":"cpe:2.3:a:computalynx:cmail:2.4:*:*:*:*:*:*:*","matchCriteriaId":"D0A15E1A-0099-4F25-A0FF-0AE55CB627D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93720402717560&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94121824921783&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/633","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2240","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93720402717560&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94121824921783&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1522","sourceIdentifier":"cve@mitre.org","published":"1999-10-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and referer tags in RXML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roxen:roxen_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.11","matchCriteriaId":"37737BF2-0E4D-4D2F-B5E9-A355FC9C6426"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93942579008408&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93942579008408&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1523","sourceIdentifier":"cve@mitre.org","published":"1999-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:*:*:*:*:*:*:*:*","matchCriteriaId":"83D8ABA8-038A-48E2-B2E4-796BDF2E2BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9F5F4F3-A2EC-4F9E-BB96-16F43666F792"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93901161727373&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93941351229256&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1672","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93901161727373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93941351229256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1524","sourceIdentifier":"cve@mitre.org","published":"1999-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature from the network and conduct brute force password guessing, instead of limiting the feature to the serial console port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:flowpoint:flowpoint_dsl_router:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.8","matchCriteriaId":"DAC4A180-0247-410A-8E6C-158BD81B0893"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93424680430460&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93424680430460&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1525","sourceIdentifier":"cve@mitre.org","published":"1997-03-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText command on a Shockwave movie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:shockwave_flash_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"38CDD5C2-9AC7-4AC7-BFA7-802968687E62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=87602167420670&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1585","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1586","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/460","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=87602167420670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1526","sourceIdentifier":"cve@mitre.org","published":"1999-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:shockwave_flash_plugin:7.0:*:*:*:*:*:*:*","matchCriteriaId":"4E1EDE88-8AF2-4E33-9E9D-526C9D75FC3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1931","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1527","sourceIdentifier":"cve@mitre.org","published":"1999-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, which allows arbitrary remote attackers to access the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:forte:community_1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"B7DF8E6B-3963-48BF-9384-B8F6F34FA4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:netbeans_developer:3.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"7C512F1D-D51D-4C44-B1BF-66801FCBD5EB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94338883114254&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/816","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94338883114254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1528","sourceIdentifier":"cve@mitre.org","published":"1999-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prosoft_engineering:netware_client:5.12:*:*:*:*:*:*:*","matchCriteriaId":"111AD397-9CF0-4B1E-9805-1C5FA85B6A54"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94261444428430&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/794","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94261444428430&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1529","sourceIdentifier":"cve@mitre.org","published":"1999-11-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7A9D4E2E-889B-4233-8887-9CF00A5023A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.23:*:*:*:*:*:*:*","matchCriteriaId":"CEB4744D-EE43-4C45-AFA1-31AF57F4DEDC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94201512111092&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94204166130782&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94210427406568&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94199707625818&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94208143007829&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/55551","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/787","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3465","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94201512111092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94204166130782&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94210427406568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94199707625818&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94208143007829&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/55551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1530","sourceIdentifier":"cve@mitre.org","published":"1999-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94209954200450&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94225629200045&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7764.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/35","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/777","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94209954200450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94225629200045&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7764.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/35","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1531","sourceIdentifier":"cve@mitre.org","published":"1999-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:homepageprint:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"65454C25-8A06-4991-A1E7-843A69EE1591"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94157187815629&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7767.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/763","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94157187815629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7767.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1532","sourceIdentifier":"cve@mitre.org","published":"1999-10-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"B3EE4492-651C-4B65-B905-31D7E8E30E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:3.54:*:*:*:*:*:*:*","matchCriteriaId":"11AA27C0-D579-49E6-8479-D5DFFAC96D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:3.55:*:*:*:*:*:*:*","matchCriteriaId":"26CE0F92-0E43-454D-B996-428FD8A72E11"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94117465014255&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/748","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94117465014255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1533","sourceIdentifier":"cve@mitre.org","published":"1999-11-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D948171A-3B54-462A-8B2E-2C0266A37E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7A9D4E2E-889B-4233-8887-9CF00A5023A7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93846522511387&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/665","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3317","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93846522511387&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1534","sourceIdentifier":"cve@mitre.org","published":"1999-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knox_software:arkeia:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E4C2000A-26CC-4CC6-B2DD-73BD1C57D60C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93837184228248&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/661","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93837184228248&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1535","sourceIdentifier":"cve@mitre.org","published":"1999-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:persits:aspupload:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0.2","matchCriteriaId":"CA4E5553-6629-4AC9-B20E-AA640EDD3512"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93256878011447&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93501427820328&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3291","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93256878011447&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=93501427820328&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1536","sourceIdentifier":"cve@mitre.org","published":"1999-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":".sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acushop:salesbuilder:2.6:*:*:*:*:*:*:*","matchCriteriaId":"6435C1BD-6301-4A3B-8E32-C2CCC82194CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93347785827287&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13557","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/560","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93347785827287&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1537","sourceIdentifier":"cve@mitre.org","published":"1999-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via SSL requests to the HTTPS port for normally unencrypted files, which will cause IIS to perform extra work to send the files over SSL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=93138827329577&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/521","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2352","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=93138827329577&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1538","sourceIdentifier":"cve@mitre.org","published":"1999-01-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict access to the local machine and allows an unauthorized user to gain access to sensitive server information, including the Administrator's password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91638375309890&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=91632724913080&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=91638375309890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=91632724913080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1539","sourceIdentifier":"cve@mitre.org","published":"1999-11-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_net:4.3:*:*:*:*:*:*:*","matchCriteriaId":"EB558CF0-B311-43DF-8ADC-86682B9F8277"},{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_term_plus:4.2d:*:*:*:*:*:*:*","matchCriteriaId":"EBA448CF-183F-4D57-AE64-923DBFFE19AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_term_plus:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F6164706-6261-40C1-884D-1C5193069078"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94225924803704&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94223972910670&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/796","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3491","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94225924803704&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94223972910670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1540","sourceIdentifier":"cve@mitre.org","published":"1999-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cactus_software:shell-lock:*:*:*:*:*:*:*:*","matchCriteriaId":"931780A6-580D-41AA-A0CB-4ADDA1448F26"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93916168802365&w=2","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/1999/shell-lock.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3356","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93916168802365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/1999/shell-lock.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1541","sourceIdentifier":"cve@mitre.org","published":"1999-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cactus_software:shell-lock:*:*:*:*:*:*:*:*","matchCriteriaId":"931780A6-580D-41AA-A0CB-4ADDA1448F26"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93916168802365&w=2","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/1999/shell-lock.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3358","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93916168802365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/1999/shell-lock.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1542","sourceIdentifier":"cve@mitre.org","published":"1999-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the \"MAIL FROM\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93915641729415&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93923853105687&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3353","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93915641729415&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93923853105687&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1543","sourceIdentifier":"cve@mitre.org","published":"1999-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:7.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B88C10C5-65BC-4628-A430-CB1B8234CDAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B15533E4-98EF-42BD-AA46-C11A287C8461"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:7.6.1:*:*:*:*:*:*:*","matchCriteriaId":"46A397DB-8821-4195-AB2A-9F8BE40A183D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4F1F1D05-4A72-47DA-BEFA-C5643DC03890"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:8.1:*:*:*:*:*:*:*","matchCriteriaId":"CE76DE58-C0BD-4048-AE9F-5297A17099ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:8.5:*:*:*:*:*:*:*","matchCriteriaId":"B228B2A1-8897-4028-9744-B30021CC6ECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:8.6:*:*:*:*:*:*:*","matchCriteriaId":"5CD596AD-EBF4-4A02-88E2-54952FD19E09"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93188174906513&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93736667813924&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/519","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=93188174906513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93736667813924&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1544","sourceIdentifier":"cve@mitre.org","published":"1999-01-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denial of service via a long NLST (ls) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91722115016183&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91722115016183&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1545","sourceIdentifier":"cve@mitre.org","published":"1999-07-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local users to read files that were being edited by other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joes_own_editor:joe:2.8:*:*:*:*:*:*:*","matchCriteriaId":"856FF937-2F8D-4B09-9B51-8F17FEB03DBF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93216103027827&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93226771401036&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93216103027827&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93226771401036&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1546","sourceIdentifier":"cve@mitre.org","published":"1999-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable and world-writable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:navio_nc_browser:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3423E98F-A223-4D71-8F8B-B1CEC011B6B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12217","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1547","sourceIdentifier":"cve@mitre.org","published":"1999-11-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_listener:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21A69B8E-6681-40A2-B90C-C74E3E72C0C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94359982417686&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94390053530890&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/841","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94359982417686&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94390053530890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1548","sourceIdentifier":"cve@mitre.org","published":"1999-11-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cabletron:smartswitch_router_8000_firmware:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E9F9727-4F67-411E-8697-09B572D6EB64"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_Cabletron.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/821","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_Cabletron.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1549","sourceIdentifier":"cve@mitre.org","published":"1999-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a \"secure\" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lynx_project:lynx:2.7:*:*:*:*:*:*:*","matchCriteriaId":"5F143511-3727-4D4A-89A3-226AC46394E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:lynx_project:lynx:2.8:*:*:*:*:*:*:*","matchCriteriaId":"D629A2AF-397E-4893-BE86-D396EE88482A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94286509804526&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/804","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94286509804526&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1550","sourceIdentifier":"cve@mitre.org","published":"1999-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the \"file\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:f5:tmos:2.0:*:*:*:*:*:*:*","matchCriteriaId":"119C2CB6-23C5-40B2-805C-E48B4A7FDBF1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94217006208374&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94217879020184&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94225879703021&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7771.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/778","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=94217006208374&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94217879020184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94225879703021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7771.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1551","sourceIdentifier":"cve@mitre.org","published":"1999-03-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92038879607336&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/505","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1898","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92038879607336&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1552","sourceIdentifier":"cve@mitre.org","published":"1994-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.5","matchCriteriaId":"AEC519E8-F10E-4B51-A7AB-BF4109F91393"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"}]}]}],"references":[{"url":"http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/358","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1553","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The authors were notified of this problem and it was fixed in devel-release 0.99.7.","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xcmail:xcmail:0.99.6:*:*:*:*:*:*:*","matchCriteriaId":"F648C777-04FD-4F93-BE0F-B1A214BA63DF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/12730","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/311","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/12730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1554","sourceIdentifier":"cve@mitre.org","published":"1990-10-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*","matchCriteriaId":"41D0212C-EA41-4DF3-9A93-4559545BCD7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3567046C-FE3F-424D-A1B0-D7A43D00B79F"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1990-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/3164.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/13","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1990-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/3164.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1555","sourceIdentifier":"cve@mitre.org","published":"1998-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with \"EVERYONE FULL CONTROL\" permissions, which allows local users to cause Inoculan's antivirus update feature to install a Trojan horse dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cheyenne:inoculan_anti-virus_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"D6EED70A-2454-49B0-8F1B-11F08F35ECC3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/9515","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/106","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/9515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1556","sourceIdentifier":"cve@mitre.org","published":"1998-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 6.5 uses weak encryption for the password for the SQLExecutiveCmdExec account and stores it in an accessible portion of the registry, which could allow local users to gain privileges by reading and decrypting the CmdExecAccount value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"08CB788D-CFEC-4F8B-9158-8A15319FAB49"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=90222453431645&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/109","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7354","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=90222453431645&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1558","sourceIdentifier":"cve@mitre.org","published":"1998-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digital:digital_openvms:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4D773082-EEC5-489D-93BB-EB3236B72FE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:digital:digital_openvms_axp:7.1:*:*:*:*:*:*:*","matchCriteriaId":"9221659C-04A7-4051-A8B4-F54EE4BEE497"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/i-071a.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7151.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/161","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/i-071a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7151.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1559","sourceIdentifier":"cve@mitre.org","published":"1999-03-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, which locks other users out of the switch because it only supports one session at a time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:omniswitch:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.4","matchCriteriaId":"E4EF8121-C699-4F9C-A320-C13C444B2730"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92299263017061&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2064","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92299263017061&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1560","sourceIdentifier":"cve@mitre.org","published":"1999-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the Tiger user, usually root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tamu:tiger:*:*:*:*:*:*:*:*","matchCriteriaId":"E7122C69-8C6A-452F-BAAF-B6DE2695F14C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93252050203589&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2369","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93252050203589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1561","sourceIdentifier":"cve@mitre.org","published":"1999-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.9.7:*:win32:*:*:*:*:*","matchCriteriaId":"BBF1B598-875A-4DF0-B1B7-059CE37DC05D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/24852","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/24852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1562","sourceIdentifier":"cve@mitre.org","published":"1999-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file."},{"lang":"es","value":"El cliente de FTP gFTP versión 1.13, y otras versiones anteriores a 2.0.0 almacenan contraseñas en texto plano en (1) la ventana de registro(log) o (2) en un fichero de registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gftp:ftp_client:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"CA11E0CC-8164-4D79-9F4D-BC49C2BC6611"},{"vulnerable":true,"criteria":"cpe:2.3:a:gftp:ftp_client:1.13:*:*:*:*:*:*:*","matchCriteriaId":"FF5F91F2-4399-422C-BE61-36B9D9FA6045"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-084","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/26915","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3446","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/26915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1563","sourceIdentifier":"cve@mitre.org","published":"2000-10-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nachuatec:d435:*:*:*:*:*:*:*:*","matchCriteriaId":"1A8CAB1E-A05C-4582-88F7-7E1937A0DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:h:nachuatec:d445:*:*:*:*:*:*:*:*","matchCriteriaId":"08D17E58-ED9F-405F-AE82-4B53127E1766"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/30849","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/35075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/30849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/35075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1564","sourceIdentifier":"cve@mitre.org","published":"1999-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/26166","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/26166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1565","sourceIdentifier":"cve@mitre.org","published":"1999-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:earl_hood:man2html:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"346E204C-CD6D-4CE1-97FF-699C45A08378"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"http://www.osvdb.org/6291","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/24784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/24784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1566","sourceIdentifier":"cve@mitre.org","published":"1999-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:iparty:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2","matchCriteriaId":"4B7BB77B-6442-4763-97D9-AAC73BD5C097"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/13600","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/13600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1567","sourceIdentifier":"cve@mitre.org","published":"1999-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb.exe and (2) ttcgi.exe by connecting to port 99 and disconnecting without sending any data."}],"vendorComments":[{"organization":"Seapine Software","comment":"This issue was originally reported on 3/8/1999 and Seapine fixed the issue on 3/23/1999. This fix became available with the release of TestTrack Workgroup 1.8.  We would also like to note that the issue existed in the older TestTrack Workgroup product, which was discontinued in 2002.  This problem never existed in the TestTrack Pro product.","lastModified":"2010-07-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seapine_software:testtrack:*:*:*:*:*:*:*:*","matchCriteriaId":"DEF95D4B-F5F1-4655-A617-3071E01904FC"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9903&L=NTBUGTRAQ&P=R1215","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9906&L=NTBUGTRAQ&P=R1680","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1948","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9903&L=NTBUGTRAQ&P=R1215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9906&L=NTBUGTRAQ&P=R1680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1568","sourceIdentifier":"cve@mitre.org","published":"1999-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp:ncftpd_server:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.1","matchCriteriaId":"3D72A5C7-F7F3-41D4-A909-DBBD0B00C05E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=91981352617720&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/archive/1/12699","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1833","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=91981352617720&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/archive/1/12699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-1999-1569","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake:1.9:*:*:*:*:*:*:*","matchCriteriaId":"61028BF2-6AF9-4145-B096-DA93E3197040"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=90221101925989&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=91012172524181&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/197268","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3051","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6871","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=90221101925989&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=91012172524181&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/197268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1570","sourceIdentifier":"cve@mitre.org","published":"2002-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C63D4FCE-5416-4DE2-8E9A-5BF057673118"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/CSSA-2002-SCO.17.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102098949103708&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/27074","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8989.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4089","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/CSSA-2002-SCO.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102098949103708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/27074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8989.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1571","sourceIdentifier":"cve@mitre.org","published":"1999-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B3D78B5D-DE20-431B-859D-81E5751EA633"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/sse/security_bulletins/SB-99.17c","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93762097815861&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94053017801639&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94183363719024&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102098949103708&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/1843","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/27074","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8989.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/643","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/sse/security_bulletins/SB-99.17c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://stage.caldera.com/pub/security/sse/sse037c/sse037c.ltr","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93762097815861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94053017801639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94183363719024&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102098949103708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/1843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/27074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8989.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1572","sourceIdentifier":"cve@mitre.org","published":"1996-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Fixed in rev 1.3 of cpio/main.c.","cveTags":[],"descriptions":[{"lang":"en","value":"cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files using the -O (archive) or -F options, which creates the files with mode 0666 and allows local users to read or overwrite those files."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"3528DABD-B821-4D23-AE12-614A9CA92C46"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:cs2.1:*:*:*:*:*:*:*","matchCriteriaId":"B5B3DB31-3998-4B75-A972-0F2675ACCA2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:cs3.0:*:*:*:*:*:*:*","matchCriteriaId":"37145402-6EC5-4700-8863-CE563A4F37F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"F9440B25-D206-4914-9557-B5F030890DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E9933557-3BCA-4D92-AD4F-27758A0D3347"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"10A60552-15A5-4E95-B3CE-99A4B26260C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.10:*:*:*:*:*:*:*","matchCriteriaId":"C62EF915-CA7C-4D75-BC67-E015772BB9CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110763404701519&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14357","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17063","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17532","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-212.pdf","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-664","source":"cve@mitre.org"},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:032","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-073.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-080.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-806.html","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2005/0003/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19167","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10888","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110763404701519&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/14357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-212.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/1391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-806.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2005/0003/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1573","sourceIdentifier":"cve@mitre.org","published":"1999-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in the \"r-cmnds\" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.auscert.org.au/render.html?it=490","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/j-022.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/13217","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/1471","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7860","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5550","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/j-022.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/13217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/1471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1574","sourceIdentifier":"cve@mitre.org","published":"1998-07-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via \"long input strings.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"92B77367-8BF2-4E68-A7F1-D0780E102CCA"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX79909&apar=only","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/182777","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7867","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IX79909&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/182777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1575","sourceIdentifier":"cve@mitre.org","published":"1999-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as \"Safe for Scripting,\" which allows remote attackers to create and modify files and execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/23412","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/24839","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/26924","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/41408","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/9162","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7097","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/23412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/24839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/26924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/41408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/9162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1576","sourceIdentifier":"cve@mitre.org","published":"1999-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F509566A-6D4A-40C0-8A16-F8765C5DCAAF"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/25919","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/666","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3318","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/25919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1577","sourceIdentifier":"cve@mitre.org","published":"1999-10-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/29795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3314","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/29795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1578","sourceIdentifier":"cve@mitre.org","published":"1999-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/37556","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/671","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3311","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/37556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/28719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1579","sourceIdentifier":"cve@mitre.org","published":"2000-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B242366","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/3062","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7107","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B242366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/3062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1580","sourceIdentifier":"cve@mitre.org","published":"1995-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5.59:*:*:*:*:*:*:*","matchCriteriaId":"5DFC5B8B-9102-46A9-9BD3-5CC0B671383F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5.61:*:*:*:*:*:*:*","matchCriteriaId":"51BC02ED-17B1-44B3-97DB-F626A2BD2524"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5.65:*:*:*:*:*:*:*","matchCriteriaId":"EF58EBCB-5735-4569-957D-C37CC38F0823"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4jl:*:*:*:*:*:*:*","matchCriteriaId":"44F62CC9-2145-4801-9C3E-4D7232E6BD68"}]}]}],"references":[{"url":"http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.auscert.org.au/render.html?it=1853&cid=1978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/3278","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7829","source":"cve@mitre.org"},{"url":"http://www.alw.nih.gov/Security/8lgm/8lgm-Advisory-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.auscert.org.au/render.html?it=1853&cid=1978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-95.11.sun.sendmail-oR.vul","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/3278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1581","sourceIdentifier":"cve@mitre.org","published":"1997-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Simple Network Management Protocol (SNMP) agent (snmp.exe) for Windows NT 4.0 before Service Pack 4 allows remote attackers to cause a denial of service (memory consumption) via a large number of SNMP packets with Object Identifiers (OIDs) that cannot be decoded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"}]}]}],"references":[{"url":"http://support.microsoft.com/kb/q178381/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/4923","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8231","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/kb/q178381/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/4923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1582","sourceIdentifier":"cve@mitre.org","published":"1998-07-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"By design, the \"established\" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"A9C63DA6-1FBC-431A-9D8A-66EA93225294"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/pixest-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/6733","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8052","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/pixest-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/6733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1583","sourceIdentifier":"cve@mitre.org","published":"1999-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY02120&apar=only","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/872443","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8031","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY02120&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/872443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1584","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openwindows:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC47C0A0-8A56-4869-9063-D48DBA3FEABC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1993-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-1993-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-1999-1585","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-22-00124-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1586","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92B19A06-832D-4974-9D08-2CE787228592"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E3A07C67-66FB-4ECF-BECB-C2BE72A80F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3c:*:*:*:*:*:*:*","matchCriteriaId":"915D5897-B5FF-4F26-936E-9BAEF2604A86"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1995-12.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/g-02.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/498","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1995-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/g-02.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1587","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/19426","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1015833","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102215-1","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/24200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19662","source":"cve@mitre.org"},{"url":"http://www.sunmanagers.org/archives/1996/1383.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/1123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25460","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1015833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102215-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/24200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sunmanagers.org/archives/1996/1383.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/1123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1588","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with \"NLPS:002:002:\" to the listen (aka System V listener) port, TCP port 2766."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"}]}]}],"references":[{"url":"http://lsd-pl.net/files/get?SOLARIS/solx86_nlps_server","source":"cve@mitre.org"},{"url":"http://security-protocols.com/sploits/unsorted_exploits/nlps_server.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2319","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lsd-pl.net/files/get?SOLARIS/solx86_nlps_server","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-protocols.com/sploits/unsorted_exploits/nlps_server.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/nlps_server.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-1999-1589","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"73CE931A-1500-4450-B65A-591CAA3225AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5F40A32B-3EF8-41D4-B6EC-3DC82D550365"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"28B1C99E-D05A-4778-8650-39B63CC8B2F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CE321D29-3312-4F22-B930-1B119DA4BD27"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1992-10.html","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/357","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-1992-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-1999-1590","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via \"..\" sequences in the image parameter, a different vulnerability than CVE-1999-0021."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wwwcount:wwwcount:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D184E2-F799-4274-A7DE-4770CA359C80"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/1997/Oct/0058.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/1997/Oct/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-1999-1591","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not require authentication credentials under certain conditions, which allows remote attackers to bypass authentication requirements, as demonstrated by connecting via Microsoft Visual InterDev 6.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"B10C80B4-4C21-4D91-9A74-B78B6BF9D374"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_interdev:6.0:*:*:*:*:*:*:*","matchCriteriaId":"394EC852-89B9-4246-86DB-D27A38ED29F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00276.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00277.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/190","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00276.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-1999-1592","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.  NOTE: this might overlap CVE-1999-0129."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:4.1.3u1:*:*:*:*:*:*:*","matchCriteriaId":"FD1BA107-F2D3-4F13-82EC-4576C429E3C1"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:5:*:*:*:*:*:*:*","matchCriteriaId":"7AFADCBA-DB24-451F-9E1D-FBBEE41C5D52"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-22-00159-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/243","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-22-00159-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2000-0001","sourceIdentifier":"cve@mitre.org","published":"1999-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealMedia server allows remote attackers to cause a denial of service via a long ramgen request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE671A54-2E76-467E-8945-10982B79F4CE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0002","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zbsoft:zbserver:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0A92DFC9-A26E-418B-B1BC-565B27C81795"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94598388530358&w=2","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/889","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=36B0596E.8D111D66%40teleline.es","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94598388530358&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=36B0596E.8D111D66%40teleline.es","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0003","sourceIdentifier":"cve@mitre.org","published":"1999-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","matchCriteriaId":"FAD1D156-6B19-4185-A42C-5FE2E7A5545C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94908470928258&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94908470928258&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0004","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zbsoft:zbserver:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0A92DFC9-A26E-418B-B1BC-565B27C81795"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94606572912422&w=2","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94606572912422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9912&L=NTBUGTRAQ&P=R3556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0005","sourceIdentifier":"cve@mitre.org","published":"1999-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX aserver program allows local users to gain privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:7.00:*:*:*:*:*:*:*","matchCriteriaId":"903312B4-BE2F-4170-AA8A-2802E2554662"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:7.02:*:*:*:*:*:*:*","matchCriteriaId":"4E21C6EC-D15D-487B-B2FA-BF32D9B8EA79"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:7.04:*:*:*:*:*:*:*","matchCriteriaId":"DC664E65-5C9C-4796-86E5-A0B2539ED793"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:7.06:*:*:*:*:*:*:*","matchCriteriaId":"DA3F0D15-D854-4BD0-8590-9C941840BC5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:7.08:*:*:*:*:*:*:*","matchCriteriaId":"23628ED6-1EF9-494F-BBA0-DEC67A6B12E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.00:*:*:*:*:*:*:*","matchCriteriaId":"A573388D-BD8F-48D3-8BA9-E4D11402CA22"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.01:*:*:*:*:*:*:*","matchCriteriaId":"9B172217-D993-4D8C-8E37-4D966D103AAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.02:*:*:*:*:*:*:*","matchCriteriaId":"6973B4FC-8009-4336-BED4-7B032EA1E570"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.04:*:*:*:*:*:*:*","matchCriteriaId":"2777DC9F-683A-4892-B305-4EFEFDDBCCE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.06:*:*:*:*:*:*:*","matchCriteriaId":"D0EB2E93-9774-442C-BB60-E428F53EE6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.07:*:*:*:*:*:*:*","matchCriteriaId":"44521B9A-7796-4E4A-99F0-026D45BDB7B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.08:*:*:*:*:*:*:*","matchCriteriaId":"F489B454-F1ED-4DEA-8248-A97D68611FCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.09:*:*:*:*:*:*:*","matchCriteriaId":"C6296277-D10E-4CAA-96F5-BEB61B4640FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.03:*:*:*:*:*:*:*","matchCriteriaId":"E7FA635E-C0FE-495C-A2BB-D9C30A95FD00"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.06:*:*:*:*:*:*:*","matchCriteriaId":"3194CFA3-F0B3-487A-99C6-1A7DF1EF0586"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.07:*:*:*:*:*:*:*","matchCriteriaId":"035890F7-BF48-4669-812A-1DCBD91A8F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.08:*:*:*:*:*:*:*","matchCriteriaId":"F9AED8F3-2501-444D-8141-37FEE2246747"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.09:*:*:*:*:*:*:*","matchCriteriaId":"10974B0F-DA3A-4E3E-8914-8CEB366E9CC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"C54F7F74-7DD7-431E-AE75-1D1199D63032"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*","matchCriteriaId":"2170549C-80D2-4FF8-AC07-BD4124125B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*","matchCriteriaId":"066D4E93-366F-42D4-B27D-8AF981F5F2AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*","matchCriteriaId":"38E41C26-A086-4C9C-83D8-CB910F4B67F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*","matchCriteriaId":"CFD50216-90AC-480E-A11C-E88E64C6D84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:aserver:*:*:*:*:*:*:*:*","matchCriteriaId":"F978F803-AC52-4856-A86F-CD53E9F6C6D6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:9000:7_800:*:*:*:*:*:*:*","matchCriteriaId":"587A1F2E-EBE3-4349-A859-A2B780C51CC4"}]}]}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5635","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0006","sourceIdentifier":"cve@mitre.org","published":"1999-12-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"strace allows local users to read arbitrary files via memory mapped file names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_kranenburg:strace:*:*:*:*:*:*:*:*","matchCriteriaId":"52BF9814-611A-45A0-9773-3D2DCC3BC93A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"D6ECC079-EBD4-4E01-9CAC-A4FC84F79656"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/39831","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4554","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/39831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0007","sourceIdentifier":"cve@mitre.org","published":"1999-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:pc-cillin:6.0:*:*:*:*:*:*:*","matchCriteriaId":"ABBAA86F-8DE4-4BC8-B295-89CF981C28D0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4491","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0008","sourceIdentifier":"cve@mitre.org","published":"1999-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTPPro allows local users to read sensitive information, which is stored in plain text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1st_choice_software:ftppro:7.5:*:*:*:*:*:*:*","matchCriteriaId":"18FCD28B-908C-4F39-8A74-E7FCD1A4EC61"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0009","sourceIdentifier":"cve@mitre.org","published":"1999-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the \"rm\" program, which allows local users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:optivity_net_architect:2.0:*:*:*:*:*:*:*","matchCriteriaId":"967C31EC-D5EE-46CF-A02E-F4E75B6D1F13"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/907","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0010","sourceIdentifier":"cve@mitre.org","published":"1999-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tony_greenwood:webwho\\+:1.1:*:*:*:*:*:*:*","matchCriteriaId":"41F15172-51F6-46B3-9B95-3E52A8DFD1A6"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0010","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0011","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79C629DD-3F9B-4824-A13C-85B2BDFDF557"}]}]}],"references":[{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/906","source":"cve@mitre.org"},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0012","sourceIdentifier":"cve@mitre.org","published":"1999-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"4F2D54A4-BFAD-4C4E-B356-58FB6B850CBD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/898","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0013","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/909","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0014","sourceIdentifier":"cve@mitre.org","published":"1999-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denial of service in Savant web server via a null character in the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_lamont:savant_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B40F344E-4968-4320-9423-5DC9204839A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/897","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0015","sourceIdentifier":"cve@mitre.org","published":"1999-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CascadeView TFTP server allows local users to gain privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ascend:cascadeview_ux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FBDA4DDC-9DA4-4815-835A-8FFB293AABD2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/910","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0016","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:2.3:*:*:*:*:*:*:*","matchCriteriaId":"BCA7F1F4-1C43-4196-93E8-D38DCB8624B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E35F96E1-E254-4CBA-856A-8772BC31F374"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/730","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0017","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"https://marc.info/?l=bugtraq&m=94580196627059&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=bugtraq&m=94580196627059&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0018","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:wmmon:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"12E1D19A-7891-4F5A-BD17-5C2D8978933A"}]}]}],"references":[{"url":"http://www.osvdb.org/1169","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/885","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0019","sourceIdentifier":"cve@mitre.org","published":"1999-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMail POP3 daemon uses weak encryption, which allows local users to read files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:2006:*:*:*:*:*:*:*","matchCriteriaId":"81B286D0-4168-41FF-AC1F-4E65C3AD7DC0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0020","sourceIdentifier":"cve@mitre.org","published":"1999-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DNS PRO allows remote attackers to conduct a denial of service via a large number of connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:man_and_mice:dns_pro:5.7:*:*:*:*:*:*:*","matchCriteriaId":"793A2A29-826E-4AF4-A823-F0C618012EBB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0020","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0021","sourceIdentifier":"cve@mitre.org","published":"1999-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D3174854-2CC6-42C5-BC53-F64DE247AF77"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0022","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D3174854-2CC6-42C5-BC53-F64DE247AF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:4.6.x:*:*:*:*:*:*:*","matchCriteriaId":"E41E19DD-7BA0-4F03-881D-F7332FFB8E69"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0023","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D3174854-2CC6-42C5-BC53-F64DE247AF77"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:4.6.x:*:*:*:*:*:*:*","matchCriteriaId":"E41E19DD-7BA0-4F03-881D-F7332FFB8E69"}]}]}],"references":[{"url":"http://www.osvdb.org/51","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/881","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/51","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0024","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the \"Escape Character Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246401","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-061","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.acrossecurity.com/aspr/ASPR-1999-11-10-1-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0025","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the \"Virtual Directory Naming\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238606","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8098","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-058","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ238606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0026","sourceIdentifier":"cve@mitre.org","published":"1999-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:wmmon:1.0b2:*:*:*:*:*:*:*","matchCriteriaId":"12E1D19A-7891-4F5A-BD17-5C2D8978933A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94606167110764&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/876","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94606167110764&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0027","sourceIdentifier":"cve@mitre.org","published":"1999-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:network_station_manager:2.0r1:*:*:*:*:*:*:*","matchCriteriaId":"3857682E-352E-45CB-80F4-7C92AD32AA21"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/5381.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/39962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/900","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5381.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/39962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0028","sourceIdentifier":"cve@mitre.org","published":"1999-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:a_mac_os:*:*:*:*:*:*","matchCriteriaId":"35AA9DC0-0694-48FC-8652-831DFAB29226"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"943D5C5C-FC49-4EDE-AE75-A79CFF42208E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"59EB6841-0427-479B-8771-06DF62EE3C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1B26CE22-E730-4247-853E-5E640DB3ECB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CFF390-FF33-45CA-BC96-C6766491C616"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0029","sourceIdentifier":"cve@mitre.org","published":"1999-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94780294009285&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/901","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94780294009285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0030","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0031","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0032","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.osvdb.org/7582","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/878","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0033","sourceIdentifier":"cve@mitre.org","published":"1999-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC14336-CD53-44F7-B271-3C98C016295B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0034","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled \"remember passwords.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0034","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0035","sourceIdentifier":"cve@mitre.org","published":"1999-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"resend command in Majordomo allows local users to gain privileges via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majordomo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.94.4","matchCriteriaId":"41A554BD-EF4B-41AF-AA3B-7C6276C6150D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94780294009285&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/902","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94780294009285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0036","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the \"HTML Mail Attachment\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.5:*:macintosh:*:*:*:*:*","matchCriteriaId":"55EAB232-C39A-4737-85F3-3D727C727F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:macos:*:*:*:*:*","matchCriteriaId":"0C607D22-B01D-4404-9657-0D322CE59B0D"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249082","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-060","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0037","sourceIdentifier":"cve@mitre.org","published":"1999-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majordomo:1.94.4:*:*:*:*:*:*:*","matchCriteriaId":"87D144BA-FE24-4894-BF02-03646750D298"},{"vulnerable":true,"criteria":"cpe:2.3:a:great_circle_associates:majordomo:1.94.5:*:*:*:*:*:*:*","matchCriteriaId":"FE7CCEAA-C667-4201-9986-90FD17EE3F90"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94780294009285&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-005.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/903","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94780294009285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0038","sourceIdentifier":"cve@mitre.org","published":"1999-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glFtpD includes a default glftpd user account with a default password and a UID of 0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.17.2","matchCriteriaId":"A3E9A6FF-24D4-4900-8112-B18679318534"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0039","sourceIdentifier":"cve@mitre.org","published":"1999-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altavista:search_intranet:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"6707B25F-EA7E-4E48-8D5F-E0FB2E22C386"},{"vulnerable":true,"criteria":"cpe:2.3:a:altavista:search_intranet:2.3a:*:*:*:*:*:*:*","matchCriteriaId":"A4E23292-1245-44C6-95DE-D025FD332B83"}]}]}],"references":[{"url":"http://www.osvdb.org/15","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/896","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0040","sourceIdentifier":"cve@mitre.org","published":"1999-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"06212998-AE09-4DA2-9F9C-EBB60BBD7EBB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0041","sourceIdentifier":"cve@mitre.org","published":"1999-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5717CFDB-1070-408F-B769-9C9349316603"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0042","sourceIdentifier":"cve@mitre.org","published":"1999-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:1999-07b:*:*:*:*:*:*:*","matchCriteriaId":"762E296C-385B-4945-8B21-03C74FF9C179"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:1999-07f:*:*:*:*:*:*:*","matchCriteriaId":"4D47465D-2356-4957-9353-A04EA64CD245"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:1999-07g:*:*:*:*:*:*:*","matchCriteriaId":"93EC74A4-8032-4659-AE85-C15A323CC985"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:1999-07h:*:*:*:*:*:*:*","matchCriteriaId":"D1E107C0-90A2-43C2-9598-4646AE3077FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:1999-07i:*:*:*:*:*:*:*","matchCriteriaId":"8C854FD9-4CAE-4CB5-8F9E-BE5462953F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:1999-07m:*:*:*:*:*:*:*","matchCriteriaId":"A7724772-D4C2-4053-97D6-EA8520C08E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:2000-01a:*:*:*:*:*:*:*","matchCriteriaId":"55CDCFC5-4815-4F25-85A4-A3072869D4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:csm:mail_server:2000.8.a:*:*:*:*:*:*:*","matchCriteriaId":"89BEFB57-EB66-41AD-B2D2-69EC3C6B74C7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/895","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0043","sourceIdentifier":"cve@mitre.org","published":"1999-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:camshot:webcam_http_server:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A16C36F1-2CB1-41E6-A12E-E95ACAA5F8AE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0044","sourceIdentifier":"cve@mitre.org","published":"2000-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jgaa:warftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.67b2","matchCriteriaId":"2FD852E0-64EB-404B-8930-37C50EBB4242"},{"vulnerable":true,"criteria":"cpe:2.3:a:jgaa:warftpd:1.70b:*:*:*:*:*:*:*","matchCriteriaId":"8751BED4-80DB-4819-8566-C7143B995825"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/919","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0045","sourceIdentifier":"cve@mitre.org","published":"2000-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0046","sourceIdentifier":"cve@mitre.org","published":"2000-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:0.99b_1.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"55BF15F6-FFF7-4A0D-A2FF-8160AB3D70C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0047","sourceIdentifier":"cve@mitre.org","published":"1999-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:pager:733:*:*:*:*:*:*:*","matchCriteriaId":"694E838D-5513-43D1-9A1B-659E4224B948"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0048","sourceIdentifier":"cve@mitre.org","published":"2000-01-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corel:linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CB5BDE6-F735-461F-B3B9-066A4876AB0A"}]}]}],"references":[{"url":"http://linux.corel.com/support/clos_patch1.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/928","source":"cve@mitre.org"},{"url":"http://linux.corel.com/support/clos_patch1.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0049","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CAFFD8E7-A443-4131-9CFB-67AA9739E6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"}]}]}],"references":[{"url":"http://www.osvdb.org/12022","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/925","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0050","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:spectra:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C7218A9E-7AA1-4536-967B-72B37B03C9C5"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=13976&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/915","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=13976&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0051","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:spectra:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C7218A9E-7AA1-4536-967B-72B37B03C9C5"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=13977&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/916","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=13977&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0052","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*","matchCriteriaId":"667CF388-298D-4B64-9BA5-89D153FFA998"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"F7C765FF-0A3D-4BF4-B236-609658776ACA"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"}]}]}],"references":[{"url":"http://www.l0pht.com/advisories/pam_advisory","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-001.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/913","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/search.php3?type=2&pattern=linux-pam-userhelper","source":"cve@mitre.org"},{"url":"http://www.l0pht.com/advisories/pam_advisory","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/search.php3?type=2&pattern=linux-pam-userhelper","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0053","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"81514AB5-388D-4D13-B63A-C237A502B86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"879AFDCC-B9D8-41EF-85DD-70CC1BD5227C"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/912","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-001","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ246731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0054","sourceIdentifier":"cve@mitre.org","published":"1999-01-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solution_scripts:home_free:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D14F142F-FD23-497D-9080-0F22BF179E0A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/921","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0055","sourceIdentifier":"cve@mitre.org","published":"2000-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/918","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0056","sourceIdentifier":"cve@mitre.org","published":"2000-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6E11FF5E-9B3D-4818-B091-1286ECF47937"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/914","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0057","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3630623B-468C-4E71-9C57-EFF83E5EFA4A"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=13978&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/917","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=13978&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0058","sourceIdentifier":"cve@mitre.org","published":"2000-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:handspring:visor_network_hotsync:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BAEC17D8-DDC9-420A-8CC8-0FA1E2F19FCE"}]}]}],"references":[{"url":"http://www.security-express.com/archives/bugtraq/2000-01/0085.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/920","source":"cve@mitre.org"},{"url":"http://www.security-express.com/archives/bugtraq/2000-01/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0059","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/911","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0060","sourceIdentifier":"cve@mitre.org","published":"1999-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:rover:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0FD726D2-67D8-4511-8C32-86E28791E905"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94633851427858&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94647711311057&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/3765.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/894","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94633851427858&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94647711311057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/3765.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0061","sourceIdentifier":"cve@mitre.org","published":"2000-01-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/923","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0062","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"46B2B101-676C-4EF3-90FB-7B5D36D1ADF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C49596F-E215-4B70-8397-3C247F509D43"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/922","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000104222219.B41650%40schvin.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000104222219.B41650%40schvin.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0063","sourceIdentifier":"cve@mitre.org","published":"2000-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:1.0:*:*:*:*:*:*:*","matchCriteriaId":"74A31F83-CBE4-4CCF-A482-3FA076D6EFA7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0064","sourceIdentifier":"cve@mitre.org","published":"2000-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:1.0:*:*:*:*:*:*:*","matchCriteriaId":"74A31F83-CBE4-4CCF-A482-3FA076D6EFA7"}]}]}],"references":[{"url":"http://www.osvdb.org/7583","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/938","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0065","sourceIdentifier":"cve@mitre.org","published":"2000-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avtronics:inetserv:3.0:*:*:*:*:*:*:*","matchCriteriaId":"24C3634B-FD67-441D-A0C9-C274B5DB4409"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0066","sourceIdentifier":"cve@mitre.org","published":"2000-01-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.3.18:*:*:*:*:*:*:*","matchCriteriaId":"C1D46829-3A28-49AC-9D19-7EFFAE6E55D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"356B3E87-68AD-41F9-A008-D93FFEF536E0"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0066","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0067","sourceIdentifier":"cve@mitre.org","published":"2000-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybercash:merchant_connection_kit:3.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C02AF175-0F6C-4FEC-98C2-3B7F157BAA22"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0068","sourceIdentifier":"cve@mitre.org","published":"1999-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:inbusiness_email_station:*:*:*:*:*:*:*:*","versionEndIncluding":"1.04","matchCriteriaId":"C7E17127-358C-45D7-89B3-7A41401BEA07"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94704437920965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94704437920965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0069","sourceIdentifier":"cve@mitre.org","published":"2000-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The recover program in Solstice Backup allows local users to restore sensitive files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solstice_backup:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7A1F23BD-2517-4074-8DD6-7EC24A4F402C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0070","sourceIdentifier":"cve@mitre.org","published":"2000-01-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka \"Spoofed LPC Port Request.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247869","source":"cve@mitre.org"},{"url":"http://www.bindview.com/security/advisory/adv_NtImpersonate.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/934","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/search.php3?type=2&pattern=nt-spoofed-lpc-port","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-003","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ247869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bindview.com/security/advisory/adv_NtImpersonate.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/search.php3?type=2&pattern=nt-spoofed-lpc-port","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0071","sourceIdentifier":"cve@mitre.org","published":"2000-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94770020309953&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94780058006791&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94770020309953&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94780058006791&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0072","sourceIdentifier":"cve@mitre.org","published":"2000-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_power_solutions:visual_casel:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D74D20B7-F524-407D-A378-F60D27329939"},{"vulnerable":true,"criteria":"cpe:2.3:a:computer_power_solutions:visual_casel:3.5:*:*:*:*:*:*:*","matchCriteriaId":"2599A5C4-40C2-40FB-A5B1-99546AE56D56"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94823061421676&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/3867.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/937","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94823061421676&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/3867.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0073","sourceIdentifier":"cve@mitre.org","published":"1999-11-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249973","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/search.php3?type=2&pattern=win-malformed-rtf-control-word","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-005","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/search.php3?type=2&pattern=win-malformed-rtf-control-word","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0074","sourceIdentifier":"cve@mitre.org","published":"2000-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerscripts:plusmail:*:*:*:*:*:*:*:*","matchCriteriaId":"51607815-55E7-41B4-B167-FE29CA929971"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0075","sourceIdentifier":"cve@mitre.org","published":"2000-01-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HELO, MAIL FROM, RCPT TO, and DATA commands in the same session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nosque:msgcore:1.9:*:*:*:*:*:*:*","matchCriteriaId":"99F4B15E-DC33-4023-9C6B-302BAB1035B5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/930","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0076","sourceIdentifier":"cve@mitre.org","published":"1999-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:berkeley:nvi:1.7x:*:*:*:*:*:*:*","matchCriteriaId":"B78598E7-08B7-4A4C-8324-ED57E2F12FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94709988232618&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1439","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94709988232618&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0077","sourceIdentifier":"cve@mitre.org","published":"2000-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"}]}]}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5549","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0078","sourceIdentifier":"cve@mitre.org","published":"2000-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"}]}]}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5728","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0079","sourceIdentifier":"cve@mitre.org","published":"2000-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:cern_httpd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D2681211-5D4C-4D59-9FA5-81D6F946572B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/936","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0080","sourceIdentifier":"cve@mitre.org","published":"2000-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX techlibss allows local users to overwrite files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94757136413681&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/931","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94757136413681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0081","sourceIdentifier":"cve@mitre.org","published":"2000-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. j&#x41;vascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:hotmail:*:*:*:*:*:*:*:*","matchCriteriaId":"4E5C1DBF-21AF-4A3E-8A4A-42CCD6DD40C3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0081","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0082","sourceIdentifier":"cve@mitre.org","published":"2000-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:webtv:*:*:*:*:*:*:*:*","matchCriteriaId":"3BB38E8E-B3B2-4C2F-84E7-D52BFD5E9236"}]}]}],"references":[{"url":"http://net4tv.com/voice/story.cfm?StoryID=1823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wired.com/news/technology/0%2C1282%2C33420%2C00.html","source":"cve@mitre.org"},{"url":"http://net4tv.com/voice/story.cfm?StoryID=1823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wired.com/news/technology/0%2C1282%2C33420%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0083","sourceIdentifier":"cve@mitre.org","published":"2000-04-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/advisory.html?id=2031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0084","sourceIdentifier":"cve@mitre.org","published":"2000-01-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CuteFTP uses weak encryption to store password information in its tree.dat file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:cuteftp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.x","matchCriteriaId":"12F2BB52-BA26-407A-AFCF-52B134BB9AB3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0084","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0085","sourceIdentifier":"cve@mitre.org","published":"2000-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:hotmail:*:*:*:*:*:*:*:*","matchCriteriaId":"4E5C1DBF-21AF-4A3E-8A4A-42CCD6DD40C3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0085","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0086","sourceIdentifier":"cve@mitre.org","published":"2000-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84DF8888-9F75-4C19-AC1D-96F401764997"},{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FCF66FA3-74FC-49DB-BCF4-11E1D8339F57"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/935","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0087","sourceIdentifier":"cve@mitre.org","published":"2000-01-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","matchCriteriaId":"DA2CA2F8-260C-4559-BF24-3E321CEAE93F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94790377622943&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/4385.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94790377622943&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/4385.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0088","sourceIdentifier":"cve@mitre.org","published":"2000-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the \"Malformed Conversion Data\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:97:*:*:ja:*:*:*:*","matchCriteriaId":"0F00A805-2967-45B2-9721-B8745AAACDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:97:*:*:ko:*:*:*:*","matchCriteriaId":"E3B19E1B-FA9E-4381-BBC0-8C1082F06FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:97:*:*:zh:*:*:*:*","matchCriteriaId":"A0D80961-D483-4213-80BF-8D7662A11501"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*","matchCriteriaId":"757EC6C1-F5E2-45CD-9F7F-7760ECEDC842"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*","matchCriteriaId":"59B1B68C-86F1-4FA4-9F82-3E8761ED1E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*","matchCriteriaId":"716DDA05-D094-4837-852C-0511CDDD5ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_converter_pack:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"BAC56810-E3C8-453E-A2B3-B6D0E62B3BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:97:*:*:ja:*:*:*:*","matchCriteriaId":"D745459E-1C5B-46D2-BD3D-6AA63F15EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:97:*:*:ko:*:*:*:*","matchCriteriaId":"421DE80D-4C7A-4E33-9896-FDA93C0FBF94"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:97:*:*:zh:*:*:*:*","matchCriteriaId":"46B0E734-C47C-443F-8C73-93EC37DD4567"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:ja:*:*:*:*","matchCriteriaId":"FF8DA1F4-51F5-4701-BA23-6A77057DD420"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:ko:*:*:*:*","matchCriteriaId":"FB88D5F8-4D7A-4D77-9F05-4910405E0A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:zh:*:*:*:*","matchCriteriaId":"C8CCDE97-AE42-4BB8-9947-5BBD81DA6CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:ja:*:*:*:*","matchCriteriaId":"1695DE97-5840-4670-A891-F0E9F78A4FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:ko:*:*:*:*","matchCriteriaId":"C4D4CC44-E1EC-4C6E-A341-DFC6A2C1BE63"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:zh:*:*:*:*","matchCriteriaId":"300D969F-7854-445D-8731-7B82E0C9DA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*","matchCriteriaId":"3B3A5E8E-CCE2-49AF-BAEB-549E3C67430B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:ko:*:*:*:*","matchCriteriaId":"7159E6F4-7AD3-43F1-ADB1-A563CD697E54"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:zh:*:*:*:*","matchCriteriaId":"81B3F4F2-D2A3-47A9-838B-E49349079C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:ja:*:*:*:*","matchCriteriaId":"DEAF9432-B59D-43AB-B42D-3CDA2192ED6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:ko:*:*:*:*","matchCriteriaId":"0E2FB09D-03F1-464F-A302-0B32E4633C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:zh:*:*:*:*","matchCriteriaId":"413AAFEE-51E4-41F6-A63A-E2018BFB3002"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/946","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0089","sourceIdentifier":"cve@mitre.org","published":"2000-02-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the \"RDISK Registry Enumeration File\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/947","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-004","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ249108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0090","sourceIdentifier":"cve@mitre.org","published":"2000-01-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AFBF029A-103D-4BB6-B037-25EC2224DF34"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D00C4D90-3697-4F3F-8FFF-FE63F3AD0DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1:*:*:*:*:*:*:*","matchCriteriaId":"29AA2B37-BF5F-4AC5-844D-34CF56EC621C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"07131E56-53EE-4CE1-A135-050792EA3C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"86334051-8763-4CD9-9480-CAEAE756DFCA"}]}]}],"references":[{"url":"http://www.osvdb.org/1205","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/943","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0091","sourceIdentifier":"cve@mitre.org","published":"2000-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7EE370D9-945E-4DD8-A69C-AED356660732"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D2935241-381C-4EF6-98EE-582C48899124"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"2EBE17B9-F890-4496-9B53-856FBB9F717D"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"7A1342F1-BD91-4C43-918E-3701EDD0A407"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"DDC0A8F8-9244-4D7A-A204-903F53FE29C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"16D9ADFA-A94B-49D5-9602-E18E81E0C060"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"99259D6D-2AD8-4EFE-A12B-A69A319E5970"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"82EF0973-3E81-4AE9-A59E-9F18DBEC99F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"0615E738-6FE7-48FD-83C9-FAA147EC9702"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"FA6C3AE1-A219-48DD-A3E0-526C516A1728"}]}]}],"references":[{"url":"http://www.inter7.com/vpopmail/","source":"cve@mitre.org"},{"url":"http://www.inter7.com/vpopmail/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/942","source":"cve@mitre.org"},{"url":"http://www.inter7.com/vpopmail/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.inter7.com/vpopmail/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0092","sourceIdentifier":"cve@mitre.org","published":"2000-01-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BSD make program allows local users to modify files via a symlink attack when the -j option is being used."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:x86:*:*:*:*:*","matchCriteriaId":"E2EE8A19-8AB1-4283-95EA-9EE3C7E5DED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:01.make.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/939","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:01.make.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0093","sourceIdentifier":"cve@mitre.org","published":"2000-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0094","sourceIdentifier":"cve@mitre.org","published":"2000-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-001.txt.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/20760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3995","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-001.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/20760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0095","sourceIdentifier":"cve@mitre.org","published":"2000-01-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2041","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0096","sourceIdentifier":"cve@mitre.org","published":"2000-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1208414-D175-41E2-BCBC-9E5EDBC41FFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"6535E515-B0FF-4FC6-8BCC-AF8EAEDCE099"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta2:*:*:*:*:*:*:*","matchCriteriaId":"6586A031-B6B9-4EC0-B6B7-82BBFA4AA562"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta3:*:*:*:*:*:*:*","matchCriteriaId":"E5364920-D969-4585-A822-E26846CF7BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta4:*:*:*:*:*:*:*","matchCriteriaId":"9781C125-7E2B-41BB-A4B3-2317C3B95CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta5:*:*:*:*:*:*:*","matchCriteriaId":"68CE4256-F1D2-49A5-B7D7-25FC9111BB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta6:*:*:*:*:*:*:*","matchCriteriaId":"91310B66-9AAC-44EC-A0CC-3455DB069C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta7:*:*:*:*:*:*:*","matchCriteriaId":"ABA8F10C-8C06-45B6-898E-4592FE903CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta8:*:*:*:*:*:*:*","matchCriteriaId":"9DE692FF-40D9-4CE5-93A5-04082E281202"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta9:*:*:*:*:*:*:*","matchCriteriaId":"D9C0F200-2DB9-4492-95C8-72772B5EC6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta10:*:*:*:*:*:*:*","matchCriteriaId":"E84B8226-E4DA-4BDE-AC48-9B8999853D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta11:*:*:*:*:*:*:*","matchCriteriaId":"DDC2EC10-3396-4C73-A5C5-7280F710A4EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta12:*:*:*:*:*:*:*","matchCriteriaId":"5314989E-4D5D-4A76-A1C1-6B9786142C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta13:*:*:*:*:*:*:*","matchCriteriaId":"A01E055E-9B9F-42AF-A531-0B783DED5AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta14:*:*:*:*:*:*:*","matchCriteriaId":"DAEDEE2A-15DA-4D2D-BF03-5417B0243382"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta15:*:*:*:*:*:*:*","matchCriteriaId":"CB9BBB17-7B0A-4ACD-95DF-D0B1D40F8C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta16:*:*:*:*:*:*:*","matchCriteriaId":"4248800A-6F2D-47EC-A62C-0E89DE89153B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta17:*:*:*:*:*:*:*","matchCriteriaId":"A8249A1D-95D9-4205-9346-3110E250295C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta18:*:*:*:*:*:*:*","matchCriteriaId":"E37B76A4-E760-45B1-90FF-C97327A28A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta19:*:*:*:*:*:*:*","matchCriteriaId":"33430029-28D1-4E4F-B4B7-D2E7EB4D97E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta20:*:*:*:*:*:*:*","matchCriteriaId":"A8C5CDE8-34FB-4AB4-A49D-5D701996CA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta21:*:*:*:*:*:*:*","matchCriteriaId":"48863B32-5742-4FAB-B49D-B6A771F90FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta22:*:*:*:*:*:*:*","matchCriteriaId":"A471EFDD-0618-4294-A1C0-4D37E794E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta23:*:*:*:*:*:*:*","matchCriteriaId":"CF088417-1645-4F40-802D-143433FACE4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta24:*:*:*:*:*:*:*","matchCriteriaId":"6802F665-8457-44C8-A3F0-91B318BE1014"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta25:*:*:*:*:*:*:*","matchCriteriaId":"8EBE0FA1-7BBE-49AA-AA2B-77C60EDA20AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta26:*:*:*:*:*:*:*","matchCriteriaId":"BCA23E68-E974-49A0-BDB0-AFB3A69D271D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta27:*:*:*:*:*:*:*","matchCriteriaId":"14B5D240-F160-4419-AD95-577274D640B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta28:*:*:*:*:*:*:*","matchCriteriaId":"9843924C-1511-489E-A222-C32113DDB080"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0beta29:*:*:*:*:*:*:*","matchCriteriaId":"62F4369F-1ED0-4CCB-ABFE-D402E5A7599B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/948","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0097","sourceIdentifier":"cve@mitre.org","published":"2000-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the \"Malformed Hit-Highlighting Argument\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"}]}]}],"references":[{"url":"http://www.osvdb.org/1210","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/950","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0098","sourceIdentifier":"cve@mitre.org","published":"2000-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0099","sourceIdentifier":"cve@mitre.org","published":"2000-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"86A45194-7ACF-45EE-9542-D8CE3A204584"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1D7893E4-7541-4B35-8C64-AD553C0A4B0F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94848865112897&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94848865112897&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0100","sourceIdentifier":"cve@mitre.org","published":"1999-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"43E8A8EF-B54F-4413-9BC8-A6A479951313"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-012","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/current/0045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0101","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:make-a-store:orderpage:*:*:*:*:*:*:*:*","matchCriteriaId":"FF532D8A-F91F-431D-8BDA-D6B940C5EE41"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0101","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0102","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:salescart:salescart:*:*:*:*:*:*:*:*","matchCriteriaId":"856DF0A7-2342-4847-8503-36F012607C6C"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0102","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0103","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netsmart:smartcart:*:*:*:*:*:*:*:*","matchCriteriaId":"5022F435-F272-45C5-9199-A0E6E611D07F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0104","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_express:shoptron:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4D8F9BDA-C20A-4C4C-B5F9-9DB31B22D07A"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0104","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0105","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0106","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easycart:easycart:*:*:*:*:*:*:*:*","matchCriteriaId":"81DE1CC4-1098-4885-A89B-D1960933DD63"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0106","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0107","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux apcd program allows local attackers to modify arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"}]}]}],"references":[{"url":"http://www.debian.org/security/2000/20000201","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/958","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0108","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intelligent_vending_systems:intellivend:*:*:*:*:*:*:*:*","matchCriteriaId":"0B525A39-332B-4EA0-A9F3-E2DADA2F0C91"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0108","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0109","sourceIdentifier":"cve@mitre.org","published":"2000-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comstock:multicsp:4.2:*:*:*:*:*:*:*","matchCriteriaId":"11668EE3-1CFE-4982-805F-F2F61583D081"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0109","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0110","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baron_consulting_group:websitetool:*:*:*:*:*:*:*:*","matchCriteriaId":"3F4B11E5-E6D7-4221-98F9-FAAB04CB7C21"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0110","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0111","sourceIdentifier":"cve@mitre.org","published":"2000-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avt:rightfax:5.2:*:*:*:*:*:*:*","matchCriteriaId":"46A432E6-2590-4683-B62A-C73F1BD9B584"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/953","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0112","sourceIdentifier":"cve@mitre.org","published":"2000-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:r5:*:*:*:*:*:*","matchCriteriaId":"D3067DBB-FBA1-48E9-9EC8-5A8D74B9F2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:pre_potato:*:*:*:*:*","matchCriteriaId":"2B19ABCB-70F0-450E-9A71-2EE8F2BFB2EE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94973075614088&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/960","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94973075614088&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0113","sourceIdentifier":"cve@mitre.org","published":"2000-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybergen:sygate:2.0:*:*:*:*:*:*:*","matchCriteriaId":"64CE9873-D031-4DC9-8FCA-7AF2E7ADBF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybergen:sygate:3.11:*:*:*:*:*:*:*","matchCriteriaId":"51E74011-4542-4818-AAF6-2AC5682D244D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94934808714972&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94952641025328&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94973281714994&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/952","source":"cve@mitre.org"},{"url":"http://www.sybergen.com/support/fix.htm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94934808714972&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94952641025328&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94973281714994&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sybergen.com/support/fix.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0114","sourceIdentifier":"cve@mitre.org","published":"2000-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0115","sourceIdentifier":"cve@mitre.org","published":"2000-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","matchCriteriaId":"CE9D333C-76E2-4BD9-B98B-5CB96363AB89"}]}]}],"references":[{"url":"https://marc.info/?l=ntbugtraq&m=94881904724731&w=2","source":"cve@mitre.org"},{"url":"https://marc.info/?l=ntbugtraq&m=94881904724731&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0116","sourceIdentifier":"cve@mitre.org","published":"2000-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the \"Strip Script Tags\" restriction by including an extra < in front of the SCRIPT tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"}]}]}],"references":[{"url":"http://www.osvdb.org/1212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/954","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0117","sourceIdentifier":"cve@mitre.org","published":"2000-01-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cobalt_raq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8CEF7BC-2B9A-4383-B6AF-4FFA79DE9C54"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/951","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0118","sourceIdentifier":"cve@mitre.org","published":"1999-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5302613E-F0DD-4B46-884C-49A977FD4147"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"674066BB-2576-4AAE-B97F-A4470815F1AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"445EECD3-2DB9-43D1-B26F-0979A3C02D45"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:alpha:*:*:*:*:*","matchCriteriaId":"07396B95-E434-46C9-A345-27C9EA9BEA26"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:sparc:*:*:*:*:*","matchCriteriaId":"0775CE08-C5AD-4FF7-AEA9-537B1EAE3BDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.3:u1:*:*:*:*:*:*","matchCriteriaId":"D3373737-C6FC-4D19-845C-B0382AE1DC48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.4:*:jl:*:*:*:*:*","matchCriteriaId":"10EC0267-500D-496F-9D88-7F93F7D4A88B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94935300520617&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94935300520617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0119","sourceIdentifier":"cve@mitre.org","published":"1999-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan:*:*:*:*:*:*:*:*","matchCriteriaId":"3B6140F3-9135-4490-A2A2-F8D0A1FEF8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:*","matchCriteriaId":"7A58C09D-72A0-48E1-ABF0-49EBECA5D02B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94936267131123&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94936267131123&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0120","sourceIdentifier":"cve@mitre.org","published":"2000-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:spectra:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C7218A9E-7AA1-4536-967B-72B37B03C9C5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/955","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0121","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the \"Recycle Bin Creation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248399","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/963","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-007","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0122","sourceIdentifier":"cve@mitre.org","published":"2000-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:98:*:*:*:*:*:*:*","matchCriteriaId":"A5F2F998-5866-4DA7-88CF-7987E971947E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*","matchCriteriaId":"D2C6629C-BF53-49A1-B32C-A828CA0A0500"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/470458/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/964","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/470458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0123","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filemaker:filemaker:*:*:pro:*:*:*:*:*","matchCriteriaId":"C2E57AAF-9A43-4039-B333-E788EE678E04"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0124","sourceIdentifier":"cve@mitre.org","published":"2000-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout:2.6.1.6:*:*:*:*:*:*:*","matchCriteriaId":"FDC26E3B-0A5A-4092-A2F9-E6949C1B182A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/965","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0125","sourceIdentifier":"cve@mitre.org","published":"2000-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:*:*:*:*:*:*:*:*","matchCriteriaId":"7320CDBE-43EC-46F7-92BB-729157851A41"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/967","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0126","sourceIdentifier":"cve@mitre.org","published":"2000-01-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0127","sourceIdentifier":"cve@mitre.org","published":"2000-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:webspeed:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CA5B493-3BB1-4847-8055-15B93171EC9B"}]}]}],"references":[{"url":"http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/969","source":"cve@mitre.org"},{"url":"http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412&keywords=security%20Webspeed","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0128","sourceIdentifier":"cve@mitre.org","published":"2000-02-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_beckham:the_finger_server:0.80_beta:*:*:*:*:*:*:*","matchCriteriaId":"F7BBCFD3-60DC-4D6D-BEA9-C47166498B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_beckham:the_finger_server:0.81_beta:*:*:*:*:*:*:*","matchCriteriaId":"39CC38F7-F512-43BC-93D1-0A8ADC9B9E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_beckham:the_finger_server:0.82_beta:*:*:*:*:*:*:*","matchCriteriaId":"A2885CB6-08AD-44EA-A89C-F8B863AB7BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_beckham:the_finger_server:0.83_beta:*:*:*:*:*:*:*","matchCriteriaId":"A2EDE741-9583-471F-B803-046D5FF76C2D"}]}]}],"references":[{"url":"http://www.glazed.org/finger/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7610","source":"cve@mitre.org"},{"url":"http://www.glazed.org/finger/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0129","sourceIdentifier":"cve@mitre.org","published":"2000-02-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0130","sourceIdentifier":"cve@mitre.org","published":"2000-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SCO scohelp program allows remote attackers to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.02a","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94908470928258&w=2","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.02a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=94908470928258&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0131","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jgaa:warftpd:1.66x4s:*:*:*:*:*:*:*","matchCriteriaId":"BD95B797-7A40-4D42-844C-758C742C34D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jgaa:warftpd:1.67.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F294E-DBB2-4406-9CF2-58A9E76C7B50"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94960703721503&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4677","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/966","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94960703721503&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0132","sourceIdentifier":"cve@mitre.org","published":"2000-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:*","matchCriteriaId":"DC2655D3-B360-4F82-B9CE-EECC95E0FAEE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/957","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0133","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:h._nomura:tiny_ftpdaemon:*:*:*:*:*:*:*:*","versionEndIncluding":"0.52","matchCriteriaId":"66FBDC33-1713-49CA-AA58-AD825B32B578"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/961","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0134","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adgrafix_corporation:check_it_out:*:*:*:*:*:*:*:*","matchCriteriaId":"5ADCB606-CF86-4E96-9C28-6A489C1AEA4F"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0134","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0135","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atretail:atretail:*:*:*:*:*:*:*:*","matchCriteriaId":"96CBDA55-DC40-4961-8B5C-057A6D76C570"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0135","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0136","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:*:*:*:*:*:*:*:*","matchCriteriaId":"69D0916B-9E1C-4536-820C-DCB759A48D8B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0137","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cartit:cartit:*:*:*:*:*:*:*:*","matchCriteriaId":"E05B217C-DE60-4B0F-8592-6C758B311147"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0138","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95715370208598&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95722093124322&w=2","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise48.php3","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95715370208598&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=95722093124322&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise48.php3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0139","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"346E073E-72EE-44C6-A24F-39474627F857"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95021326417936&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/982","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95021326417936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0140","sourceIdentifier":"cve@mitre.org","published":"2000-02-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:true_north:internet_anywhere_mail_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"346E073E-72EE-44C6-A24F-39474627F857"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95021326417936&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/980","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95021326417936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0141","sourceIdentifier":"cve@mitre.org","published":"2000-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:*:*:*:*:*:*:*","matchCriteriaId":"109D6BE8-39AD-43A7-B620-DEAA989D809E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-8&msg=20000211224935.A13236%40infomag.ape.relarn.ru","source":"cve@mitre.org"},{"url":"http://www.ultimatebb.com/home/versions.shtml","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-22&msg=NDBBLKOPOLNKELHPDEFKIEPGCAAA.renzo.toma%40veronica.nl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-8&msg=20000211224935.A13236%40infomag.ape.relarn.ru","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ultimatebb.com/home/versions.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2000-0142","sourceIdentifier":"cve@mitre.org","published":"2000-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84DF8888-9F75-4C19-AC1D-96F401764997"},{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"77601D02-02E0-4A19-8B67-3140DDF1DF14"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0143","sourceIdentifier":"cve@mitre.org","published":"2000-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"D4EFC03C-F5A7-4B74-B664-5828763B3E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E9C3330-E163-4699-B7F6-2D9B089E8A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F62C0C54-6BC0-4A8B-8006-F1EEEFAC3699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"011ECCA8-63DD-4FB0-A2F4-B4BAF344242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86A52DB0-B17A-437C-8E3A-0F824B9F88AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8EDDCCD5-76B1-4981-BA9D-0C4702DD3FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6A9E54C6-7003-46B0-85B3-0C2E7E611D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"082C8ECC-CDAF-440B-90D0-A1FE028B03F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7D0AAA72-CAA5-4985-ADD9-1790CE3C66D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C0C2A220-D8AB-4FAD-8048-F2C1764F965F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5010A78A-394E-4196-90CB-5D371C3BD1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E5F6F181-41B1-47D1-A216-194DC4C762EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"D6EEBDAB-AA0D-407B-B8EE-6C33B0423AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"45446BD9-3B03-43B6-B686-F6EACFABD699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"FCE6F492-8E28-4FA1-9BF1-96BAF5D68545"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"41BF66ED-CB08-440E-AC05-A31371B7A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E0EE3216-D8FF-43F0-9329-6676E2CEC250"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9310E12D-1136-4AD6-9678-8ADCD9EE58C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"BBEDF399-58DE-491A-8B51-87E0392FF9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"CBDF2DE8-8559-4BED-80AE-E1420BBF4043"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"23EB8421-76BF-47D1-B294-68412D5E4572"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9560989-5342-4C6B-974F-7D90C467BA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"971835AF-E908-4C74-9DE0-167349138DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"2E0D49C5-54B4-4437-A2D3-3EBFA1D9A3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"926B57D7-009C-4317-ACFB-98551FADC5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0144","sourceIdentifier":"cve@mitre.org","published":"2000-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:700_network_document_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4ADB9B02-6ED7-448D-A409-6A2F56AEFCD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:700_network_document_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"657A10D8-2BBC-4B20-9DB0-D37842C4EC81"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:700_network_document_server:1.11:*:*:*:*:*:*:*","matchCriteriaId":"3982C911-305E-49B4-90C9-CE12584A7C54"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:700_network_document_server:1.12:*:*:*:*:*:*:*","matchCriteriaId":"0AA3DD85-191E-48BE-A46F-8990848F8850"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:700_network_document_server:1.13:*:*:*:*:*:*:*","matchCriteriaId":"86CBA528-BAD0-4848-81B2-281EDEA33DE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:700_network_document_server:1.14:*:*:*:*:*:*:*","matchCriteriaId":"72897C22-B421-496D-8EA4-7B8CB4ED4E68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0034.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/971","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0145","sourceIdentifier":"cve@mitre.org","published":"2000-02-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0146","sourceIdentifier":"cve@mitre.org","published":"2000-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:enhancement_pack:*:*:*:*:*","matchCriteriaId":"E7F809F7-C72F-4869-BE95-EE8BF5F0E111"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/972","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0147","sourceIdentifier":"cve@mitre.org","published":"2000-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.04a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0045.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/973","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.04a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0148","sourceIdentifier":"cve@mitre.org","published":"2000-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/975","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0149","sourceIdentifier":"cve@mitre.org","published":"2000-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5963529B-AC59-4A6E-9A5A-C658C4853092"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D0378E46-61DA-4D8D-97F2-F1377401CF3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"B41474DE-0DE7-4493-B050-307E3CECDECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B7CF7BAB-13BB-474C-B8CA-B6193913D9D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"ED101610-A479-412B-AD20-0A3C1906F2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"FA500577-636F-417D-B728-2551B14CBB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"27932CB0-D66A-41F2-AA81-096B94D5AE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"925A449C-269B-4E3E-93BD-D5FB69ED2ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"1BFE4867-4093-4024-AF75-3580513E01B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"80D7AFB8-4C19-4E4E-9BCE-4C7B45A7BB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D7BD6BD-8945-45FC-909B-853BBD328618"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C9DBE4CC-5AAA-415E-9C2D-5B559377643B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"FF4E0DB8-AE4D-47AA-9815-9AF0590F19E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"9135EE22-7B20-47C4-9B28-8706768E4179"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"980FDE19-37D5-4135-8CAE-D58AAB0FD210"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/977","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3982","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0150","sourceIdentifier":"cve@mitre.org","published":"2000-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"1EEDB9DD-C862-4783-9F96-88836424B298"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.1\\(6b\\):*:*:*:*:*:*:*","matchCriteriaId":"3BD36C4A-4B90-4012-B4A5-6081C413E302"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8198D129-76D0-4983-BFC4-8EC724FE1B6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*","matchCriteriaId":"49566EAC-05AF-4880-8000-351AF538E4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"118CBF59-DAD8-468E-B279-F6359E4624F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7AA2E425-904C-4070-8F5F-B81BCF3147F6"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/328867","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/979","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/328867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0151","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:make:3.77.44:*:*:*:*:*:*:*","matchCriteriaId":"8E7A5639-F2F6-41DE-867E-0178A49C80C0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/981","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0152","sourceIdentifier":"cve@mitre.org","published":"2000-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"690D90A8-E5F4-492D-A338-222CBEB5819A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3DCB9A5D-862A-4266-94D3-385B611A7960"}]}]}],"references":[{"url":"http://www.osvdb.org/7468","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/976","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0153","sourceIdentifier":"cve@mitre.org","published":"1999-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:personal_web_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9E075F89-BC5D-48D8-8CA1-B56C2CAD50F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/989","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000801bf780a%249ad4b2e0%240100007f%40localhost","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000801bf780a%249ad4b2e0%240100007f%40localhost","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0154","sourceIdentifier":"cve@mitre.org","published":"2000-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"http://www.sco.com/security/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/988","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com","source":"cve@mitre.org"},{"url":"http://www.sco.com/security/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0155","sourceIdentifier":"cve@mitre.org","published":"2000-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/993","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0156","sourceIdentifier":"cve@mitre.org","published":"2000-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the \"Image Source Redirect\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://www.osvdb.org/7827","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-009","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3996","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0157","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/992","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-012.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0158","sourceIdentifier":"cve@mitre.org","published":"2000-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.06a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000001bf78af%246d0d47a0%244d2f45a1%40jmagdych.na.nai.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=200002181449.JAA03436%40dragonfly.corp.home.net","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.06a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000001bf78af%246d0d47a0%244d2f45a1%40jmagdych.na.nai.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=200002181449.JAA03436%40dragonfly.corp.home.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0159","sourceIdentifier":"cve@mitre.org","published":"2000-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0160","sourceIdentifier":"cve@mitre.org","published":"2000-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.x:*:*:*:*:*:*:*","matchCriteriaId":"45091F51-BA28-4FEB-9F84-58AC2E1DB48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*","matchCriteriaId":"91EB05F7-D88A-40AA-A8CB-F76C449878AA"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0161","sourceIdentifier":"cve@mitre.org","published":"2000-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/994","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-010","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0162","sourceIdentifier":"cve@mitre.org","published":"2000-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the \"VM File Reading\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"D45C47A8-8B5F-4A49-8B36-FCBA09029375"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"84730D4D-7887-4A64-8C76-F50C85309FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"7AAA310C-7DED-40B3-B5EF-80C7407BB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D5CDA0E2-DFBD-4EE0-80DC-76AA55ADFEFC"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-011","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0163","sourceIdentifier":"cve@mitre.org","published":"2000-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/996","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2092","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0164","sourceIdentifier":"cve@mitre.org","published":"2000-02-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_isp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7B2C1CBE-EE61-4253-9F58-06F60739BA3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1004","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.SOL.4.21.0002200031320.22675-100000%40klayman.hq.formus.pl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.SOL.4.21.0002200031320.22675-100000%40klayman.hq.formus.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0165","sourceIdentifier":"cve@mitre.org","published":"1999-11-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etl:delegate:5.9:*:*:*:*:*:*:*","matchCriteriaId":"F6584618-DFEC-416F-8335-7106EA25BE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:etl:delegate:6.0:*:*:*:*:*:*:*","matchCriteriaId":"18763780-3419-4EFE-ABC7-0BE51CC90881"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/k-023.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.BSF.4.21.0002192249290.10784-100000%40freefall.freebsd.org","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4195","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/k-023.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=Pine.BSF.4.21.0002192249290.10784-100000%40freefall.freebsd.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0166","sourceIdentifier":"cve@mitre.org","published":"2000-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interaccess:interaccess_telnetd_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5CD83AB6-6378-4CAA-86B5-0A15D97B2BAB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95142756403323&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/995","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPGEJHCCAA.labs%40ussrback.com","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95142756403323&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPGEJHCCAA.labs%40ussrback.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0167","sourceIdentifier":"cve@mitre.org","published":"2000-02-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0002&L=ntbugtraq&F=&S=&P=8800","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0002&L=ntbugtraq&F=&S=&P=8800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0168","sourceIdentifier":"cve@mitre.org","published":"2000-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the \"DOS Device in Path Name\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1043","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2126","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCENECCAA.labs%40ussrback.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCENECCAA.labs%40ussrback.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0169","sourceIdentifier":"cve@mitre.org","published":"2000-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6C0725F-D926-473E-8E74-EA3A38D47EC4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1053","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0170","sourceIdentifier":"cve@mitre.org","published":"2000-02-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*","matchCriteriaId":"667CF388-298D-4B64-9BA5-89D153FFA998"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"F7C765FF-0A3D-4BF4-B236-609658776ACA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0171","sourceIdentifier":"cve@mitre.org","published":"2000-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:at_computing:atsar_linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CC0265C7-6307-4DE6-BF9D-84960C0E9BA5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0102.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1048","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0172","sourceIdentifier":"cve@mitre.org","published":"2000-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.28:*:*:*:*:*:*:*","matchCriteriaId":"374B0A57-7231-403F-B339-1F0E8051E62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.41:*:*:*:*:*:*:*","matchCriteriaId":"CED7EB1A-43A1-40C8-BA1C-AE826986E89A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*","matchCriteriaId":"667CF388-298D-4B64-9BA5-89D153FFA998"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"F7C765FF-0A3D-4BF4-B236-609658776ACA"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0173","sourceIdentifier":"cve@mitre.org","published":"2000-03-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.08a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-00.08a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0174","sourceIdentifier":"cve@mitre.org","published":"2000-03-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:staroffice:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C93C6E1-EF21-4CAA-96EC-780BDDA33488"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1040","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0175","sourceIdentifier":"cve@mitre.org","published":"2000-03-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:staroffice:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C93C6E1-EF21-4CAA-96EC-780BDDA33488"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1039","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0176","sourceIdentifier":"cve@mitre.org","published":"2000-02-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.4:*:*:*:*:*:*:*","matchCriteriaId":"1232F683-50D0-43E0-B38C-094F5A800FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5:*:*:*:*:*:*:*","matchCriteriaId":"10A8CC65-6AD3-4CB4-A8D7-F91DC9048F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5a:*:*:*:*:*:*:*","matchCriteriaId":"61E1B73D-6202-4C21-B342-AA2513423F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5b:*:*:*:*:*:*:*","matchCriteriaId":"E52DBFB6-09FB-4A8A-AF81-D2A1055EA6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5c:*:*:*:*:*:*:*","matchCriteriaId":"78ED1285-0950-4C6E-BDB1-066C1A484B01"},{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5d:*:*:*:*:*:*:*","matchCriteriaId":"D83331F2-8E8D-447E-A042-8F73FC728144"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1016","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0417.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0177","sourceIdentifier":"cve@mitre.org","published":"2000-03-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dnstools_software:dnstools:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"20EDAB5F-8701-4E3B-A1C3-AA8459BD8583"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0000.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1028","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0178","sourceIdentifier":"cve@mitre.org","published":"2000-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:5.1.10t12:*:*:*:*:*:*:*","matchCriteriaId":"8F5240D4-EF05-4134-9B75-03C1BFE7D37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E3BDF7B5-5962-4D37-965B-22022255C96B"}]}]}],"references":[{"url":"http://www.foundrynet.com/bugTraq.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1017","source":"cve@mitre.org"},{"url":"http://www.foundrynet.com/bugTraq.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0179","sourceIdentifier":"cve@mitre.org","published":"2000-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_omniback_ii:2.55:*:*:*:*:*:*:*","matchCriteriaId":"F72AF3E1-0BD4-45CE-85EC-F07C46AC348C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_omniback_ii:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7BA93113-D9DC-46FE-B0F6-08400503207F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_omniback_ii:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0CACE475-0F80-44B5-882C-7FB9ADA4B945"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0387.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1015","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0006-115","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0387.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0006-115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0180","sourceIdentifier":"cve@mitre.org","published":"2000-03-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:generation_terrorists_designs_and_concepts:sojourn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1287989-3B2F-403C-90F9-9C2D60DD67FF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0201.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1052","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4197","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0181","sourceIdentifier":"cve@mitre.org","published":"2000-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0119.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1256","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1054","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0182","sourceIdentifier":"cve@mitre.org","published":"2000-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"F52699EB-CC9F-4768-86CB-FEAA727EDD9B"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0182","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0183","sourceIdentifier":"cve@mitre.org","published":"2000-03-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_sandrof:ircii:4.4.7:*:*:*:*:*:*:*","matchCriteriaId":"7FE0492E-580C-4578-B6F8-4FEEE6E1F69D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0093.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-008.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1046","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0184","sourceIdentifier":"cve@mitre.org","published":"2000-03-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0082.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1037","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0185","sourceIdentifier":"cve@mitre.org","published":"2000-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE671A54-2E76-467E-8945-10982B79F4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9392C48A-A1AB-43F7-8374-02BDCE6589AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver_g2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C3F22E7F-F4D8-4052-A8DF-BA717EDD94B4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0069.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1049","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0186","sourceIdentifier":"cve@mitre.org","published":"2000-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"F7C765FF-0A3D-4BF4-B236-609658776ACA"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-100.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1020","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0187","sourceIdentifier":"cve@mitre.org","published":"2000-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_heiphetz_group:ezshopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB24D0E-9799-4C96-B9F0-45B821ABA365"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1014","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0188","sourceIdentifier":"cve@mitre.org","published":"2000-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_heiphetz_group:ezshopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB24D0E-9799-4C96-B9F0-45B821ABA365"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1014","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0356.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0189","sourceIdentifier":"cve@mitre.org","published":"2000-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3630623B-468C-4E71-9C57-EFF83E5EFA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"292DA1C8-5B98-4552-B51B-B0C3F230321F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0190","sourceIdentifier":"cve@mitre.org","published":"2000-03-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"3EFDAD29-7868-4161-9BA1-7D7E9A72CFDD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0016.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0191","sourceIdentifier":"cve@mitre.org","published":"2000-02-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:storpoint_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"7889BD02-DCDE-49F4-B432-DF9EB39C1251"}]}]}],"references":[{"url":"http://www.osvdb.org/19","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1025","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=41256894.00492503.00%40mailgw.backupcentralen.se","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=41256894.00492503.00%40mailgw.backupcentralen.se","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0192","sourceIdentifier":"cve@mitre.org","published":"2000-03-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0029.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1036","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0193","sourceIdentifier":"cve@mitre.org","published":"2000-03-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corel:linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CB5BDE6-F735-461F-B3B9-066A4876AB0A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1030","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200003020436.PAA20168%40jawa.chilli.net.au","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200003020436.PAA20168%40jawa.chilli.net.au","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0194","sourceIdentifier":"cve@mitre.org","published":"2000-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corel:linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CB5BDE6-F735-461F-B3B9-066A4876AB0A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1007","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0195","sourceIdentifier":"cve@mitre.org","published":"2000-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:corel:linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CB5BDE6-F735-461F-B3B9-066A4876AB0A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1008","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0196","sourceIdentifier":"cve@mitre.org","published":"2000-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nmh:nmh:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CEE22340-554C-4E8F-970B-27264B89F0B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:alpha:*:*:*:*:*","matchCriteriaId":"07396B95-E434-46C9-A345-27C9EA9BEA26"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:sparc:*:*:*:*:*","matchCriteriaId":"0775CE08-C5AD-4FF7-AEA9-537B1EAE3BDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*","matchCriteriaId":"667CF388-298D-4B64-9BA5-89D153FFA998"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"F7C765FF-0A3D-4BF4-B236-609658776ACA"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-006.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1018","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0197","sourceIdentifier":"cve@mitre.org","published":"2000-02-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/current/0202.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1050","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/current/0202.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2000-0198","sourceIdentifier":"cve@mitre.org","published":"2000-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_imap4_server:3.20.01:*:*:*:*:*:*:*","matchCriteriaId":"9A7E5072-A782-4056-BB8A-029E1DA64BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2C1C96FB-D121-4097-8838-B88C6F87E63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_pop3_server:3.20.01:*:*:*:*:*:*:*","matchCriteriaId":"A66332A0-BDB1-45A6-874A-595B89518CEE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/current/0137.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/current/0206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1051","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/current/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/current/0206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0199","sourceIdentifier":"cve@mitre.org","published":"2000-03-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the \"Always prompt for login name and password\" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1055","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0200","sourceIdentifier":"cve@mitre.org","published":"2000-03-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the \"Clip Art Buffer Overrun\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:clip_art:1.0:*:*:*:*:*:*:*","matchCriteriaId":"278667E0-7207-4F5A-9D59-FE300FAF6930"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:greetings:2000:*:*:*:*:*:*:*","matchCriteriaId":"0BE30618-56A2-49DC-80C8-DDED0C1C7E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:home_publishing:2000:*:*:*:*:*:*:*","matchCriteriaId":"3BE1F3B2-ACB1-4479-9D6E-214FAEB74983"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1034","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0201","sourceIdentifier":"cve@mitre.org","published":"2000-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0202","sourceIdentifier":"cve@mitre.org","published":"2000-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1041","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0203","sourceIdentifier":"cve@mitre.org","published":"2000-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:3.5:*:*:*:*:*:*:*","matchCriteriaId":"59CDE5D7-3DEC-42DE-8B5A-63903754937B"}]}]}],"references":[{"url":"http://www.antivirus.com/download/ofce_patch_35.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=412FC0AFD62ED31191B40008C7E9A11A0D481D%40srvnt04.previnet.it","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com","source":"cve@mitre.org"},{"url":"http://www.antivirus.com/download/ofce_patch_35.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=412FC0AFD62ED31191B40008C7E9A11A0D481D%40srvnt04.previnet.it","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0204","sourceIdentifier":"cve@mitre.org","published":"2000-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:3.5:*:*:*:*:*:*:*","matchCriteriaId":"59CDE5D7-3DEC-42DE-8B5A-63903754937B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0340.html","source":"cve@mitre.org"},{"url":"http://www.antivirus.com/download/ofce_patch_35.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-02/0340.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.antivirus.com/download/ofce_patch_35.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0205","sourceIdentifier":"cve@mitre.org","published":"2000-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:3.5:*:*:*:*:*:*:*","matchCriteriaId":"59CDE5D7-3DEC-42DE-8B5A-63903754937B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0015.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.antivirus.com/download/ofce_patch_35.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.antivirus.com/download/ofce_patch_35.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=D129BBE1730AD2118A0300805FC1C2FE038AF28B%40209-76-212-10.trendmicro.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0206","sourceIdentifier":"cve@mitre.org","published":"2000-03-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1035","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0207","sourceIdentifier":"cve@mitre.org","published":"2000-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:infosearch:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3169FB68-8E0E-4178-8271-1B9C92EB2828"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000501-01-P","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1031","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000501-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0208","sourceIdentifier":"cve@mitre.org","published":"2000-02-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1E0D3BD-1A90-40DE-BAB8-2025E851C02C"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0889D68B-2AC5-4D74-A7FC-4A856E15BF31"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0DFD60F3-76C8-4463-B540-E19D605C2FCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"843F2EB6-4698-45B7-9D58-A5BD91B5A29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"223D6AA9-BAF4-4A42-AA4B-252F8BB53207"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1026","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0209","sourceIdentifier":"cve@mitre.org","published":"2000-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.7:*:*:*:*:*:*:*","matchCriteriaId":"E01953FC-9DA9-4C14-9989-6A81AA2B42E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8:*:*:*:*:*:*:*","matchCriteriaId":"08198583-325B-42B7-8856-14C864838AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.3_dev22:*:*:*:*:*:*:*","matchCriteriaId":"FD071013-25ED-4898-B603-2D3C97059357"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1012","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0210","sourceIdentifier":"cve@mitre.org","published":"2000-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:workshop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9B522DB0-C196-4840-83E5-A8CA2FCB1BDA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0211","sourceIdentifier":"cve@mitre.org","published":"2000-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the \"Misordered Windows Media Services Handshake\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D073958F-0428-4E15-97B0-8EDAD0E80632"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3DDE73-E623-45A3-AA49-17BAFB89A2CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1000","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0212","sourceIdentifier":"cve@mitre.org","published":"2000-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:interaccess_telnetd_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4C561A2E-7083-4E3D-B2AE-5F984ED5A617"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0213","sourceIdentifier":"cve@mitre.org","published":"2000-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:*:beta7:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"1C1C9F1B-2D13-4C36-9DBB-675A309BF526"}]}]}],"references":[{"url":"http://www.sambar.com/session/highlight?url=/syshelp/history.htm&words=security+&color=red","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38B3E60A.6A84FEC3%40cybcom.net","source":"cve@mitre.org"},{"url":"http://www.sambar.com/session/highlight?url=/syshelp/history.htm&words=security+&color=red","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38B3E60A.6A84FEC3%40cybcom.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0214","sourceIdentifier":"cve@mitre.org","published":"2000-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftpx:ftp_explorer:1.00.10:*:*:*:*:*:*:*","matchCriteriaId":"224F78A5-E8B6-4E28-92F7-4508CEA36AB1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1003","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002242035500.30645-100000%40unreal.sekure.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002242035500.30645-100000%40unreal.sekure.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0215","sourceIdentifier":"cve@mitre.org","published":"2000-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF9FD7BF-97E4-426D-881F-03C9D5B8895D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1019","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0216","sourceIdentifier":"cve@mitre.org","published":"2000-02-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*","matchCriteriaId":"261FB692-DD0F-494F-A25A-AFCC00BE4585"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*","matchCriteriaId":"91EB05F7-D88A-40AA-A8CB-F76C449878AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_messaging:*:*:*:*:*:*:*:*","matchCriteriaId":"06BBAE78-16A5-47EC-B5DD-3D01025D2F2D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0176.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q1/0176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0217","sourceIdentifier":"cve@mitre.org","published":"2000-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E9C3330-E163-4699-B7F6-2D9B089E8A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F62C0C54-6BC0-4A8B-8006-F1EEEFAC3699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"011ECCA8-63DD-4FB0-A2F4-B4BAF344242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86A52DB0-B17A-437C-8E3A-0F824B9F88AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8EDDCCD5-76B1-4981-BA9D-0C4702DD3FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6A9E54C6-7003-46B0-85B3-0C2E7E611D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"082C8ECC-CDAF-440B-90D0-A1FE028B03F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7D0AAA72-CAA5-4985-ADD9-1790CE3C66D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C0C2A220-D8AB-4FAD-8048-F2C1764F965F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5010A78A-394E-4196-90CB-5D371C3BD1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E5F6F181-41B1-47D1-A216-194DC4C762EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"D6EEBDAB-AA0D-407B-B8EE-6C33B0423AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"45446BD9-3B03-43B6-B686-F6EACFABD699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"FCE6F492-8E28-4FA1-9BF1-96BAF5D68545"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"41BF66ED-CB08-440E-AC05-A31371B7A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E0EE3216-D8FF-43F0-9329-6676E2CEC250"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9310E12D-1136-4AD6-9678-8ADCD9EE58C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"BBEDF399-58DE-491A-8B51-87E0392FF9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"CBDF2DE8-8559-4BED-80AE-E1420BBF4043"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"23EB8421-76BF-47D1-B294-68412D5E4572"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9560989-5342-4C6B-974F-7D90C467BA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"971835AF-E908-4C74-9DE0-167349138DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"2E0D49C5-54B4-4437-A2D3-3EBFA1D9A3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"926B57D7-009C-4317-ACFB-98551FADC5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A7DB2FA-58A8-45B9-AE2E-AE20A872BF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2DD92EA8-8C01-4E4E-9AFE-2B1242AB10CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FB31028-59BA-4833-BF14-3CB1CA18DAAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A3E89B6-872D-4541-A413-88A956FDAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"98CC86ED-CA78-4E2A-8A12-4F766DB79733"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BD500A33-4D0E-44B5-9BBE-A30AA999F662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EBB8D72F-51E7-47DF-96A4-4EBB517A79D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC2379BA-621E-4986-AAC5-AF359FD57381"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9972B3A4-369E-40B5-9415-F92B7394604A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1B6E719F-010B-4B8A-B508-0491BD15C465"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E44D2AE3-DD8B-46D0-B6AB-9F0E6B4DCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B7735CDD-8BFC-4E30-9C88-27C8943637CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A1582187-F4BA-44D6-97F0-E78D814A9E9E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0218","sourceIdentifier":"cve@mitre.org","published":"2000-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"67527281-81FA-4068-9E0A-7B19FB6A208A"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-002.0.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6980","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7004","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-002.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0219","sourceIdentifier":"cve@mitre.org","published":"2000-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1005","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200002230248.NAA19185%40cairo.anu.edu.au","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200002230248.NAA19185%40cairo.anu.edu.au","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0220","sourceIdentifier":"cve@mitre.org","published":"2000-02-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.0.26:*:*:*:*:*:*:*","matchCriteriaId":"1579C5D8-3F58-4477-97E7-C951DD541920"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0220","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0221","sourceIdentifier":"cve@mitre.org","published":"2000-02-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:nautica_marlin:*:*:*:*:*:*:*:*","matchCriteriaId":"61FE2203-90B6-4DFE-86A6-3C6B8FA42D11"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0222","sourceIdentifier":"cve@mitre.org","published":"2000-02-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs."},{"lang":"es","value":"La instalación para Windows 2000 no activa la contraseña de administrador hasta que el sistema se ha reiniciado, lo que permite a los atacantes remotos conectarse al recurso compartido ADMIN$ sin contraseña hasta que se produzca el reinicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000215155750.M4500%40safe.hsc.fr","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000215155750.M4500%40safe.hsc.fr","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0223","sourceIdentifier":"cve@mitre.org","published":"2000-03-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sam_hawker:wmcdplay:1.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"C33086D5-227D-4502-A02E-2C0B725A156A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0107.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1047","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0224","sourceIdentifier":"cve@mitre.org","published":"2000-02-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1:*:*:*:*:*:*:*","matchCriteriaId":"B200C05F-0E89-4172-B500-47C2573D4461"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0225","sourceIdentifier":"cve@mitre.org","published":"2000-03-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deti_fliegl:poc32:2.05:*:*:*:*:*:*:*","matchCriteriaId":"37DB43F5-7002-4975-BF2B-2FD8C6D11538"}]}]}],"references":[{"url":"http://www.osvdb.org/259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1032","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=003601bf854b%246893a090%240100a8c0%40FIREWALKER","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=003601bf854b%246893a090%240100a8c0%40FIREWALKER","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0226","sourceIdentifier":"cve@mitre.org","published":"2000-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the \"Chunked Transfer Encoding Buffer Overflow Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1066","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-018","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0227","sourceIdentifier":"cve@mitre.org","published":"2000-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of service by requesting a large number of sockets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*","matchCriteriaId":"28ECE0D4-624D-4804-8013-DBA9BAF659ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0254.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95421263519558&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4186","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=95421263519558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0228","sourceIdentifier":"cve@mitre.org","published":"2000-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the \"Malformed Media License Request\" Vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_rights_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8561A9DF-D3BB-4287-9374-83B09F0CA4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_rights_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FCAF8A5D-A9E3-4E95-BB93-A10C626A314B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1058","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0229","sourceIdentifier":"cve@mitre.org","published":"2000-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:alessandro_rubini:gpm:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"FD68842D-DD39-4FFD-95B5-0A4BB28D9F94"},{"vulnerable":true,"criteria":"cpe:2.3:o:alessandro_rubini:gpm:1.19:*:*:*:*:*:*:*","matchCriteriaId":"8156E792-8374-41CD-B60C-DAB2911E7169"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:pre_potato:*:*:*:*:*","matchCriteriaId":"2B19ABCB-70F0-450E-9A71-2EE8F2BFB2EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0242.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_45.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-009.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1069","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0242.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_45.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0230","sourceIdentifier":"cve@mitre.org","published":"2000-03-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:halloween:halloween_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D096A84E-F4FB-40D4-AC59-1E57CBD7E9E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0168.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1060","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0231","sourceIdentifier":"cve@mitre.org","published":"2000-03-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:halloween:halloween_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D096A84E-F4FB-40D4-AC59-1E57CBD7E9E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0162.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1061","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0232","sourceIdentifier":"cve@mitre.org","published":"2000-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0306.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1082","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-021","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0233","sourceIdentifier":"cve@mitre.org","published":"2000-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_imap_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CBFD2B9C-53B5-4791-9EE6-0DFCCC91E8B9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vendor/2000-q1/0035.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vendor/2000-q1/0035.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0234","sourceIdentifier":"cve@mitre.org","published":"2000-03-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2150","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000330220757.28456.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000330220757.28456.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0235","sourceIdentifier":"cve@mitre.org","published":"2000-03-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:10-orville-write.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1070","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:10-orville-write.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0236","sourceIdentifier":"cve@mitre.org","published":"2000-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4147A43C-DA7B-4D08-90E9-72DE57B1D61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1063","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38D2173D.24E39DD0%40relaygroup.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38D2173D.24E39DD0%40relaygroup.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0237","sourceIdentifier":"cve@mitre.org","published":"2000-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"34D42A9F-449C-4F4D-B610-538BF133F744"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1075","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://zsh.stupidphat.com/advisory.cgi?000311-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://zsh.stupidphat.com/advisory.cgi?000311-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0238","sourceIdentifier":"cve@mitre.org","published":"2000-03-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:1.0:*:internet_email_gateways:*:*:*:*:*","matchCriteriaId":"DBDA52B8-F432-49D6-9E75-15A52E7BD24A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1064","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=s8d1f3e3.036%40kib.co.kodiak.ak.us","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=s8d1f3e3.036%40kib.co.kodiak.ak.us","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0239","sourceIdentifier":"cve@mitre.org","published":"2000-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_imap4_server:3.20.01:*:*:*:*:*:*:*","matchCriteriaId":"9A7E5072-A782-4056-BB8A-029E1DA64BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2C1C96FB-D121-4097-8838-B88C6F87E63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_pop3_server:3.20.01:*:*:*:*:*:*:*","matchCriteriaId":"A66332A0-BDB1-45A6-874A-595B89518CEE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95325335825295&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1056","source":"cve@mitre.org"},{"url":"http://www.ussrback.com/labs36.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95325335825295&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ussrback.com/labs36.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0240","sourceIdentifier":"cve@mitre.org","published":"2000-03-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C8EF307C-8279-416D-8A4B-4FFDAF6DD88B"}]}]}],"references":[{"url":"http://www.osvdb.org/270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1067","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.20000321084646.0095c7f0%40olga.swip.net","source":"cve@mitre.org"},{"url":"http://www.vqsoft.com/vq/server/faqs/dotdotbug.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.20000321084646.0095c7f0%40olga.swip.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vqsoft.com/vq/server/faqs/dotdotbug.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2000-0241","sourceIdentifier":"cve@mitre.org","published":"2000-03-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C8EF307C-8279-416D-8A4B-4FFDAF6DD88B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1068","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.20000321084646.0095c7f0%40olga.swip.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.20000321084646.0095c7f0%40olga.swip.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0242","sourceIdentifier":"cve@mitre.org","published":"2000-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geocel:windmail:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6F2AEF1D-D1FC-47F4-B603-9A48C5A7D46B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1073","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-03-22&msg=20000325224146.6839.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-03-22&msg=20000325224146.6839.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0243","sourceIdentifier":"cve@mitre.org","published":"2000-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B310C106-DC4E-4600-9218-984E1A7D083E"}]}]}],"references":[{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1265","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1076","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=web-5645555%40post2.rnci.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4189","source":"cve@mitre.org"},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=web-5645555%40post2.rnci.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0244","sourceIdentifier":"cve@mitre.org","published":"2000-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:*:*:windows_2000:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"0E71883B-EA60-4BE2-9A38-C0EAB30C7756"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:*:*:windows_nt_4.0_tse:*:*:*:*:*","versionEndIncluding":"1.8","matchCriteriaId":"7D434E7D-2D68-417C-8AA8-2F8625746C81"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:1.0:*:unix:*:*:*:*:*","matchCriteriaId":"D7E2FE0C-4763-4624-83D4-B8D43E303600"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:winframe:3.5_1.8_for_windows_nt:*:*:*:*:*:*:*","matchCriteriaId":"F396ECA2-2C14-455D-A5D9-5299B42F5F1E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1077","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.20.0003290949280.2640-100000%40naughty.monkey.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.20.0003290949280.2640-100000%40naughty.monkey.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0245","sourceIdentifier":"cve@mitre.org","published":"2000-03-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://sgigate.sgi.com/security/20000303-01-PX","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/k-030.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1267","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200003290852.aa27218%40blaze.arl.mil","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4206","source":"cve@mitre.org"},{"url":"ftp://sgigate.sgi.com/security/20000303-01-PX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/k-030.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200003290852.aa27218%40blaze.arl.mil","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0246","sourceIdentifier":"cve@mitre.org","published":"2000-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the \"Virtualized UNC Share\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"81514AB5-388D-4D13-B63A-C237A502B86A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commercial_internet_system:2.5:*:*:*:*:*:*:*","matchCriteriaId":"879AFDCC-B9D8-41EF-85DD-70CC1BD5227C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7BF233-8DE6-4DC4-B9ED-5D4A180DD8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=249599","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1081","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=249599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0247","sourceIdentifier":"cve@mitre.org","published":"2000-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnqs:gnqs:3.50.6:*:*:*:*:*:*:*","matchCriteriaId":"CBF4E8A5-6544-40B6-B429-AE3A6C7D0852"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnqs:gnqs:3.50.7:*:*:*:*:*:*:*","matchCriteriaId":"73434B4D-B226-4F27-A2E8-090ADD490E04"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:13.generic-nqs.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0236.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.gnqs.org/pub/gnqs/source/by-version-number/v3.50/Generic-NQS-3.50.8-ChangeLog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4306","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:13.generic-nqs.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.gnqs.org/pub/gnqs/source/by-version-number/v3.50/Generic-NQS-3.50.8-ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0248","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://xforce.iss.net/alerts/advise46.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise46.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0249","sourceIdentifier":"cve@mitre.org","published":"2000-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1152","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise47.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise47.php3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0250","sourceIdentifier":"cve@mitre.org","published":"2000-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:qnx:4.25a:*:*:*:*:*:*:*","matchCriteriaId":"103982C9-A49A-4CF0-A24E-2E6ADCEEDBFD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0072.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1114","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0251","sourceIdentifier":"cve@mitre.org","published":"2000-04-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:3.50:*:*:*:*:*:*:*","matchCriteriaId":"C74B2BE9-2A39-4F69-9DF5-86985E7FB394"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0021.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1090","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0252","sourceIdentifier":"cve@mitre.org","published":"2000-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craig_dansie:dansie_shopping_cart:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4B1ED2E6-F12C-4C15-BC75-202618C5E43D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1115","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4975","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0253","sourceIdentifier":"cve@mitre.org","published":"2000-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craig_dansie:dansie_shopping_cart:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4B1ED2E6-F12C-4C15-BC75-202618C5E43D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1115","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0254","sourceIdentifier":"cve@mitre.org","published":"2000-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craig_dansie:dansie_shopping_cart:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4B1ED2E6-F12C-4C15-BC75-202618C5E43D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1115","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4954","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0255","sourceIdentifier":"cve@mitre.org","published":"2000-04-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nbase-xyplex:edgeblaster:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4CDC283E-B1BD-474C-BE50-CCC03152E182"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0022.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1091","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0256","sourceIdentifier":"cve@mitre.org","published":"2000-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available through the web site, aka the \"Server-Side Image Map Components\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:personal_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7FF19563-8E22-4DDC-948D-6F97975745EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/470458/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1117","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34720","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/470458/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0257","sourceIdentifier":"cve@mitre.org","published":"2000-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1118","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0004171825340.10088-100000%40nimue.tpi.pl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0004171825340.10088-100000%40nimue.tpi.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0258","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the \"Myriad Escaped Characters\" Vulnerability."},{"lang":"es","value":"IIS 4.0 y 5.0 permite a atacantes remotos provocar una denegación de servicio enviando muchas URLs con un largo número de caracteres de escape, también conocida como la Vulnerabilidad \"Myriad Escaped Characters\"."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1101","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-023","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0259","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions for the Cryptography\\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0260","sourceIdentifier":"cve@mitre.org","published":"2000-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the \"Link View Server-Side Component\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_interdev:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8056FB5-2B2B-416B-AC5F-35EE4CA59F36"}]}]}],"references":[{"url":"http://www.osvdb.org/282","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1109","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-025","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0261","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avm:ken:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"1D6F4F7C-2905-46E9-AFA9-CBAC56A5809A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avm:ken:1.4.30:*:*:*:*:*:*:*","matchCriteriaId":"00DBCDEA-5443-493C-B7D1-2789794E8711"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0073.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1282","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=383085010.956159226625.JavaMail.root%40web305-mc.mail.com","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=383085010.956159226625.JavaMail.root%40web305-mc.mail.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0262","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avm:ken:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"1D6F4F7C-2905-46E9-AFA9-CBAC56A5809A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avm:ken:1.4.30:*:*:*:*:*:*:*","matchCriteriaId":"00DBCDEA-5443-493C-B7D1-2789794E8711"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0073.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=383085010.956159226625.JavaMail.root%40web305-mc.mail.com","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=383085010.956159226625.JavaMail.root%40web305-mc.mail.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0263","sourceIdentifier":"cve@mitre.org","published":"2000-04-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1111","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0264","sourceIdentifier":"cve@mitre.org","published":"2000-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC7E-F0EA-4C33-BF61-7698FD12F69A"}]}]}],"references":[{"url":"http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FB45F2.550EA000%40teleline.es","source":"cve@mitre.org"},{"url":"http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FB45F2.550EA000%40teleline.es","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0265","sourceIdentifier":"cve@mitre.org","published":"2000-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC7E-F0EA-4C33-BF61-7698FD12F69A"}]}]}],"references":[{"url":"http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1119","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FB45F2.550EA000%40teleline.es","source":"cve@mitre.org"},{"url":"http://updates.pandasoftware.com/docs/us/Avoidvulnerability.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FB45F2.550EA000%40teleline.es","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0266","sourceIdentifier":"cve@mitre.org","published":"2000-04-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1121","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FC6130.D6D178FD%40nat.bg","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FC6130.D6D178FD%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0267","sourceIdentifier":"cve@mitre.org","published":"2000-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst 5.4.x allows a user to gain access to the \"enable\" mode without a password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/catos-enable-bypass-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1288","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1122","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/catos-enable-bypass-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0268","sourceIdentifier":"cve@mitre.org","published":"2000-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3aa:*:*:*:*:*:*:*","matchCriteriaId":"D8783C0A-990A-4B79-8BF9-64E425DA585E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"08E23131-D207-4D98-96D5-2B71FF792604"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E7109585-1433-4940-B7C9-C561DEAF1498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1A0D82E1-CCF7-429B-A637-479E839EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"4F1B2747-4A9C-44FC-BBA8-39E338B30417"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5BB7513-C232-4B4F-BE68-972B05086ABD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"ECCE69A3-41C6-4893-86D4-7F264352C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:accesspath:ls-3:*:*:*:*:*:*:*","matchCriteriaId":"7D8CD3D5-C52F-4B38-8DA7-5441B7CD000D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:accesspath:ts-3:*:*:*:*:*:*:*","matchCriteriaId":"1DD96A21-1862-4E35-BD02-2928DD44B3C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:accesspath:vs-3:*:*:*:*:*:*:*","matchCriteriaId":"D537F5F7-8227-46CC-A30F-B81C25AD9FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:as5200:*:*:*:*:*:*:*:*","matchCriteriaId":"6E74902A-1785-40FE-92A0-55BD27D6FEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:as5300:*:*:*:*:*:*:*:*","matchCriteriaId":"883975E5-FE8B-4DC4-8F71-E68791ABD17D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:as5800:*:*:*:*:*:*:*:*","matchCriteriaId":"823E4E18-8719-4167-83BE-CF2DA55558E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:system_controller_3640:*:*:*:*:*:*:*:*","matchCriteriaId":"B7C0CC3E-3E01-4607-BE75-4A6A1074DC82"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voice_gateway_as5800:*:*:*:*:*:*:*:*","matchCriteriaId":"9D185F2F-788C-44F1-A635-90E33A4A88B9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:3660_router:*:*:*:*:*:*:*:*","matchCriteriaId":"5EAE468C-7D0F-4F6D-B598-B2E422EFDCD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:7100_router:*:*:*:*:*:*:*:*","matchCriteriaId":"C3715102-E348-457A-9546-94BBCEF91A00"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:7200_router:*:*:*:*:*:*:*:*","matchCriteriaId":"60DEA083-B9BC-42DB-A4F7-986A5A185DE6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:7500_router:*:*:*:*:*:*:*:*","matchCriteriaId":"FCFAA111-F831-4BC9-BCD7-246ED6C0F3FF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ubr7200:*:*:*:*:*:*:*:*","matchCriteriaId":"0B4917DF-B485-46A3-9515-8BDDD1F13C77"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1289","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1123","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/iostelnetopt-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0269","sourceIdentifier":"cve@mitre.org","published":"2000-04-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.0:*:*:*:*:*:*:*","matchCriteriaId":"E460F3A1-71DD-4A37-9F17-6B4E5C9A46AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.1:*:*:*:*:*:*:*","matchCriteriaId":"0F9D5B3C-7534-4DC6-BE44-91A0031FBA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.2:*:*:*:*:*:*:*","matchCriteriaId":"4EB2E29F-371A-43AB-8CBF-DDFABDB103BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.3:*:*:*:*:*:*:*","matchCriteriaId":"05F6124D-F3C1-4E4C-B580-85AB01833885"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*","matchCriteriaId":"9571E866-AB82-4B95-8097-ED0DA038331F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.5:*:*:*:*:*:*:*","matchCriteriaId":"3A773690-9650-40E1-BCE3-7E020AF61BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.6:*:*:*:*:*:*:*","matchCriteriaId":"26D9A554-CB40-461D-9C95-78051B0CA354"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1125","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0270","sourceIdentifier":"cve@mitre.org","published":"2000-04-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.0:*:*:*:*:*:*:*","matchCriteriaId":"E460F3A1-71DD-4A37-9F17-6B4E5C9A46AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.1:*:*:*:*:*:*:*","matchCriteriaId":"0F9D5B3C-7534-4DC6-BE44-91A0031FBA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.2:*:*:*:*:*:*:*","matchCriteriaId":"4EB2E29F-371A-43AB-8CBF-DDFABDB103BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.3:*:*:*:*:*:*:*","matchCriteriaId":"05F6124D-F3C1-4E4C-B580-85AB01833885"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*","matchCriteriaId":"9571E866-AB82-4B95-8097-ED0DA038331F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.5:*:*:*:*:*:*:*","matchCriteriaId":"3A773690-9650-40E1-BCE3-7E020AF61BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.6:*:*:*:*:*:*:*","matchCriteriaId":"26D9A554-CB40-461D-9C95-78051B0CA354"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1126","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0271","sourceIdentifier":"cve@mitre.org","published":"2000-04-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.0:*:*:*:*:*:*:*","matchCriteriaId":"E460F3A1-71DD-4A37-9F17-6B4E5C9A46AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.1:*:*:*:*:*:*:*","matchCriteriaId":"0F9D5B3C-7534-4DC6-BE44-91A0031FBA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.2:*:*:*:*:*:*:*","matchCriteriaId":"4EB2E29F-371A-43AB-8CBF-DDFABDB103BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.3:*:*:*:*:*:*:*","matchCriteriaId":"05F6124D-F3C1-4E4C-B580-85AB01833885"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*","matchCriteriaId":"9571E866-AB82-4B95-8097-ED0DA038331F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.5:*:*:*:*:*:*:*","matchCriteriaId":"3A773690-9650-40E1-BCE3-7E020AF61BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.6:*:*:*:*:*:*:*","matchCriteriaId":"26D9A554-CB40-461D-9C95-78051B0CA354"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1125","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-04-15&msg=tg4s8zioxq.fsf%40mercury.rus.uni-stuttgart.de","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0272","sourceIdentifier":"cve@mitre.org","published":"2000-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9392C48A-A1AB-43F7-8374-02BDCE6589AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:basic:*:*:*:*:*:*:*","matchCriteriaId":"E0C507DD-95ED-48D1-AA74-7BE15A4259FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:g2_1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFCC35BE-D76A-48CF-84B7-EF4A3681F15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:intranet:*:*:*:*:*:*:*","matchCriteriaId":"47455BB6-F5B4-4EC3-AD03-6DB17FC02BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:plus:*:*:*:*:*:*:*","matchCriteriaId":"BDA39DE5-C08F-493D-A5C0-68761388B0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:pro:*:*:*:*:*:*:*","matchCriteriaId":"43F75E54-9B53-48B3-95E9-125E74E9C54C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95625288231045&w=2","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/servg270.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1128","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=95625288231045&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/servg270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0273","sourceIdentifier":"cve@mitre.org","published":"2000-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:8.0:*:*:*:*:*:*:*","matchCriteriaId":"447EE4D0-ED48-490E-BC1C-831A165CFF29"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:9.0:*:*:*:*:*:*:*","matchCriteriaId":"CB0C7336-52DC-4E0D-9F6F-9B401B0A93EB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0031.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1095","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0274","sourceIdentifier":"cve@mitre.org","published":"2000-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bray_systems:linux_trustees:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39D83A24-79B0-407C-BBD2-36373AF22877"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0035.html","source":"cve@mitre.org"},{"url":"http://www.braysystems.com/linux/trustees.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1096","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.braysystems.com/linux/trustees.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0275","sourceIdentifier":"cve@mitre.org","published":"2000-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cryptocard:cryptoadmin:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2915A632-CCE7-4214-828A-5B43D4ED05E2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html","source":"cve@mitre.org"},{"url":"http://www.l0pht.com/advisories/cc-pinextract.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1097","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.l0pht.com/advisories/cc-pinextract.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0276","sourceIdentifier":"cve@mitre.org","published":"2000-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:4.5:*:*:*:*:*:*:*","matchCriteriaId":"A78731F7-6AFC-4349-972C-929323519225"},{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6EBFAEE-C1D9-48AE-AFE3-2C44CAC74616"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1098","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000410131628.659.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000410131628.659.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0277","sourceIdentifier":"cve@mitre.org","published":"2000-04-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to execute a macro virus, aka the \"XLM Text Macro\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:97:*:*:*:*:*:*:*","matchCriteriaId":"A78536AA-8694-4E0E-B7C6-9E5C3787D849"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"}]}]}],"references":[{"url":"http://www.osvdb.org/1272","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1087","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-022","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0278","sourceIdentifier":"cve@mitre.org","published":"2000-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix:corporation_eviewer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B32E9A3-E460-4A43-B942-0385B1C833BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/current/0006.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1089","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/current/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0279","sourceIdentifier":"cve@mitre.org","published":"2000-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0E8314CD-9480-4F0E-B2E2-DED493C4D575"},{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:4.5:*:*:*:*:*:*:*","matchCriteriaId":"A78731F7-6AFC-4349-972C-929323519225"},{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6EBFAEE-C1D9-48AE-AFE3-2C44CAC74616"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0029.html","source":"cve@mitre.org"},{"url":"http://bebugs.be.com/devbugs/detail.php3?oid=2505312","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1100","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bebugs.be.com/devbugs/detail.php3?oid=2505312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0280","sourceIdentifier":"cve@mitre.org","published":"2000-04-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:6.0:*:win:*:*:*:*:*","matchCriteriaId":"0DF36439-BC5B-4DB9-8AC7-57E4C15CC0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:7.0:*:win:*:*:*:*:*","matchCriteriaId":"27A1EB45-9CDB-434D-81EB-30E590E3F9A7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0018.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1088","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0281","sourceIdentifier":"cve@mitre.org","published":"2000-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:napster:napster_client:beta_5:*:*:*:*:*:*:*","matchCriteriaId":"ABE8E5B3-6378-458D-9B99-89C5D35156F9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0277.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0299.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0282","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+:4:*:*:*:*:*:*:*","matchCriteriaId":"4329D0DC-6FB0-44E1-8FFE-9364A0540542"}]}]}],"references":[{"url":"ftp://ftp.talentsoft.com/Download/Webplus/Unix/Patches/Webplus46p%20Read%20me.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0050.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1102","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.talentsoft.com/Download/Webplus/Unix/Patches/Webplus46p%20Read%20me.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0283","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1106","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0284","sourceIdentifier":"cve@mitre.org","published":"2000-04-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:12.264:*:*:*:*:*:*:*","matchCriteriaId":"22F0C6F3-A9B5-4001-99CF-C8297735D86F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0074.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0085.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0285","sourceIdentifier":"cve@mitre.org","published":"2000-04-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0946A224-6A0C-4DE3-89F9-200682431737"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0076.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1306","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0286","sourceIdentifier":"cve@mitre.org","published":"2000-04-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X fontserver xfs allows local users to cause a denial of service via malformed input to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1111","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0287","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cnc:technology_bizdb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B534A23-7E20-4F79-97D6-13D4975F2AC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0058.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1104","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0288","sourceIdentifier":"cve@mitre.org","published":"2000-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0049.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0289","sourceIdentifier":"cve@mitre.org","published":"2000-03-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:pre_potato:*:*:*:*:*","matchCriteriaId":"2B19ABCB-70F0-450E-9A71-2EE8F2BFB2EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0284.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_48.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1078","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-03/0284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_48.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0290","sourceIdentifier":"cve@mitre.org","published":"2000-03-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar_http_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CEE20C8E-4CEB-4EAF-92B1-69139BA8EC1E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0005.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1822","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4792","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0291","sourceIdentifier":"cve@mitre.org","published":"2000-04-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:staroffice:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C93C6E1-EF21-4CAA-96EC-780BDDA33488"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0077.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1112","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0292","sourceIdentifier":"cve@mitre.org","published":"2000-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:adtran:mx2800:m13:*:*:*:*:*:*:*","matchCriteriaId":"C26D11D0-3C0D-4072-8EF4-6806CE598767"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10004190908140.32750-100000%40localhost.localdomain","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10004190908140.32750-100000%40localhost.localdomain","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0293","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C7F08806-9458-439A-8EAE-2553122262ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*","matchCriteriaId":"E74E0A28-7C78-4160-8BCF-99605285C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0294","sourceIdentifier":"cve@mitre.org","published":"2000-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in healthd for FreeBSD allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jim_housley:healthd:0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E4A3B0-5E5F-4878-96D1-D2281A215248"},{"vulnerable":true,"criteria":"cpe:2.3:a:jim_housley:healthd:0.2:*:*:*:*:*:*:*","matchCriteriaId":"BB9E7024-BD07-4561-99D1-F54771D8A135"},{"vulnerable":true,"criteria":"cpe:2.3:a:jim_housley:healthd:0.3:*:*:*:*:*:*:*","matchCriteriaId":"303A28C2-894F-4140-9C28-0C0982C14A2D"}]}]}],"references":[{"url":"http://www.osvdb.org/606","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1107","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2162","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0295","sourceIdentifier":"cve@mitre.org","published":"2000-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4:*:*:*:*:*:*:*","matchCriteriaId":"288E218A-A047-4840-B782-97458F1A2ED6"}]}]}],"references":[{"url":"http://secunia.com/advisories/7829","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/305589/30/26390/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1131","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000421010946.15318I-200000%40schizo.strange.net","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/305589/30/26390/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000421010946.15318I-200000%40schizo.strange.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0296","sourceIdentifier":"cve@mitre.org","published":"2000-03-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_a._gumienny:fcheck:2.7.45:*:*:*:*:*:*:*","matchCriteriaId":"57D80F13-676D-4B97-A376-2D9F0E85D673"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/current/0011.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1086","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/current/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0297","sourceIdentifier":"cve@mitre.org","published":"2000-04-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:forums:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"56882CBB-6AE2-4918-80FF-CB22CD57DF54"}]}]}],"references":[{"url":"http://www.osvdb.org/1270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1085","source":"cve@mitre.org"},{"url":"http://www2.allaire.com/handlers/index.cfm?ID=15099&Method=Full","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www2.allaire.com/handlers/index.cfm?ID=15099&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0298","sourceIdentifier":"cve@mitre.org","published":"2000-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0027.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1758","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4278","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0299","sourceIdentifier":"cve@mitre.org","published":"2000-04-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:webobjects:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D101474C-842F-45A7-A20D-00F6810C3F13"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0020.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0300","sourceIdentifier":"cve@mitre.org","published":"2000-04-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:9.0:*:*:*:*:*:*:*","matchCriteriaId":"CB0C7336-52DC-4E0D-9F6F-9B401B0A93EB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1093","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000406030958.23902.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000406030958.23902.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0301","sourceIdentifier":"cve@mitre.org","published":"2000-04-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB3992E3-D0C8-4A48-B4E1-D31B0D79CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"65248233-61A3-4085-8808-6FC2FD87EAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B37214DE-41E8-4DD4-AFBF-E608B88D6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6E11FF5E-9B3D-4818-B091-1286ECF47937"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95505800117143&w=2","source":"cve@mitre.org"},{"url":"http://support.ipswitch.com/kb/IM-20000208-DM02.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1094","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=95505800117143&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ipswitch.com/kb/IM-20000208-DM02.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0302","sourceIdentifier":"cve@mitre.org","published":"2000-03-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95453598317340&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/271","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1084","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95453598317340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0303","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_3_arena:1.16n:*:*:*:*:*:*:*","matchCriteriaId":"61EE121C-3B3C-4AD3-8B23-4401A97979A6"}]}]}],"references":[{"url":"http://www.osvdb.org/7531","source":"cve@mitre.org"},{"url":"http://www.quake3arena.com/news/index.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1169","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise50.php3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.quake3arena.com/news/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise50.php3","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0304","sourceIdentifier":"cve@mitre.org","published":"2000-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the \"Undelimited .HTR Request\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1191","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise52.php3","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise52.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0305","sourceIdentifier":"cve@mitre.org","published":"2000-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the \"IP Fragment Reassembly\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6EBFAEE-C1D9-48AE-AFE3-2C44CAC74616"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1236","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2240","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0306","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.04","matchCriteriaId":"9A1BA2CB-466E-437B-A436-2A64A32861BF"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.02a","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1998-12-29&msg=AAh6GYsGU1%40leshka.chuvashia.su","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.02a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1998-12-29&msg=AAh6GYsGU1%40leshka.chuvashia.su","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0307","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:*:*:*:*:*:*:*:*","matchCriteriaId":"ECF5151F-D0FF-42E5-A45B-97E7AAADDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.05","matchCriteriaId":"7D1B2F0A-834B-45F9-9127-520F1374C70F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"B64BFE2D-88F0-4046-9D0C-96D215AD935E"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.07b","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.07b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0308","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9E5E0298-99D9-476D-A7DF-36C6207482DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3480EB1B-425F-403E-A6CD-ADB32DCC00CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"4F156CEA-E3F2-4F2E-8065-FC606DD58F87"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:proxy_server:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8DC46D54-22AD-4AF4-B0C4-27CAAC3674D0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"B64BFE2D-88F0-4046-9D0C-96D215AD935E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0309","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"http://www.openbsd.org/errata24.html#trctrap","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6126","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata24.html#trctrap","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0310","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"}]}]}],"references":[{"url":"http://www.openbsd.org/errata24.html#maxqueue","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7539","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata24.html#maxqueue","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0311","sourceIdentifier":"cve@mitre.org","published":"2000-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the \"Mixed Object Access\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1145","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-026","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0312","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"}]}]}],"references":[{"url":"http://www.openbsd.org/errata25.html#cron","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata25.html#cron","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2000-0313","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"}]}]}],"references":[{"url":"http://www.openbsd.org/errata.html#ifmedia","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7540","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata.html#ifmedia","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0314","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"89F6AB54-5D9F-4EE2-8AA4-7E61F09C7F17"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"BF5ACB4A-7B75-4B29-813D-EDE7E566A754"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"F3CA3C2F-739A-4E61-803A-877978D70468"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"B35CE11D-53A9-4C69-8AC4-2ECE48468125"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=91893782027835&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7574","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=91893782027835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0315","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"89F6AB54-5D9F-4EE2-8AA4-7E61F09C7F17"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1E08495-C0C5-40A9-A8FF-834F5F6083B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"BF5ACB4A-7B75-4B29-813D-EDE7E566A754"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"F3CA3C2F-739A-4E61-803A-877978D70468"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"B35CE11D-53A9-4C69-8AC4-2ECE48468125"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=91893782027835&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7575","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=91893782027835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0316","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0191.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1143","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0191.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0317","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=95729763119559&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1138","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=95729763119559&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0318","sourceIdentifier":"cve@mitre.org","published":"2000-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2C1C96FB-D121-4097-8838-B88C6F87E63A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1144","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0319","sourceIdentifier":"cve@mitre.org","published":"2000-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mail.local in Sendmail 8.10.x does not properly identify the .\\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\\n."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:5.58:*:*:*:*:*:*:*","matchCriteriaId":"1D07F493-9C8D-44A4-8652-F28B46CBA27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:5.59:*:*:*:*:*:*:*","matchCriteriaId":"B8863BB7-833C-462F-BF5F-B27761B05E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.6.x:*:*:*:*:*:*:*","matchCriteriaId":"11C2CB74-F51B-40B9-8008-5EAEA9E8F896"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"C2D488B8-49D0-4AFD-A5C1-63CB036E3886"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.2:*:*:*:*:*:*:*","matchCriteriaId":"A3E2EE58-BCAD-4F26-94B6-F91CF1731429"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.3:*:*:*:*:*:*:*","matchCriteriaId":"10AC2FAD-C4AD-46DD-88D1-4F99433B3476"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.4:*:*:*:*:*:*:*","matchCriteriaId":"3B730F70-5662-4BE4-8202-93E12620CBD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.5:*:*:*:*:*:*:*","matchCriteriaId":"FA6D5E9F-275F-41EB-9707-6B7F129A700F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.6:*:*:*:*:*:*:*","matchCriteriaId":"02C8FAE4-24FF-49E3-A0D5-A94EBCC80EF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.7.x:*:*:*:*:*:*:*","matchCriteriaId":"94C2D541-2E53-44F1-A891-D601F402E1B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8:*:*:*:*:*:*:*","matchCriteriaId":"C973CF06-BEE8-4D79-8649-1510E9EFC29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.1:*:*:*:*:*:*:*","matchCriteriaId":"56D2BAF2-F430-41A1-8DEE-1D9CB2A56C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.2:*:*:*:*:*:*:*","matchCriteriaId":"5E36E877-6028-49DE-8B2E-3087A141F8EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9D8484F8-8712-4B55-A163-BA492B4D0095"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.4:*:*:*:*:*:*:*","matchCriteriaId":"D15777E6-6951-4559-B19F-08CE6246BF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.5:*:*:*:*:*:*:*","matchCriteriaId":"5ADBDC99-E03C-42FC-9A97-133D45FF4810"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.8.x:*:*:*:*:*:*:*","matchCriteriaId":"8A712A7D-1E91-4FE7-A871-5DF20F441198"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F81633D9-456A-4377-93F5-E294146FF2D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_allman:sendmail:8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D4273E93-B536-4B2C-8DAD-84A6F5E38890"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1146","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=2694.000424%40SECURITY.NNOV.RU","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0320","sourceIdentifier":"cve@mitre.org","published":"2000-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qpopper 2.53 and 3.0 does not properly identify the \\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \\n."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:2.53:*:*:*:*:*:*:*","matchCriteriaId":"B223F362-D00F-4D93-8328-33FF1CE331EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1208414-D175-41E2-BCBC-9E5EDBC41FFD"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1133","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=9763.000421%40SECURITY.NNOV.RU","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=9763.000421%40SECURITY.NNOV.RU","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0321","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.14:*:*:*:*:*:*:*","matchCriteriaId":"2A28A174-45A4-4886-8C87-2D475F9ABF18"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0190.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1147","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0322","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1149","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Enip.BSO.23.0004241601140.28851-100000%40www.whitehats.com","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Enip.BSO.23.0004241601140.28851-100000%40www.whitehats.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0323","sourceIdentifier":"cve@mitre.org","published":"1999-07-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the \"Text I-ISAM\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:3.5:*:*:*:*:*:*:*","matchCriteriaId":"DFDB61BB-F95E-4312-9A26-5F883C951141"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:3.51:*:*:*:*:*:*:*","matchCriteriaId":"2FF37F40-A14C-4653-8E7F-360F9ABB45AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D19C4A6-8BDB-4397-9C51-8C9AC2B5D4FE"}]}]}],"references":[{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-08-22&msg=19990729195531.25108.qmail%40underground.org","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030","source":"cve@mitre.org"},{"url":"https://web.archive.org/web/20000819203059/http://xforce.iss.net:80/alerts/vol-4_num-7.php#jet-text-isam","source":"cve@mitre.org"},{"url":"https://www.securityfocus.com/bid/595","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-08-22&msg=19990729195531.25108.qmail%40underground.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://web.archive.org/web/20000819203059/http://xforce.iss.net:80/alerts/vol-4_num-7.php#jet-text-isam","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.securityfocus.com/bid/595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0324","sourceIdentifier":"cve@mitre.org","published":"2000-04-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B543CCFB-954B-4CCF-8BB7-E64DAFA0C1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"09E5DA00-5FDC-42DE-955B-E977E62A2B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:9.0:*:*:*:*:*:*:*","matchCriteriaId":"CB0C7336-52DC-4E0D-9F6F-9B401B0A93EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:pcanywhere:9.2:*:*:*:*:*:*:*","matchCriteriaId":"DFDF9CE6-93A7-49EC-B6B5-428C7517E902"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0201.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0258.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/4347.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1150","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000425150157.13567A-100000%40sword.damocles.com","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/4347.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000425150157.13567A-100000%40sword.damocles.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0325","sourceIdentifier":"cve@mitre.org","published":"1999-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the \"VBA Shell\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:3.5:*:*:*:*:*:*:*","matchCriteriaId":"DFDB61BB-F95E-4312-9A26-5F883C951141"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ABF9FAA0-CCC3-4836-AC45-519E517176FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/548","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3155","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0326","sourceIdentifier":"cve@mitre.org","published":"2000-04-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:on_technology:meeting_maker:1.0:*:*:*:*:*:*:*","matchCriteriaId":"39128C71-4023-4E97-974E-B6B1AD71E5F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:on_technology:meeting_maker:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBC91CD-6D87-446A-A872-6860DE947C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:on_technology:meeting_maker:3.0:*:*:*:*:*:*:*","matchCriteriaId":"18D9F60D-1382-498B-832E-C5F07DE6AD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:on_technology:meeting_maker:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9A79A030-A4E3-40A4-A7CE-11263D61C94D"},{"vulnerable":true,"criteria":"cpe:2.3:a:on_technology:meeting_maker:5.0:*:*:*:*:*:*:*","matchCriteriaId":"6C0C323E-8071-4B3C-98AF-1C0A3175CC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:on_technology:meeting_maker:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D6D755-ED32-4BF1-A4BF-08BF4A230A30"}]}]}],"references":[{"url":"http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1151","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocument","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0327","sourceIdentifier":"cve@mitre.org","published":"1999-10-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the \"Virtual Machine Verifier\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:*","matchCriteriaId":"DC2655D3-B360-4F82-B9CE-EECC95E0FAEE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=93993545118416&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-045","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93993545118416&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0328","sourceIdentifier":"cve@mitre.org","published":"1999-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/604","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0329","sourceIdentifier":"cve@mitre.org","published":"1999-11-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the \"Active Setup Control\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"5680FE7F-95EE-46B2-B930-4A3DC27FD1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"ACC3A8B3-4E8C-46BD-965C-4EF655B9018D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"F7739338-DAE1-403F-B22C-2CFAC884E09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"D45C47A8-8B5F-4A49-8B36-FCBA09029375"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"0CFF1B46-BEDD-4D96-90EA-EE4376AFCAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"84730D4D-7887-4A64-8C76-F50C85309FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"7AAA310C-7DED-40B3-B5EF-80C7407BB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A7B6FB02-F15F-486D-8E7C-40830ABDB62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.27.3110.1:*:*:*:*:*:*:*","matchCriteriaId":"6BAE90D0-1637-49F4-8453-5E9959B55002"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.2106.4:*:*:*:*:*:*:*","matchCriteriaId":"D707B4FB-4BB2-4C84-851B-A8926AC26B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3120.0:*:*:*:*:*:*:*","matchCriteriaId":"7769EE2E-A740-4AE8-B1B1-A5256C12601D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3612.1700:*:*:*:*:*:*:*","matchCriteriaId":"14B52779-4A43-4507-988F-5B5A81658FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0330","sourceIdentifier":"cve@mitre.org","published":"1999-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the \"File Access URL\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0331","sourceIdentifier":"cve@mitre.org","published":"2000-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the \"Malformed Environment Variable\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0147.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1135","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-027","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0332","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrascripts:ultraboard:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FE904F8B-7BC2-4E57-B528-327A45AE24CA"}]}]}],"references":[{"url":"http://www.osvdb.org/1309","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4065","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1164","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000503091316.99073.qmail%40hotmail.com","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000503091316.99073.qmail%40hotmail.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0333","sourceIdentifier":"cve@mitre.org","published":"1999-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"4814B853-3553-43CC-8415-5C3DCE1EB376"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"FE62DEB3-8DF4-424C-AE9C-0573432692B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"C1890B0A-82D7-4445-A90B-971A084425BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9B50919-7C67-416D-BA2F-50747CDBE08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.5a:*:*:*:*:*:*:*","matchCriteriaId":"D4C4E8A8-67BD-4DD9-AB04-53962AE17103"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1165","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000%40paranoia.pgci.ca","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.10.10005021942380.2077-100000%40paranoia.pgci.ca","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0334","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:spectra:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C7218A9E-7AA1-4536-967B-72B37B03C9C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:spectra:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42D8A283-08F2-4F40-AA94-FDE57403DE02"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1181","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=15411&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0335","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5C0577C-6BC7-418F-B2C5-B74800D43418"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E2A0F12-FD00-40B9-86AD-7D082385E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED8F0E8-A969-4F7F-A100-662F4A5426FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AE582B8F-4E31-4D0F-B2F9-AC83C855F751"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DB56D9C9-13B3-418C-B06C-0997E165F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1166","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0336","sourceIdentifier":"cve@mitre.org","published":"2000-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"AC07AD0D-5DF9-41A4-8592-CEFF1842355D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"30017C56-42A9-4AF9-B5B3-7357E424F837"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C8A51F38-3F5A-4F6D-93EE-776B5C2FF48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8DBEC27E-3220-42CE-B6CC-675F387CB506"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D15A193-3E01-467C-AEAD-497F4600DB06"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"F7C765FF-0A3D-4BF4-B236-609658776ACA"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-012.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1232","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-009.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-May/000009.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0337","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0188.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1140","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0338","sourceIdentifier":"cve@mitre.org","published":"2000-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:concurrent_versions_software_project:concurrent_versions_software:-:*:*:*:*:*:*:*","matchCriteriaId":"BB12A3F8-D509-4EC0-86F0-A832C4D1AE57"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1136","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/1136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0339","sourceIdentifier":"cve@mitre.org","published":"2000-04-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.10","matchCriteriaId":"90AB2A1E-E48F-478B-91A3-0F37DD4F152C"}]}]}],"references":[{"url":"http://www.osvdb.org/1294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000421044123.2353.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0340","sourceIdentifier":"cve@mitre.org","published":"2000-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1155","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=00042902575201.09597%40wintermute-pub","source":"cve@mitre.org"},{"url":"http://www.suse.com/us/support/download/updates/axp_63.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=00042902575201.09597%40wintermute-pub","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suse.com/us/support/download/updates/axp_63.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0341","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:cassandra_nntp_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9819E684-0CE8-4AE9-A8A1-AF97F6C42750"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=95736106504870&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1156","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=95736106504870&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0342","sourceIdentifier":"cve@mitre.org","published":"2000-04-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka \"Stealth Attachment.\""}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:4.0:*:*:*:*:*:*:*","matchCriteriaId":"812A1AE1-56DE-4AA7-9AE8-FE36089189F5"}]}]}],"references":[{"url":"http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.peacefire.org/security/stealthattach/explanation.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/1157","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://news.cnet.com/news/0-1005-200-1773077.html?tag=st.ne.fd.lthd.1005-200-1773077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.peacefire.org/security/stealthattach/explanation.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/1157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0343","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brecht_claerhout:sniffit:0.3.6hip:*:*:*:*:*:*:*","matchCriteriaId":"DE24A14F-9755-441A-9364-E8354D840CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:brecht_claerhout:sniffit:0.3.7beta:*:*:*:*:*:*:*","matchCriteriaId":"A9AF026F-809E-44DF-8839-4CBD78F5B600"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1158","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005021736.TAA01991%40ALuSSi","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005021736.TAA01991%40ALuSSi","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0344","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0005012042550.6419-100000%40ferret.lmh.ox.ac.uk","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0005012042550.6419-100000%40ferret.lmh.ox.ac.uk","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0345","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The on-line help system options in Cisco routers allows non-privileged users without \"enabled\" access to obtain sensitive information via the show command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:9.14:*:*:*:*:*:*:*","matchCriteriaId":"327028C0-D9F3-46A3-B2CC-4630FE18C43E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"B36FF40E-EF0A-4149-A35D-8D765EBFFAE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"51382DA5-4EBC-44DC-951F-32FC7AA719A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\)ca:*:*:*:*:*:*:*","matchCriteriaId":"5BA2A1FD-11A3-403A-B5A6-0220CA18EC99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(13\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"3493F361-0C8A-4B66-AF6B-926E2D66BBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(15\\)ca:*:*:*:*:*:*:*","matchCriteriaId":"841513AE-7521-4670-8438-AE5EB70F3A48"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"FF3E8F79-6177-453C-99B5-BC9BC7670869"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\)aa:*:*:*:*:*:*:*","matchCriteriaId":"4B244655-A6A5-40D0-A0D1-34C814DA9389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(16\\)ia:*:*:*:*:*:*:*","matchCriteriaId":"CA064273-1A6E-4303-BAAB-F585691EF9BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\)cc:*:*:*:*:*:*:*","matchCriteriaId":"0A8158E2-0DFE-479B-B085-9775FF700C85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1\\(17\\)ct:*:*:*:*:*:*:*","matchCriteriaId":"29CA3070-B75D-4E56-A338-E10F5509394E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\)f1:*:*:*:*:*:*:*","matchCriteriaId":"17DE2319-19D9-4C02-80B4-0A6AAD853867"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"82BFEABB-6E90-4A24-BBE3-2BDB524028A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)p:*:*:*:*:*:*:*","matchCriteriaId":"F169E322-3D72-4F86-BD5F-74589E5DD823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa1:*:*:*:*:*:*:*","matchCriteriaId":"DBA5D334-6DB8-44B0-92EF-8694BBE79A9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa3:*:*:*:*:*:*:*","matchCriteriaId":"099CFED1-0E2F-46B2-8136-BFA146EB9A00"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)sa5:*:*:*:*:*:*:*","matchCriteriaId":"754F06BF-EB7D-4DAD-BF5D-7DF2619A7499"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)p:*:*:*:*:*:*:*","matchCriteriaId":"047F9781-38B8-488C-B999-A3CA6BDB639C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"3E3586C0-64AF-4584-8F56-7E0756B4A521"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"9B784C9F-79EE-4D08-9D03-985EC7E378FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"FFBA8825-442E-4CAD-A9B2-4DD8546F35F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"F106D24F-7EDD-4A52-9A3A-F25E6EEC1870"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*","matchCriteriaId":"53D87AC5-0F63-4AE8-AC05-FCEC98D18BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*","matchCriteriaId":"AE210B04-7ECD-419C-9258-0F619A353A8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"3B467741-B277-4128-9804-E13ED23FD310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"08E23131-D207-4D98-96D5-2B71FF792604"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E7109585-1433-4940-B7C9-C561DEAF1498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1A0D82E1-CCF7-429B-A637-479E839EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"4F1B2747-4A9C-44FC-BBA8-39E338B30417"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5BB7513-C232-4B4F-BE68-972B05086ABD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"EA263B60-E7C0-4374-96DF-6E4EB9C16743"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"ECCE69A3-41C6-4893-86D4-7F264352C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"387FCCC1-B05D-4493-9F05-BAC5A0E57F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\)s:*:*:*:*:*:*:*","matchCriteriaId":"C4EB360F-7BAE-4BB5-BB55-E3FFC567A1E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router_2500:*:*:*:*:*:*:*:*","matchCriteriaId":"317EF7FA-B744-487C-AEB6-4516CF03F9B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router_2600:*:*:*:*:*:*:*:*","matchCriteriaId":"C3B03AEF-EACD-4B3D-AA1E-EADC344C02BE"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router_3600:*:*:*:*:*:*:*:*","matchCriteriaId":"B0460513-094F-4F99-B0EB-7AA484D21920"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router_4000:*:*:*:*:*:*:*:*","matchCriteriaId":"446980C5-E512-475C-B255-86A8726A67D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router_7200:*:*:*:*:*:*:*:*","matchCriteriaId":"637F3047-DF5B-481D-8595-B54B076A5CD7"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:router_7500:*:*:*:*:*:*:*:*","matchCriteriaId":"CA7F3C4B-378B-4431-B4AF-09D95354363E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1161","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502222246.28423.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502222246.28423.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0346","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:appleshare:6.1:*:*:ja:*:*:*:*","matchCriteriaId":"6E94AA87-3ECE-4C83-9708-4D641C148460"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:appleshare:6.2:*:*:ja:*:*:*:*","matchCriteriaId":"6D2DC8A4-1486-4A59-B914-E23E24D506EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:appleshare:6.3:*:*:ja:*:*:*:*","matchCriteriaId":"5051B185-32D5-42A2-8E42-1534470A4C3D"}]}]}],"references":[{"url":"http://asu.info.apple.com/swupdates.nsf/artnum/n11670","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1162","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502133240.21807.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://asu.info.apple.com/swupdates.nsf/artnum/n11670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000502133240.21807.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0347","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=95737580922397&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1163","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=95737580922397&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0348","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.0","matchCriteriaId":"6BD9B662-61C9-4AF9-BDC2-8F08D3A33B28"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.10a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.10a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0349","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.0","matchCriteriaId":"6BD9B662-61C9-4AF9-BDC2-8F08D3A33B28"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.13a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.13a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0350","sourceIdentifier":"cve@mitre.org","published":"2000-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:networkice:icecap_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.23","matchCriteriaId":"01583654-7EDC-468F-B284-A4EE70304534"}]}]}],"references":[{"url":"http://advice.networkice.com/advice/Support/KB/q000166/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/312","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2220","source":"cve@mitre.org"},{"url":"http://advice.networkice.com/advice/Support/KB/q000166/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0351","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1.0","matchCriteriaId":"6BD9B662-61C9-4AF9-BDC2-8F08D3A33B28"}]}]}],"references":[{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.09b","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/SSE/security_bulletins/SB-99.09b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0352","sourceIdentifier":"cve@mitre.org","published":"1999-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.20:*:*:*:*:*:*:*","matchCriteriaId":"16766308-A2F2-4155-A4F7-702808CC9450"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_36.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/810","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-036.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_36.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9911171818220.12375-100000%40ray.compu-aid.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0353","sourceIdentifier":"cve@mitre.org","published":"1999-06-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:3.98:*:*:*:*:*:*:*","matchCriteriaId":"49E9FC97-FE8B-46E9-BFB5-AC24524CCB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9EAAAD98-14F0-4015-ACD4-B4D21EC86DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.2:*:*:*:*:*:*:*","matchCriteriaId":"17158210-1EEF-4910-B9CB-3E81328B8374"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.10:*:*:*:*:*:*:*","matchCriteriaId":"358A71B0-79F2-4728-AC1E-5872BC64B2C3"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/pine_update_announcement.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_6.html","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1247","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/pine_update_announcement.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/HHP-Pine_remote_exploit.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0354","sourceIdentifier":"cve@mitre.org","published":"2000-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lee_mcloughlin:mirror:2.9:*:*:*:*:*:*:*","matchCriteriaId":"81C0BEE9-F8AE-429F-925D-4085440ACD3C"}]}]}],"references":[{"url":"http://www.debian.org/security/1999/19991018","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_22.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=15769.990928%40tomcat.ru","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/1999/19991018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_22.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=15769.990928%40tomcat.ru","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0355","sourceIdentifier":"cve@mitre.org","published":"1999-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bent_bagger:pbpg:1.1:*:*:*:*:*:*:*","matchCriteriaId":"09E95EB9-AFE3-4362-BE10-7D85C5B34365"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_21.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_21.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0356","sourceIdentifier":"cve@mitre.org","published":"1999-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=1789","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=1789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0357","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"}]}]}],"references":[{"url":"http://www.redhat.com/corp/support/errata/RHSA1999058-01.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/corp/support/errata/RHSA1999058-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0358","sourceIdentifier":"cve@mitre.org","published":"1999-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"}]}]}],"references":[{"url":"http://www.redhat.com/corp/support/errata/RHSA1999058-01.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/corp/support/errata/RHSA1999058-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0359","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:1.90a:*:*:*:*:*:*:*","matchCriteriaId":"A4F572AB-AD2F-4776-9A6C-9FADB1A6EFCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:1.95:*:*:*:*:*:*:*","matchCriteriaId":"0157CE22-BF31-4029-8844-7FF82F1C585F"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6C579A5A-D0A0-4FED-B22D-ED1505C74C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A800C6BA-5141-448D-AD3F-70BAD5356057"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCACB48D-5C8E-444C-9923-A16A72E1A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"45550CD8-4354-44F5-B4B3-300CA77E147F"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"05C9A190-3298-42CA-9EF8-4FE59EA5EC86"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/1626.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_30.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1248","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/1626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_30.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0360","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article."},{"lang":"es","value":"Desbordamiento de buffer en INN 2.2.1 y anteriores permite a un atacante remoto causar denegación de servicio mediante un articulo formateado maliciosamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec:*:*:*:*:*:*:*","matchCriteriaId":"E5D0063D-01CE-49E2-A19A-FA861F3C40CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4sec2:*:*:*:*:*:*:*","matchCriteriaId":"967E86C5-3635-49FF-A98A-C9B2BC85A812"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff3:*:*:*:*:*:*:*","matchCriteriaId":"14DBB010-4064-4B46-834C-6FD5F1FE78FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.4unoff4:*:*:*:*:*:*:*","matchCriteriaId":"EEE0D317-4F02-4896-95FC-20B64EB3A91F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5:*:*:*:*:*:*:*","matchCriteriaId":"9915A668-8E8C-4EC8-A72A-6937EC7D3496"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5658CF74-5AF1-4161-BF4C-6A394F2AA164"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.7:*:*:*:*:*:*:*","matchCriteriaId":"62017AA2-B4DB-44AA-806C-6CFEC839E297"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F9A712-AF96-4A04-B547-F29094ACFE9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2480B45-A626-49F5-A48B-BA6DFAA4411B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21969A37-9F10-4D70-AC73-F3DB4D169AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*","matchCriteriaId":"94FD2948-EF52-464B-A605-DA3806037762"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1CC41E6D-B892-4888-8AEE-12287935F570"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-038.0.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_34.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1249","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-038.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_34.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0361","sourceIdentifier":"cve@mitre.org","published":"1999-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information."},{"lang":"es","value":"El script para PPP wvdial.lxdialog en wvdial 1.4 crea un fichero .config legible por todos los usuarios, que permite a un atacante local del grupo de marcado externto acceder a información de usuarios y contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"67527281-81FA-4068-9E0A-7B19FB6A208A"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_35.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_35.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0362","sourceIdentifier":"cve@mitre.org","published":"1999-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges."},{"lang":"es","value":"Desbordamiento de buffer en cdwtools de Linux, versión 093 y  anteriores, que permite a usuarios locales conseguir privilegios de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_25.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/738","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0363","sourceIdentifier":"cve@mitre.org","published":"1999-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory."},{"lang":"es","value":"cdwtools 093 y anteriores de Linux permite a usuarios locales obtener privilegios de root a través del directorio /tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_25.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/738","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0364","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92877527701347&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92886009012161&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/corp/support/errata/RHSA1999014_01.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/309","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92877527701347&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92886009012161&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/corp/support/errata/RHSA1999014_01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0365","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=92877527701347&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92886009012161&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/corp/support/errata/RHSA1999014_01.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/308","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=92877527701347&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=92886009012161&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/corp/support/errata/RHSA1999014_01.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0366","sourceIdentifier":"cve@mitre.org","published":"1999-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files."},{"lang":"es","value":"volcado en Debian GNU/Linux 2.1 no restarura adecuadamente los vínculos simbólicos (symlinks), lo que permite a un usuario local modificar la propiedad de ficheros arbitrariamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"}]}]}],"references":[{"url":"http://www.debian.org/security/1999/19991202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1442","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/1999/19991202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0367","sourceIdentifier":"cve@mitre.org","published":"1999-02-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges."},{"lang":"es","value":"Vulnerabilidad en eterm 0.8.8 en Devial GNU/Linux permite a un atacante obtener privilegios de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_jennings:eterm:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"CE5961CA-6A25-421C-9856-899A7E442149"}]}]}],"references":[{"url":"http://www.debian.org/security/1999/19990218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/1999/19990218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0368","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data."},{"lang":"es","value":"Classic Cisco IOD 9.1 y anteriores permite a atacantes con acceso al inductor de login obtener porciones de la historia de comandos de usuarios anteriores, lo que puede permitir al atacante obtener datos sensibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"91986F0D-94E5-4ED9-A98D-123C99FD43CE"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/j-009.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/ioshist-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/j-009.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/770/ioshist-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0369","sourceIdentifier":"cve@mitre.org","published":"1999-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service."},{"lang":"es","value":"El servidor IDENT de Caldera Linux 2.3 crea múltiples hilos para cada petición IDENT, lo que permite a atacantes remotos causar una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-029.1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1266","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-029.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0370","sourceIdentifier":"cve@mitre.org","published":"1999-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command."},{"lang":"es","value":"La opción de depuración en smail de Caldera Linux permite a atacantes remotos ejecutar comandos mediante metacaracteres de shell en la opción -D del comando rmail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ABC52A20-B706-432D-9A15-45F48EB1B08B"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F8A9DB15-1F04-4864-A8AD-FCCB35A63B2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A5C77FA7-C977-4223-B6AC-91B82C45129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EED21F27-4ADA-42AC-B28E-F849F47D4043"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-001.0.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1268","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-001.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0371","sourceIdentifier":"cve@mitre.org","published":"1999-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack."},{"lang":"es","value":"La librería libmediatool usada para el mediatool de KDE permite a usuarios locales crear ficheros arbitrarios mediante un ataque de enlaces simbólicos (symlink attack)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"55B38F8C-9451-441B-BCD8-E41C1A2231DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D04A4717-229D-4E20-8FD2-DC13757B0AC5"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-005.0.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1269","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-005.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0372","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-014.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2268","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-014.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0373","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kvt:*:*:*:*:*:*:*:*","matchCriteriaId":"5B226842-28F7-49F6-954B-135D9BA131F3"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-015.0.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA1999015_01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2266","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-015.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA1999015_01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/2266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0374","sourceIdentifier":"cve@mitre.org","published":"1999-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"86288A2E-B1BD-4DA9-BCCC-35AC44EEDD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1446","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4856","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-1999-021.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0375","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}]}]}],"references":[{"url":"http://www.osvdb.org/6084","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0376","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-drive:filo:1.01:*:*:*:*:*:*:*","matchCriteriaId":"E44E96D5-DA23-48D3-A02B-C0827DF24EF5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1324","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0377","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the \"Remote Registry Access Authentication\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=264684","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1331","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-040","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1021","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=264684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0378","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0023.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1176","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0379","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netopia:r-series_routers:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"2E769B01-CD4A-4307-A647-70F7476C3F58"}]}]}],"references":[{"url":"http://www.netopia.com/equipment/purchase/fmw_update.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1177","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005082054.NAA32590%40linux.mtndew.com","source":"cve@mitre.org"},{"url":"http://www.netopia.com/equipment/purchase/fmw_update.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005082054.NAA32590%40linux.mtndew.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0380","sourceIdentifier":"cve@mitre.org","published":"2000-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(4\\)f1:*:*:*:*:*:*:*","matchCriteriaId":"17DE2319-19D9-4C02-80B4-0A6AAD853867"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"82BFEABB-6E90-4A24-BBE3-2BDB524028A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\)p:*:*:*:*:*:*:*","matchCriteriaId":"F169E322-3D72-4F86-BD5F-74589E5DD823"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)p:*:*:*:*:*:*:*","matchCriteriaId":"047F9781-38B8-488C-B999-A3CA6BDB639C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(9\\)xa:*:*:*:*:*:*:*","matchCriteriaId":"3E3586C0-64AF-4584-8F56-7E0756B4A521"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"9B784C9F-79EE-4D08-9D03-985EC7E378FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"FFBA8825-442E-4CAD-A9B2-4DD8546F35F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"F106D24F-7EDD-4A52-9A3A-F25E6EEC1870"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2A6F8329-15C7-4FED-A61D-5AF4F3A33976"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\)ed:*:*:*:*:*:*:*","matchCriteriaId":"CD13732A-DAE0-4D5B-9DAC-6D2CF391220D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\)t:*:*:*:*:*:*:*","matchCriteriaId":"A53DE80A-5865-4514-BE14-BA5992EE7BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*","matchCriteriaId":"655BB9C1-BA90-452E-A9C8-9B1E15B99650"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*","matchCriteriaId":"53D87AC5-0F63-4AE8-AC05-FCEC98D18BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*","matchCriteriaId":"AE210B04-7ECD-419C-9258-0F619A353A8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"3B467741-B277-4128-9804-E13ED23FD310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"08E23131-D207-4D98-96D5-2B71FF792604"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E7109585-1433-4940-B7C9-C561DEAF1498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1A0D82E1-CCF7-429B-A637-479E839EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"4F1B2747-4A9C-44FC-BBA8-39E338B30417"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5BB7513-C232-4B4F-BE68-972B05086ABD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"EA263B60-E7C0-4374-96DF-6E4EB9C16743"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"ECCE69A3-41C6-4893-86D4-7F264352C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"387FCCC1-B05D-4493-9F05-BAC5A0E57F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\)s:*:*:*:*:*:*:*","matchCriteriaId":"C4EB360F-7BAE-4BB5-BB55-E3FFC567A1E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1302","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1154","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/ioshttpserver-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0381","sourceIdentifier":"cve@mitre.org","published":"2000-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gossamer_threads:dbman:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F46D142E-0060-41CF-9F60-7C80F4FFE11F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0067.html","source":"cve@mitre.org"},{"url":"http://www.perfectotech.com/blackwatchlabs/vul5_05.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1178","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.perfectotech.com/blackwatchlabs/vul5_05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0382","sourceIdentifier":"cve@mitre.org","published":"2000-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:clustercats:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5D6643CF-8F88-4168-8D43-B954B1E7CBD5"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=15697&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1179","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=15697&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0383","sourceIdentifier":"cve@mitre.org","published":"2000-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E00F0805-8C73-43B1-87AC-744434046E59"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1180","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=002401bfb918%247310d5a0%241ef084ce%40karemor.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=002401bfb918%247310d5a0%241ef084ce%40karemor.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0384","sourceIdentifier":"cve@mitre.org","published":"2000-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:netstructure_7110:*:*:*:*:*:*:*:*","matchCriteriaId":"141BF9B0-29DC-42DC-A53E-96818BE1450F"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:netstructure_7180:*:*:*:*:*:*:*:*","matchCriteriaId":"9FEE7633-BA33-4D8B-B6B4-B914707666AB"}]}]}],"references":[{"url":"http://216.188.41.136/","source":"cve@mitre.org"},{"url":"http://www.l0pht.com/advisories/ipivot7180.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lopht.com/advisories/ipivot7110.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1182","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1183","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://216.188.41.136/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.l0pht.com/advisories/ipivot7180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lopht.com/advisories/ipivot7110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0385","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filemaker:filemaker:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"C5E304BE-7628-463F-B27B-C4F7A6398669"}]}]}],"references":[{"url":"http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html","source":"cve@mitre.org"},{"url":"http://www.filemaker.com/support/webcompanion.html","source":"cve@mitre.org"},{"url":"http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.filemaker.com/support/webcompanion.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0386","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:filemaker:filemaker:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"C5E304BE-7628-463F-B27B-C4F7A6398669"}]}]}],"references":[{"url":"http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html","source":"cve@mitre.org"},{"url":"http://www.filemaker.com/support/webcompanion.html","source":"cve@mitre.org"},{"url":"http://www.blueworld.com/blueworld/news/05.01.00-FM5_Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.filemaker.com/support/webcompanion.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0387","sourceIdentifier":"cve@mitre.org","published":"2000-05-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_siegel:golddig:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B4F416BC-FB54-4CE1-86CA-931214005408"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:16.golddig.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1184","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:16.golddig.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0388","sourceIdentifier":"cve@mitre.org","published":"1990-05-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A17.libmytinfo.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1185","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A17.libmytinfo.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0389","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:cygnus_network_security:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05857121-8827-45FD-886F-4269E0336036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:kerbnet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE1B0821-64F1-46E3-8DD3-12FFD1B037F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1220","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0390","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:cygnus_network_security:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05857121-8827-45FD-886F-4269E0336036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:kerbnet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE1B0821-64F1-46E3-8DD3-12FFD1B037F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4884","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1220","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0391","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:cygnus_network_security:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05857121-8827-45FD-886F-4269E0336036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:kerbnet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE1B0821-64F1-46E3-8DD3-12FFD1B037F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4876","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1220","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0392","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:cygnus_network_security:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05857121-8827-45FD-886F-4269E0336036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:kerbnet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE1B0821-64F1-46E3-8DD3-12FFD1B037F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1220","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-05/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0393","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privileges by specifying an alternate program to execute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"55B38F8C-9451-441B-BCD8-E41C1A2231DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D04A4717-229D-4E20-8FD2-DC13757B0AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D6767505-CFD5-4C66-A67A-4740E2994CC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"FC14C38A-AAA8-463E-AA7C-F16C6CB3A3EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_50.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1206","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_50.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0394","sourceIdentifier":"cve@mitre.org","published":"2000-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axent:netprowler:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B2EFBF71-2A4B-4714-A129-AA9D278A9E4A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95878603510835&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1225","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=392AD3B3.3E9BE3EA%40axent.com","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95878603510835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=392AD3B3.3E9BE3EA%40axent.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0395","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computalynx:cproxy_server:3.3sp2:*:*:*:*:*:*:*","matchCriteriaId":"3861E18D-7B9F-4249-9900-2382F08C7346"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1213","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=007d01bfbf48%24e44f0e40%2401dc11ac%40peopletel.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=007d01bfbf48%24e44f0e40%2401dc11ac%40peopletel.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0396","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pacific_software:carello:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"888076E8-B384-467E-9F6E-5FA517DAA4D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0285.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1245","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0397","sourceIdentifier":"cve@mitre.org","published":"2000-05-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:emurl:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D31CABA9-4306-4EA7-A3C7-5DCC38B7EC43"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0160.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1203","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0160.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0398","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rockliffe:mailsite:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"DEDA707F-1198-4978-96A3-15FFC9D1BA28"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0286.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1244","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0286.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0399","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74E791DD-1376-4E77-9D7B-C66E88146248"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"6906B4D1-9336-4E52-A1D4-1402F5EF2BBA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0301.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1250","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0301.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0400","sourceIdentifier":"cve@mitre.org","published":"2000-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95868514521257&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1221","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95868514521257&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0401","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pdgsoft:pdg_shopping_cart:1.5:*:*:*:*:*:*:*","matchCriteriaId":"90887F5A-23E7-4A0B-9E5A-811878D09A82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95928319715983&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=95928667119963&w=2","source":"cve@mitre.org"},{"url":"http://www.pdgsoft.com/Security/security2.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1256","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95928319715983&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=95928667119963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pdgsoft.com/Security/security2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0402","sourceIdentifier":"cve@mitre.org","published":"2000-05-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the \"SQL Server 7.0 Service Pack Password\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=263968","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1281","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-035","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=263968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0403","sourceIdentifier":"cve@mitre.org","published":"2000-05-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the \"HostAnnouncement Flooding\" or \"HostAnnouncement Frame\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=263307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1261","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=263307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0404","sourceIdentifier":"cve@mitre.org","published":"2000-05-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the \"ResetBrowser Frame\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=262694","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1262","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=262694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0405","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atstake:antisniff:1.0:*:researchers:*:*:*:*:*","matchCriteriaId":"AC219D32-93D7-4292-AF1A-4A0DB386AB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:atstake:antisniff:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"10624CE0-7BDC-4057-BD49-E6CCE5DC366B"}]}]}],"references":[{"url":"http://www.l0pht.com/advisories/asniff_advisory.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1207","source":"cve@mitre.org"},{"url":"http://www.l0pht.com/advisories/asniff_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0406","sourceIdentifier":"cve@mitre.org","published":"2000-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the \"Acros-Suencksen SSL\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.05:*:*:*:*:*:*:*","matchCriteriaId":"494AFC1E-67A3-41CA-B920-B8F778B68A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"213EB326-33D1-4329-A6BB-B1AA1C626E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"}]}]}],"references":[{"url":"http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-05.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-028.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1188","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-2000-04-06-1-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0407","sourceIdentifier":"cve@mitre.org","published":"2000-05-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0141.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1200","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0141.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0408","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the \"Malformed Extension Data in URL\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=260205","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1190","source":"cve@mitre.org"},{"url":"http://www.ussrback.com/labs40.html","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=260205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ussrback.com/labs40.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0409","sourceIdentifier":"cve@mitre.org","published":"2000-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1201","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0410","sourceIdentifier":"cve@mitre.org","published":"2000-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FA98847-8A14-409C-86E8-C7652E5ECF0C"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1192","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0005&L=ntbugtraq&F=&S=&P=4843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0411","sourceIdentifier":"cve@mitre.org","published":"2000-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.6:*:*:*:*:*:*:*","matchCriteriaId":"B565A52D-EA07-4603-91B7-0105E632A2EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0125.html","source":"cve@mitre.org"},{"url":"http://www.perfectotech.com/blackwatchlabs/vul5_10.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1187","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.perfectotech.com/blackwatchlabs/vul5_10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0412","sourceIdentifier":"cve@mitre.org","published":"1999-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the client by specifying the full pathname for the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:napster:knapster:napster:*:*:*:*:*:*:*","matchCriteriaId":"D374899D-763B-49F9-96D8-831D7573BD0E"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1186","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:18-gnapster.adv","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0124.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0413","sourceIdentifier":"cve@mitre.org","published":"2000-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requesting a file that does not exist, which generates an error message that reveals the path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0084.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1174","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0414","sourceIdentifier":"cve@mitre.org","published":"2000-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:10.24:*:*:*:*:*:*:*","matchCriteriaId":"D9B7C178-4BE6-4397-A4E2-01375E4CA978"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*","matchCriteriaId":"1D462D6F-EB68-4E31-87FD-D918F5DEF3FB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0047.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1214","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0415","sourceIdentifier":"cve@mitre.org","published":"2000-05-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6764F97F-6906-4953-BB1C-AA6345FA8FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.01:*:*:*:*:*:*:*","matchCriteriaId":"BA267F42-5A1F-4663-9D4D-AF5DD64FD2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.27.3110.1:*:*:*:*:*:*:*","matchCriteriaId":"6BAE90D0-1637-49F4-8453-5E9959B55002"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.2106.4:*:*:*:*:*:*:*","matchCriteriaId":"D707B4FB-4BB2-4C84-851B-A8926AC26B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3120.0:*:*:*:*:*:*:*","matchCriteriaId":"7769EE2E-A740-4AE8-B1B1-A5256C12601D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3612.1700:*:*:*:*:*:*:*","matchCriteriaId":"14B52779-4A43-4507-988F-5B5A81658FF5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1195","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0416","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.gordano.com/support/archives/ntmail/2000-05/00001114.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1196","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NABBJLKKPKIHDIMKFKGCMEFANMAB.georger%40nls.net","source":"cve@mitre.org"},{"url":"http://www.gordano.com/support/archives/ntmail/2000-05/00001114.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NABBJLKKPKIHDIMKFKGCMEFANMAB.georger%40nls.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0417","sourceIdentifier":"cve@mitre.org","published":"2000-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:3220-h_dsl_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C4894F-C634-4830-B0D8-F6158C074A89"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.3build_r1:*:*:*:*:*:*:*","matchCriteriaId":"3E87B9E4-3AF8-46D3-B2EF-23F22DBE77AA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.3build_r2:*:*:*:*:*:*:*","matchCriteriaId":"9E294847-D685-4D03-B92B-D78C3B4FDFC8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.5build_r0:*:*:*:*:*:*:*","matchCriteriaId":"DF8ECB8A-EDFF-461D-9F6A-80EB8DE9EDEB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0075.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1219","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0418","sourceIdentifier":"cve@mitre.org","published":"2000-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:3220-h_dsl_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C4894F-C634-4830-B0D8-F6158C074A89"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.3:*:*:*:*:*:*:*","matchCriteriaId":"6894F902-4173-4A61-A836-39FC875A0C1D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.3build_r1:*:*:*:*:*:*:*","matchCriteriaId":"3E87B9E4-3AF8-46D3-B2EF-23F22DBE77AA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.3build_r2:*:*:*:*:*:*:*","matchCriteriaId":"9E294847-D685-4D03-B92B-D78C3B4FDFC8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.5build_r0:*:*:*:*:*:*:*","matchCriteriaId":"DF8ECB8A-EDFF-461D-9F6A-80EB8DE9EDEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:gatorsurf:5.5build_r1:*:*:*:*:*:*:*","matchCriteriaId":"075DC008-B7E8-4707-BB69-BBC63E03C736"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1240","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0280.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0419","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Office 2000 UA ActiveX Control is marked as \"safe for scripting,\" which allows remote attackers to conduct unauthorized activities via the \"Show Me\" function in Office Help, aka the \"Office 2000 UA Control\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*","matchCriteriaId":"90D7BA07-3BCA-41CF-B5D3-341E912650A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*","matchCriteriaId":"D2C6629C-BF53-49A1-B32C-A828CA0A0500"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:photodraw_2000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFE1D04D-8B79-4401-9225-F15EDEBDDFC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*","matchCriteriaId":"3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2000:*:*:*:*:*:*:*","matchCriteriaId":"3F09162C-01F0-4056-94D3-995713F92AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2000:*:*:*:*:*:*:*","matchCriteriaId":"78389936-D2E5-4A3A-8E7A-AA42FFAD832B"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2000-07.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=262767","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1197","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=262767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0420","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System (EFS) data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0112.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1198","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0421","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1199","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0422","sourceIdentifier":"cve@mitre.org","published":"2000-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.5d:*:*:*:*:*:*:*","matchCriteriaId":"EF456029-C817-4FC5-AFE2-9637219E220C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95749276827558&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1171","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95749276827558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0423","sourceIdentifier":"cve@mitre.org","published":"2000-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dnews:5.3:*:*:*:*:*:*:*","matchCriteriaId":"042F5F6C-3F2F-4847-B94B-C38AD2E69D81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95764950403250&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1172","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95764950403250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0424","sourceIdentifier":"cve@mitre.org","published":"2000-05-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:george_burgyan:cgi_counter:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1AA621CE-EA92-4BCA-A588-1F8FB8B5F9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:george_burgyan:cgi_counter:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0DC7B0FA-174C-42D1-A43F-1F250BCB0C92"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005151024.aa01811%40blaze.arl.mil","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200005151024.aa01811%40blaze.arl.mil","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0425","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lsoft:listserv:1.8:*:*:*:*:*:*:*","matchCriteriaId":"B0D4962F-C7E7-4EE2-880C-0E58D7E6B9D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0048.html","source":"cve@mitre.org"},{"url":"http://www.lsoft.com/news/default.asp?item=Advisory0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1167","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lsoft.com/news/default.asp?item=Advisory0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0426","sourceIdentifier":"cve@mitre.org","published":"2000-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrascripts:ultraboard:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FE904F8B-7BC2-4E57-B528-327A45AE24CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0059.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1175","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0427","sourceIdentifier":"cve@mitre.org","published":"2000-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_knowledge_systems:etoken:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2433D9B8-4C1A-4873-9E9A-E640CF34A1DF"}]}]}],"references":[{"url":"http://www.l0pht.com/advisories/etoken-piepa.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3266","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1170","source":"cve@mitre.org"},{"url":"http://www.l0pht.com/advisories/etoken-piepa.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0428","sourceIdentifier":"cve@mitre.org","published":"2000-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC14336-CD53-44F7-B271-3C98C016295B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D948171A-3B54-462A-8B2E-2C0266A37E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7A9D4E2E-889B-4233-8887-9CF00A5023A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.32:*:*:*:*:*:*:*","matchCriteriaId":"2F72A6DE-BA1B-4907-B19D-D71B172BB249"}]}]}],"references":[{"url":"http://www.nai.com/nai_labs/asp_set/advisory/39_Trend.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1168","source":"cve@mitre.org"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/39_Trend.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0429","sourceIdentifier":"cve@mitre.org","published":"2000-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:2.6:*:*:*:*:*:*:*","matchCriteriaId":"D1B408F8-482A-4C1C-AE51-89E6E78F8F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6CF765E6-54DC-42DE-A853-2170F4F8A91E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95686068203138&w=2","source":"cve@mitre.org"},{"url":"http://www.cart32.com/kbshow.asp?article=c048","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95686068203138&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cart32.com/kbshow.asp?article=c048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0430","sourceIdentifier":"cve@mitre.org","published":"2000-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6CF765E6-54DC-42DE-A853-2170F4F8A91E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95738697301956&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1358","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95738697301956&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0431","sourceIdentifier":"cve@mitre.org","published":"2000-05-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1238","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000523100045.B11049%40HiWAAY.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0432","sourceIdentifier":"cve@mitre.org","published":"2000-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_kruse:calendar_script:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E08A53C7-6E35-4ED3-8428-91A16664556B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0173.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0173.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0433","sourceIdentifier":"cve@mitre.org","published":"2000-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C7F08806-9458-439A-8EAE-2553122262ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*","matchCriteriaId":"E74E0A28-7C78-4160-8BCF-99605285C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_47.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_47.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0434","sourceIdentifier":"cve@mitre.org","published":"2000-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_redman:allmanage:2.6:*:*:*:*:*:*:*","matchCriteriaId":"625922AE-179F-494E-89ED-C9DB478E69C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1217","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0435","sourceIdentifier":"cve@mitre.org","published":"2000-05-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_redman:allmanage:2.6:*:*:*:*:*:*:*","matchCriteriaId":"625922AE-179F-494E-89ED-C9DB478E69C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1337","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1217","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0436","sourceIdentifier":"cve@mitre.org","published":"2000-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5C98E0B7-075B-47BC-8D33-D4A9F86FFA1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.1:*:*:*:*:*:*:*","matchCriteriaId":"01BA0C6F-7853-4CDE-8F38-4C2D81234BB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.2:*:*:*:*:*:*:*","matchCriteriaId":"26C7E0F0-0035-4BCF-ACB4-CF32F43753A4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0254.html","source":"cve@mitre.org"},{"url":"http://www.metaproducts.com/mpOE-HY.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/1231","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.metaproducts.com/mpOE-HY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/1231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0437","sourceIdentifier":"cve@mitre.org","published":"2000-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the CyberPatrol daemon \"cyberdaemon\" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1635EFBA-AD1C-4C02-B714-A11E78600703"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:4.2:*:*:*:*:*:*:*","matchCriteriaId":"342EA025-24C8-440F-9D63-B6808198C444"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7A91D5DB-D09F-4CF6-99B2-B444FAD91A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:5.5:*:*:*:*:*:*:*","matchCriteriaId":"E0B3829B-8730-47B8-BB3F-7D9EF10A7886"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield:4.0:*:solaris:*:*:*:*:*","matchCriteriaId":"07C41A94-7162-4866-8B3E-B3D23380095E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:network_associates:webshield_e-ppliance:100.0:*:*:*:*:*:*:*","matchCriteriaId":"140F366D-B19D-4BEC-8211-894FA2ADA381"},{"vulnerable":true,"criteria":"cpe:2.3:h:network_associates:webshield_e-ppliance:300.0:*:*:*:*:*:*:*","matchCriteriaId":"2AC41A6A-E973-4C18-A481-0D29349ECB3E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0249.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/322","source":"cve@mitre.org"},{"url":"http://www.pgp.com/jump/gauntlet_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1234","source":"cve@mitre.org"},{"url":"http://www.tis.com/support/cyberadvisory.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pgp.com/jump/gauntlet_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tis.com/support/cyberadvisory.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0438","sourceIdentifier":"cve@mitre.org","published":"2000-05-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in fdmount on Linux systems allows local users in the \"floppy\" group to execute arbitrary commands via a long mountpoint parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5B4C973D-1172-4D4C-AF96-9968ED317D36"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.3:*:*:*:*:*:*:*","matchCriteriaId":"06F2131E-F9F2-4E65-B95C-B52DB25C69F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.4:*:*:*:*:*:*:*","matchCriteriaId":"E6732144-10D4-4114-A7DA-32157EE3EF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.5:*:*:*:*:*:*:*","matchCriteriaId":"125918E7-53BB-407A-8D95-5D95CDF39A88"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.6:*:*:*:*:*:*:*","matchCriteriaId":"CE0BBA4F-C61A-4A8E-A7E2-CE0DF76DF592"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:3.9:*:*:*:*:*:*:*","matchCriteriaId":"15CB96AA-7CC1-4F01-8E9A-F85CD851594A"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC3B1DD9-10B5-40FE-AE56-D068C41653DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7716120D-5110-42B0-A574-9AA2AC8D3C32"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5CC7D746-B98B-4FAF-B816-57222759A344"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"830D48B8-D21D-4D31-99A1-20C231804DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"981A0654-C17D-48BB-A8B3-A728CB159C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AA8956D-F533-42BA-A06B-7CDB0A267B2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0245.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1239","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0439","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the \"Unauthorized Cookie Access\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1BBF9241-A175-438C-A793-3D245BE2AE35"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8873A08F-D4C7-46FC-8FE5-972644F85ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.osvdb.org/1326","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000511135609.D7774%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NDBBKGHPMKBKDDGLDEEHAEHMDIAA.rms2000%40bellatlantic.net","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4447","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000511135609.D7774%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NDBBKGHPMKBKDDGLDEEHAEHMDIAA.rms2000%40bellatlantic.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0440","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-002.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0088.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1173","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-002.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0441","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0275.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1241","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0275.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0442","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:2.52:*:*:*:*:*:*:*","matchCriteriaId":"D691E685-7C2D-4EB8-9088-7F9D0E905F31"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:2.53:*:*:*:*:*:*:*","matchCriteriaId":"B223F362-D00F-4D93-8328-33FF1CE331EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0267.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_51.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1242","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_51.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0443","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*","matchCriteriaId":"17A6954A-D8E0-4ADF-BB64-329D7589F38A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0281.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1243","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0281.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0444","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*","matchCriteriaId":"17A6954A-D8E0-4ADF-BB64-329D7589F38A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0277.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1246","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0445","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:5.0_linux:*:*:*:*:*:*:*","matchCriteriaId":"C0A66DFA-F3E7-46DA-9D14-9F7E6AE434C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:5.0i:*:*:*:*:*:*:*","matchCriteriaId":"E8B8CF74-2F7D-418A-B271-07A39A267C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:6.5_linux:*:*:*:*:*:*:*","matchCriteriaId":"39EE190C-D0F1-41E4-8A27-B399760A2797"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0273.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1355","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1251","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0446","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marty_bochane:mdbms:0.9_xbx:*:*:*:*:*:*:*","matchCriteriaId":"15002E13-4631-42A0-9AF4-64BD1B020A08"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0274.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1252","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0447","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"D1D831D5-5266-4554-8CB1-731692ACBA9F"}]}]}],"references":[{"url":"http://www.osvdb.org/327","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1254","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0448","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"D1D831D5-5266-4554-8CB1-731692ACBA9F"}]}]}],"references":[{"url":"http://www.osvdb.org/326","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=6C740781F92BD411831F0090273A8AB806FD4A%40exchange.servers.delphis.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0449","sourceIdentifier":"cve@mitre.org","published":"2000-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnis:studio:2.4:*:*:*:*:*:*:*","matchCriteriaId":"02AAE5E5-C466-46FC-B5D6-9D25D5877741"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0311.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1255","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0311.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0450","sourceIdentifier":"cve@mitre.org","published":"2000-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"073613CC-638B-46A9-8BBD-A1D313864BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D29324C9-7C4A-4A5A-A595-A0666498AC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4g:*:*:*:*:*:*:*","matchCriteriaId":"9FDEC456-9591-4195-A251-2196F3049A22"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4h1:*:*:*:*:*:*:*","matchCriteriaId":"3A6B2570-E8A4-41C8-A5AD-D64333A133E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0216.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1257","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0451","sourceIdentifier":"cve@mitre.org","published":"2000-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_8100:*:*:*:*:*:*:*:*","matchCriteriaId":"3218FE18-1E23-43F6-930D-8889EB1F845F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0229.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1228","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0452","sourceIdentifier":"cve@mitre.org","published":"2000-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6256A050-8C38-4CC2-86F2-3364FAABDE59"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C0A1146D-E261-4AE9-8852-5988B3AB5865"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E5FD1CC4-DFD4-4A32-AD45-353583463916"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF6E13D4-7764-4A02-B599-B68BB45F4AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC4294-9363-406C-8C64-964A95DA2052"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DB86430D-3A2D-4A07-A94B-731640E24269"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0219.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/321","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1229","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0453","sourceIdentifier":"cve@mitre.org","published":"2000-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B43D5F86-97B2-4175-8ED7-1F937850F9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0946A224-6A0C-4DE3-89F9-200682431737"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-012.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0223.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1235","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-012.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0223.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0454","sourceIdentifier":"cve@mitre.org","published":"2000-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0367.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0434.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0019.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1265","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0367.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0434.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0455","sourceIdentifier":"cve@mitre.org","published":"2000-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_bagley:xlock:4.16:*:*:*:*:*:*:*","matchCriteriaId":"DE36D516-F942-4398-BEFE-9C7E28CCE2DA"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-003.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0375.html","source":"cve@mitre.org"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/41initialized.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1267","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-003.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0375.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/41initialized.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0456","sourceIdentifier":"cve@mitre.org","published":"2000-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka \"cpu-hog\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:alpha:*:*:*:*:*","matchCriteriaId":"247ABD95-74CA-45B8-8729-3C35C9E11186"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:arm32:*:*:*:*:*","matchCriteriaId":"1D4C44E8-075A-4B48-88DA-2CAC25CDF159"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:sparc:*:*:*:*:*","matchCriteriaId":"19D1E7AC-79B6-4136-ADB2-06BEE9773795"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:x86:*:*:*:*:*","matchCriteriaId":"E2EE8A19-8AB1-4283-95EA-9EE3C7E5DED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6FA1C84C-6624-4032-8D0E-5EBB054F5224"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*","matchCriteriaId":"06B9ADAD-ADDC-47AC-9924-B31B17DDF163"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*","matchCriteriaId":"6DC0D30E-DBF1-4FDB-80C0-80DB50D9E77A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*","matchCriteriaId":"537FD523-1D44-4D85-AED1-C092E0155CF2"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-005.txt.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1365","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1272","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0457","sourceIdentifier":"cve@mitre.org","published":"2000-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr extension, aka the \".HTR File Fragment Reading\" or \"File Fragment Reading via .HTR\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95810120719608&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1193","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4448","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95810120719608&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0458","sourceIdentifier":"cve@mitre.org","published":"2000-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F0F032E4-518E-43A7-926D-CB7F9F702330"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D4188591-6049-4184-88B4-63EF708C7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"382BE04C-F526-4450-9E5E-CA5BB98DD145"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.2_pre9:*:*:*:*:*:*:*","matchCriteriaId":"439EC501-2922-42BA-86A7-235F9E8CDF08"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.2_pre10:*:*:*:*:*:*:*","matchCriteriaId":"694CE5EF-9FF9-42B9-AE2F-8FEF039794C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95672120116627&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1360","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95672120116627&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0459","sourceIdentifier":"cve@mitre.org","published":"2000-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F0F032E4-518E-43A7-926D-CB7F9F702330"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"D4188591-6049-4184-88B4-63EF708C7A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"382BE04C-F526-4450-9E5E-CA5BB98DD145"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.2_pre9:*:*:*:*:*:*:*","matchCriteriaId":"439EC501-2922-42BA-86A7-235F9E8CDF08"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.2_pre10:*:*:*:*:*:*:*","matchCriteriaId":"694CE5EF-9FF9-42B9-AE2F-8FEF039794C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.2_pre11:*:*:*:*:*:*:*","matchCriteriaId":"A8A4A17F-2363-489B-89B4-0B8FD1FCC3AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:imp:imp:2.2_pre12:*:*:*:*:*:*:*","matchCriteriaId":"1B1A3F7C-C795-45F6-BC6A-FB591D287287"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95672120116627&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1361","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95672120116627&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0460","sourceIdentifier":"cve@mitre.org","published":"2000-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"55B38F8C-9451-441B-BCD8-E41C1A2231DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D04A4717-229D-4E20-8FD2-DC13757B0AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F472ECE0-821E-4A20-B6FC-CC4FC5D1BA36"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D6767505-CFD5-4C66-A67A-4740E2994CC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0353.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1274","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0353.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0461","sourceIdentifier":"cve@mitre.org","published":"2000-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:alpha:*:*:*:*:*","matchCriteriaId":"247ABD95-74CA-45B8-8729-3C35C9E11186"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:arm32:*:*:*:*:*","matchCriteriaId":"1D4C44E8-075A-4B48-88DA-2CAC25CDF159"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:sparc:*:*:*:*:*","matchCriteriaId":"19D1E7AC-79B6-4136-ADB2-06BEE9773795"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6FA1C84C-6624-4032-8D0E-5EBB054F5224"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*","matchCriteriaId":"06B9ADAD-ADDC-47AC-9924-B31B17DDF163"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*","matchCriteriaId":"6DC0D30E-DBF1-4FDB-80C0-80DB50D9E77A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*","matchCriteriaId":"537FD523-1D44-4D85-AED1-C092E0155CF2"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:19.semconfig.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-004.txt.asc","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata26.html#semconfig","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1270","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:19.semconfig.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata26.html#semconfig","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0462","sourceIdentifier":"cve@mitre.org","published":"2000-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6FA1C84C-6624-4032-8D0E-5EBB054F5224"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*","matchCriteriaId":"06B9ADAD-ADDC-47AC-9924-B31B17DDF163"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*","matchCriteriaId":"6DC0D30E-DBF1-4FDB-80C0-80DB50D9E77A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*","matchCriteriaId":"537FD523-1D44-4D85-AED1-C092E0155CF2"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-006.txt.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1273","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0463","sourceIdentifier":"cve@mitre.org","published":"2000-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6EBFAEE-C1D9-48AE-AFE3-2C44CAC74616"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0197.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1222","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0464","sourceIdentifier":"cve@mitre.org","published":"2000-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the \"Malformed Component Attribute\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=261257","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1223","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=261257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0465","sourceIdentifier":"cve@mitre.org","published":"2000-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.x and 5.x does not properly verify the domain of a  frame within a browser window, which allows a remote attacker to read client files via the frame, aka the \"Frame Domain Verification\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=251108","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=255676","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1224","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=251108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=255676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0466","sourceIdentifier":"cve@mitre.org","published":"2000-06-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX cdmount allows local users to gain root privileges via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1384","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise55.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise55.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0467","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sam_lantinga:splitvt:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"652F40A9-B1B1-4B39-8C97-1CA42E2C2858"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0125.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1346","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0125.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0468","sourceIdentifier":"cve@mitre.org","published":"2000-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1302","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.02.10006021014400.4779-100000%40nofud.nwest.attws.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.02.10006021014400.4779-100000%40nofud.nwest.attws.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0469","sourceIdentifier":"cve@mitre.org","published":"2000-02-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:selena_sol:webbanner:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FD550CBE-1DC6-47F5-8BCF-94911830B6CF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1347","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-22&msg=ILENKALMCAFBLHBGEOFKGEJCCAAA.jwesterink%40jwesterink.daxis.nl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.2.0.58.20000620193604.00979950%40mail.clark.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-22&msg=ILENKALMCAFBLHBGEOFKGEJCCAAA.jwesterink%40jwesterink.daxis.nl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.2.0.58.20000620193604.00979950%40mail.clark.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0470","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allegro:rom_pager:2.10:*:*:*:*:*:*:*","matchCriteriaId":"5BBAF70C-7F61-4408-8812-959FB991C5A4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0398.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4588","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0471","sourceIdentifier":"cve@mitre.org","published":"2000-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:x86:*:*:*:*:*","matchCriteriaId":"FEEC0C5A-4A6E-403C-B929-D1EC8B0FE2A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.3:u1:*:*:*:*:*:*","matchCriteriaId":"D3373737-C6FC-4D19-845C-B0382AE1DC48"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:1.1.4:*:jl:*:*:*:*:*","matchCriteriaId":"10EC0267-500D-496F-9D88-7F93F7D4A88B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"2BD151A2-C664-4B41-B237-9A1FA5DBEEF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"C724C637-BF31-414D-8D1A-AD1AFB6A2AA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"6CF9FAD7-B1C3-4367-956B-93C4F3929039"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:5.6:*:x86:*:*:*:*:*","matchCriteriaId":"E6E2C6C2-24B4-4A1D-BF80-A54013B4D159"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"615FA6E4-4DE0-422A-9220-F747D95192C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"1070749A-65E9-439A-A7CC-3CE529A5D5E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0114.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/210","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/36866","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1398","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1348","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4711","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/36866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0472","sourceIdentifier":"cve@mitre.org","published":"2000-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2480B45-A626-49F5-A48B-BA6DFAA4411B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21969A37-9F10-4D70-AC73-F3DB4D169AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*","matchCriteriaId":"94FD2948-EF52-464B-A605-DA3806037762"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1CC41E6D-B892-4888-8AEE-12287935F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7DED2B74-71B6-467C-8B07-F6F728AD7BF4"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-016.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0003.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0097.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0298.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0330.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1316","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4615","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-016.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0330.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0473","sourceIdentifier":"cve@mitre.org","published":"2000-06-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.01:*:*:*:*:*:*:*","matchCriteriaId":"92443A25-EE35-4340-A030-53486C85674C"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.03:*:*:*:*:*:*:*","matchCriteriaId":"AF0B6506-E5BE-4C86-A2C5-B55ACA9004C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.04:*:*:*:*:*:*:*","matchCriteriaId":"BF340D7A-0C81-4A97-A4CB-9F51D566B158"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.05:*:*:*:*:*:*:*","matchCriteriaId":"72D12770-D4B3-448E-936A-D19BB1A59326"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.06:*:*:*:*:*:*:*","matchCriteriaId":"E2B7590A-EFB1-4DED-9048-7B3DEED7F0FB"}]}]}],"references":[{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/1349","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/1349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0474","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9392C48A-A1AB-43F7-8374-02BDCE6589AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80676193-A0EE-42EE-8DB4-BFF680A05603"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:8.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"78E05F93-842F-4146-971D-CE507A1C55F7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0410.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0427.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1288","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4587","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0410.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0427.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0475","sourceIdentifier":"cve@mitre.org","published":"2000-06-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the \"Desktop Separation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1350","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-020","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0476","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_jennings:eterm:0.8.10:*:*:*:*:*:*:*","matchCriteriaId":"B33FE201-759E-4EE4-B19E-A25E6FBD711B"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*","matchCriteriaId":"1283B462-042C-4857-A700-4179AAE20E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E5CE4F28-5C30-4A54-8A4B-3FA6B01F1467"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/09/1","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/09/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1298","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/09/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/06/09/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0477","sourceIdentifier":"cve@mitre.org","published":"2000-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:1.5:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"6A5103FB-8987-4580-B5DF-C4144CA3B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2.0:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"6086F800-7CE6-44C3-8FDB-2CE6EE4EE467"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1351","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4710","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0478","sourceIdentifier":"cve@mitre.org","published":"2000-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In some cases, Norton Antivirus for Exchange (NavExchange) enters a \"fail-open\" state which allows viruses to pass through the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:1.5:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"6A5103FB-8987-4580-B5DF-C4144CA3B7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2.0:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"6086F800-7CE6-44C3-8FDB-2CE6EE4EE467"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6266","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1351","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4709","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0479","sourceIdentifier":"cve@mitre.org","published":"2000-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dragon FTP server allows remote attackers to cause a denial of service via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shadow_op_software:dragon_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1C8EFC21-9825-4404-9C8A-17BD51A53E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:shadow_op_software:dragon_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"610126B3-718D-439A-9A09-9FAF764D31E5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96113734714517&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1352","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96113734714517&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0480","sourceIdentifier":"cve@mitre.org","published":"2000-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dragon telnet server allows remote attackers to cause a denial of service via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shadow_op_software:dragon_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1C8EFC21-9825-4404-9C8A-17BD51A53E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:shadow_op_software:dragon_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"610126B3-718D-439A-9A09-9FAF764D31E5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96113734714517&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1352","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96113734714517&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0481","sourceIdentifier":"cve@mitre.org","published":"1999-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"F2732150-E1F0-4262-AD4E-DE2707DDCF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"CBBEB8D7-42D5-4F89-AD58-6F3701095015"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"196AB8FD-6529-4240-83DB-E38D455D75CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"4BF9F1B4-D853-46F7-BD4D-18F267732DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.27:*:*:*:*:*:*:*","matchCriteriaId":"E5A388BC-D200-4615-90C2-EA81244BD4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.28:*:*:*:*:*:*:*","matchCriteriaId":"BD8ECC96-FAA9-4609-A7D0-9C73F2539CAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.29:*:*:*:*:*:*:*","matchCriteriaId":"0CB8D423-404A-4922-9D50-44AB6C191A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.0.29.1:*:*:*:*:*:*:*","matchCriteriaId":"481A4325-4E84-47D7-BE40-CC559EE58F02"}]}]}],"references":[{"url":"http://securityfocus.com/templates/archive.pike?list=82&date=2000-06-22&msg=00060200422401.01667%40lez","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1380","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4993","source":"cve@mitre.org"},{"url":"http://securityfocus.com/templates/archive.pike?list=82&date=2000-06-22&msg=00060200422401.01667%40lez","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0482","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0473.html","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#IP_Fragmentation","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1379","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1312","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4609","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#IP_Fragmentation","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0483","sourceIdentifier":"cve@mitre.org","published":"2000-06-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:linux_powertools:6.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEE3A85-0A4C-4763-A141-AC27ECFDC2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:linux_powertools:6.2:*:*:*:*:*:*:*","matchCriteriaId":"A5AE3BF4-237D-4D84-9753-512A642141A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"46B2B101-676C-4EF3-90FB-7B5D36D1ADF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C49596F-E215-4B70-8397-3C247F509D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"23673C10-0D61-4835-A37C-9AAA00F1DA30"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1354","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000616103807.A3768%40conectiva.com.br","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4716","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000616103807.A3768%40conectiva.com.br","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0484","sourceIdentifier":"cve@mitre.org","published":"2000-06-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:1.212:*:*:*:*:*:*:*","matchCriteriaId":"CE1E0EBE-710A-493A-98B1-D05B3CFD0007"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96113651713414&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=96151775004229&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4692","source":"cve@mitre.org"},{"url":"https://gist.github.com/0xHop/66609ec1e243b913361e1acfa5253806","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96113651713414&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=96151775004229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://gist.github.com/0xHop/66609ec1e243b913361e1acfa5253806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0485","sourceIdentifier":"cve@mitre.org","published":"2000-05-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the \"DTS Password\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"08CB788D-CFEC-4F8B-9158-8A15319FAB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/62771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1292","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4582","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/62771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0486","sourceIdentifier":"cve@mitre.org","published":"2000-05-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","matchCriteriaId":"5802E2D8-7069-474C-826F-AEE7B50BFE34"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:tacacs\\+:f4.0.2alpha:*:*:*:*:*:*:*","matchCriteriaId":"87DF1CE3-048E-49E4-86F0-FBC92BB81901"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:tacacs\\+:f4.0.3alpha:*:*:*:*:*:*:*","matchCriteriaId":"D28D4B48-AF91-48B0-97D3-876E8E52D7D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0369.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0370.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4985","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0370.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0487","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the \"Protected Store Key Length\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1295","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-032","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0488","sourceIdentifier":"cve@mitre.org","published":"2000-05-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ithouse:ithouse_mail_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2BA425A2-D094-414D-B954-D8D7E9BEFE48"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0148.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1285","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4580","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0489","sourceIdentifier":"cve@mitre.org","published":"1999-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:x86:*:*:*:*:*","matchCriteriaId":"4319B741-4376-4EA2-9FEB-236C148D1514"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:alpha:*:*:*:*:*","matchCriteriaId":"247ABD95-74CA-45B8-8729-3C35C9E11186"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:arm32:*:*:*:*:*","matchCriteriaId":"1D4C44E8-075A-4B48-88DA-2CAC25CDF159"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:sparc:*:*:*:*:*","matchCriteriaId":"19D1E7AC-79B6-4136-ADB2-06BEE9773795"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:x86:*:*:*:*:*","matchCriteriaId":"E2EE8A19-8AB1-4283-95EA-9EE3C7E5DED7"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6FA1C84C-6624-4032-8D0E-5EBB054F5224"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*","matchCriteriaId":"06B9ADAD-ADDC-47AC-9924-B31B17DDF163"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*","matchCriteriaId":"6DC0D30E-DBF1-4FDB-80C0-80DB50D9E77A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*","matchCriteriaId":"537FD523-1D44-4D85-AED1-C092E0155CF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/622","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3298","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0490","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"60C72EA3-5D19-44B7-AB3D-99122A470205"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7q:*:*:*:*:*:*:*","matchCriteriaId":"316BCDB3-3762-436F-91B2-41231A55CB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8e:*:*:*:*:*:*:*","matchCriteriaId":"A5BD3CC6-5E2C-4534-925E-B81D92F18A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8f:*:*:*:*:*:*:*","matchCriteriaId":"C25AB545-FCF5-42FB-801E-07DF0ADC4865"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8g:*:*:*:*:*:*:*","matchCriteriaId":"EF6F3B04-6DA7-42F8-8873-7625B93523ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8h:*:*:*:*:*:*:*","matchCriteriaId":"F44C662D-58ED-41E0-8718-259321F9F9E9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0407.html","source":"cve@mitre.org"},{"url":"http://netwinsite.com/dmail/security.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1297","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4579","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0407.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://netwinsite.com/dmail/security.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0491","sourceIdentifier":"cve@mitre.org","published":"2000-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E2D650E6-F568-4B7F-8913-3DC10E8F4201"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_49.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1233","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1279","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1370","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_49.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0492","sourceIdentifier":"cve@mitre.org","published":"2000-06-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:passwd:passwd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"19609425-63F4-40C2-A999-2F85FC1F60B3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1300","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1300","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0493","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrius_trivalie_sn:time_sync:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"65385E8D-48D9-48E5-80FA-17F7CAC78124"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0843.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1289","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4602","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0843.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0494","sourceIdentifier":"cve@mitre.org","published":"2000-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:volume_manager:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"8B779D14-4F10-44D1-A107-4B4D516DAD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:volume_manager:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5AD91F09-82F0-4EB7-836F-EA0879E59771"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:volume_manager:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B7E2DA89-8203-4C25-8B16-34A3594C2229"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://seer.support.veritas.com/tnotes/volumeman/230053.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1356","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://seer.support.veritas.com/tnotes/volumeman/230053.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0495","sourceIdentifier":"cve@mitre.org","published":"2000-05-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the \"Malformed Windows Media Encoder Request\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D073958F-0428-4E15-97B0-8EDAD0E80632"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3DDE73-E623-45A3-AA49-17BAFB89A2CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1282","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4585","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0497","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FC25AE4-76D2-4FE6-8B33-7069322EBC5D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0263.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www-4.ibm.com/software/webservers/appserv/efix.html","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/1328","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0263.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www-4.ibm.com/software/webservers/appserv/efix.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.securityfocus.com/bid/1328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0498","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unify:ewave_servletexec:-:*:*:*:*:*:*:*","matchCriteriaId":"A0D9FD66-0B60-4A14-92FD-4BB37126395D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1328","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4649","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0499","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:*:*:express:*:*:*:*:*","matchCriteriaId":"5B0C63A5-F105-4D03-BD2E-B3AAD120A4BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:*:*:*:*:*:*:*:*","versionStartIncluding":"3.1.8","versionEndIncluding":"4.5.1","matchCriteriaId":"2664DE74-15B5-4502-AD51-FCB1C54A1B6B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0262.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://developer.bea.com/alerts/security_000612.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1328","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4694","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0262.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://developer.bea.com/alerts/security_000612.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0500","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"742DCC2D-B4AD-4D16-8338-21E258C4FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:3.1.8:*:express:*:*:*:*:*","matchCriteriaId":"E8E13F70-AE6E-4443-B414-DAACD3F14355"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FED57A9-CD22-48C6-AF7B-C361CA843283"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.0:*:express:*:*:*:*:*","matchCriteriaId":"292C88E7-3CD1-4D87-91B1-5E170A358E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9500F620-FEFE-4CB7-A733-65E7372BD8D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5:*:express:*:*:*:*:*","matchCriteriaId":"3AB46979-F303-4CAD-AF0F-997BD7CE724F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD5D4AD-0BA3-42F7-852F-524488D74A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*","matchCriteriaId":"A8F69E7A-8BBB-4D20-AEE9-F37155AD5C3F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96161462915381&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1378","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.weblogic.com/docs51/admindocs/http.html#file","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4775","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96161462915381&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.weblogic.com/docs51/admindocs/http.html#file","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0501","sourceIdentifier":"cve@mitre.org","published":"2000-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6727183-BD1B-4816-A0B0-3CA24B1F41D1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0277.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1366","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4745","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0502","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A562D4A2-1E7E-4A43-8634-B8721DA8A9F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0038.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6287","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4641","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0503","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1311","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0504","sourceIdentifier":"cve@mitre.org","published":"2000-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E2D650E6-F568-4B7F-8913-3DC10E8F4201"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdm:1.1:*:*:*:*:*:*:*","matchCriteriaId":"37AB5A38-A7C4-4016-8628-27AA0EC7E401"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r5:*:*:*:*:*:*:*","matchCriteriaId":"A6BF5526-54BA-411B-8C18-BAD8801EEF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6:*:*:*:*:*:*:*","matchCriteriaId":"341C2874-4A2A-4ECD-A243-10EF6F2588BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.1:*:*:*:*:*:*:*","matchCriteriaId":"97B9657E-D7CE-496F-AE51-8AFA1CCA49CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.2:*:*:*:*:*:*:*","matchCriteriaId":"5A2B4032-71E6-4731-B829-DD8F004B20BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.3:*:*:*:*:*:*:*","matchCriteriaId":"E1DA55DC-E2A9-44B4-84D6-BE9F84898430"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.4:*:*:*:*:*:*:*","matchCriteriaId":"2A3657FA-0841-487B-9650-FC06A4E2A88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BEECB0ED-A5C9-4675-9CEB-AD6C19EDA7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B43D5F86-97B2-4175-8ED7-1F937850F9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0946A224-6A0C-4DE3-89F9-200682431737"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1369","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.xfree86.org/security/","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.xfree86.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0505","sourceIdentifier":"cve@mitre.org","published":"2000-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.14:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:win32:*:*:*:*:*","matchCriteriaId":"15B826BC-04A7-4696-85A1-6FDD2805709F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:win32:*:*:*:*:*","matchCriteriaId":"392AB96B-598D-44E7-894D-FDFAFDC83DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:win32:*:*:*:*:*","matchCriteriaId":"5E3B21AE-B167-4E49-AC32-537DCAABAB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:win32:*:*:*:*:*","matchCriteriaId":"F9778DCA-00B3-4C15-B1B7-05738CD61E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.3:*:win32:*:*:*:*:*","matchCriteriaId":"47BB20AB-148E-407E-8A0D-DBCB91A0B129"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.6.2:*:win32:*:*:*:*:*","matchCriteriaId":"A9CFC56F-FC11-49F9-B5BB-C0C9603DD292"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1284","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.20.0006031912360.45740-100000%40alive.znep.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4575","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.20.0006031912360.45740-100000%40alive.znep.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0506","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"capabilities\" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the \"Linux kernel setuid/setcap vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.30:*:*:*:*:*:*:*","matchCriteriaId":"29AC849E-7D4E-4C00-8BD0-672F413A80B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.33:*:*:*:*:*:*:*","matchCriteriaId":"FC91B71A-2456-4410-9633-CF5870027D96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.34:*:*:*:*:*:*:*","matchCriteriaId":"92555500-16EB-4F76-B2C7-61A00A1AC722"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B03D22C9-94C6-4AC5-AAD0-15F06BCC5CA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"541B4ED8-E970-4C67-B5AF-7DE5B7F754D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"1E55F8A8-1ABD-4760-9074-353BBAEE005B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"F873503F-C6E2-4AC2-859E-9431FE0FA0A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4A2912-12AC-4DF1-8023-A0B7DBE9A866"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*","matchCriteriaId":"1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*","matchCriteriaId":"C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:pre5:*:*:*:*:*:*","matchCriteriaId":"2C1A26C1-8FE6-4E4E-802E-C989D6823FB2"}]}]}],"references":[{"url":"ftp://sgigate.sgi.com/security/20000802-01-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-037.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1322","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl","source":"cve@mitre.org"},{"url":"ftp://sgigate.sgi.com/security/20000802-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0507","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:concatus:imate_webmail_server:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C331735A-71F7-48EC-8AD8-7393712E0DCD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95990195708509&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4586","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95990195708509&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0508","sourceIdentifier":"cve@mitre.org","published":"1994-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0073.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1372","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5050","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0509","sourceIdentifier":"cve@mitre.org","published":"2000-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:*:beta9:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"D06A6D8D-2B28-42F7-84B4-887329A5219B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95990103207665&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1287","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=95990103207665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0510","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"}]}]}],"references":[{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"cve@mitre.org"},{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0511","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"}]}]}],"references":[{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"cve@mitre.org"},{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0512","sourceIdentifier":"cve@mitre.org","published":"2000-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"}]}]}],"references":[{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1373","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"cve@mitre.org"},{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0513","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"}]}]}],"references":[{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1373","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"cve@mitre.org"},{"url":"ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0514","sourceIdentifier":"cve@mitre.org","published":"2000-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]}],"references":[{"url":"http://web.mit.edu/kerberos/www/advisories/ftp.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4885","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1374","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=ldvsnufao18.fsf%40saint-elmos-fire.mit.edu","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4734","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/www/advisories/ftp.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=ldvsnufao18.fsf%40saint-elmos-fire.mit.edu","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0515","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1327","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006070511.OAA05492%40dogfoot.hackerslab.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006090640.XAA00779%40hpchs.cup.hp.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4643","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006070511.OAA05492%40dogfoot.hackerslab.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006090640.XAA00779%40hpchs.cup.hp.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0516","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:shiva_access_manager:5.0:*:solaris:*:*:*:*:*","matchCriteriaId":"E8CF76E6-F8B2-4E36-BBC4-9DBBBE7AE56C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0008.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1329","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4612","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0517","sourceIdentifier":"cve@mitre.org","published":"2000-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2000-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1260","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4550","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0518","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different \"SSL Certificate Validation\" vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"5680FE7F-95EE-46B2-B930-4A3DC27FD1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"ACC3A8B3-4E8C-46BD-965C-4EF655B9018D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"F7739338-DAE1-403F-B22C-2CFAC884E09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"7AAA310C-7DED-40B3-B5EF-80C7407BB01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A7B6FB02-F15F-486D-8E7C-40830ABDB62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"151FE30E-9320-495C-84AD-60893FAED223"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"5805FB74-2AD6-4919-BAAE-D995CA2650A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"}]}]}],"references":[{"url":"http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-10.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1309","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4624","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0519","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different \"SSL Certificate Validation\" vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"5680FE7F-95EE-46B2-B930-4A3DC27FD1A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"ACC3A8B3-4E8C-46BD-965C-4EF655B9018D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"F7739338-DAE1-403F-B22C-2CFAC884E09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A7B6FB02-F15F-486D-8E7C-40830ABDB62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"9CD5EAB0-B400-41C6-B96E-B7594DB0226F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"151FE30E-9320-495C-84AD-60893FAED223"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"5805FB74-2AD6-4919-BAAE-D995CA2650A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"}]}]}],"references":[{"url":"http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-10.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1309","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4627","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0520","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stelian:pop_dump:0.4b9.0:*:*:*:*:*:*:*","matchCriteriaId":"B0313570-D717-4BB7-BD5E-EDC97CFFEBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stelian:pop_dump:0.4b9.9:*:*:*:*:*:*:*","matchCriteriaId":"C18EEA9A-F841-46B7-BD19-52FA486CBD42"},{"vulnerable":true,"criteria":"cpe:2.3:a:stelian:pop_dump:0.4b15.1:*:*:*:*:*:*:*","matchCriteriaId":"043F63EB-05B6-4CB7-A0B7-606828970168"},{"vulnerable":true,"criteria":"cpe:2.3:a:stelian:pop_dump:0.4b15.30:*:*:*:*:*:*:*","matchCriteriaId":"5E5337F2-668A-4901-AE1B-9048D1195919"},{"vulnerable":true,"criteria":"cpe:2.3:a:stelian:pop_dump:0.4b16.0:*:*:*:*:*:*:*","matchCriteriaId":"7C010635-BBA5-4D7D-BF81-DA882F8E05CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stelian:pop_dump:0.4b17.0:*:*:*:*:*:*:*","matchCriteriaId":"7A760E5C-D7D8-4937-A96E-1724CE3FAE6F"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11880","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96240393814071&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1330","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96240393814071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0521","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_lamont:savant_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3712C895-76D6-4C74-8A60-59696433313F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0469.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1313","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4616","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0469.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0522","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the server to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:ace_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"8922276B-000C-4DC7-9643-1E28297B0A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:ace_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"56E44AAC-12C7-4038-8B2D-173E501DE1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:ace_server:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3E027709-E230-4BE6-9564-3F61755CAE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:ace_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B1E29AE7-23B3-4731-965A-E27032572FF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsa:ace_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"49544415-BF93-4D48-B80A-584C008BFB58"}]}]}],"references":[{"url":"ftp://ftp.securid.com/support/outgoing/dos/readme.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0197.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1332","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=011a01bfd14c%243c206960%24050010ac%40xtranet.co.uk","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5053","source":"cve@mitre.org"},{"url":"ftp://ftp.securid.com/support/outgoing/dos/readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0197.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=011a01bfd14c%243c206960%24050010ac%40xtranet.co.uk","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0523","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"F72D6E62-C38A-4833-8D1F-64CAF7DBF8BE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1315","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4614","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0524","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:4.0:-:*:*:*:*:*:*","matchCriteriaId":"1122C21D-C67C-4702-A084-A0DFBA03A761"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*","matchCriteriaId":"D823C88E-8560-469B-8655-4755E0484F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0045.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1333","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0525","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata.html#uselogin","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1334","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4646","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata.html#uselogin","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0526","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3r_soft:mailstudio_2000:2.0:*:*:*:*:*:*:*","matchCriteriaId":"67D4B662-D04C-4436-A39C-659CBBD12C34"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0527","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3r_soft:mailstudio_2000:2.0:*:*:*:*:*:*:*","matchCriteriaId":"67D4B662-D04C-4436-A39C-659CBBD12C34"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1335","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0528","sourceIdentifier":"cve@mitre.org","published":"2000-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9B0AA86-A1A2-4154-8F93-CD40F4A4D820"}]}]}],"references":[{"url":"ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4353","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1364","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4743","source":"cve@mitre.org"},{"url":"ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0529","sourceIdentifier":"cve@mitre.org","published":"2000-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9B0AA86-A1A2-4154-8F93-CD40F4A4D820"}]}]}],"references":[{"url":"ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4352","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1363","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4744","source":"cve@mitre.org"},{"url":"ftp://ftp.tis.com/gauntlet/hide/pki/hotfix.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0530","sourceIdentifier":"cve@mitre.org","published":"2000-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A63714ED-A697-4AC3-AF13-3B028F9A87EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F472ECE0-821E-4A20-B6FC-CC4FC5D1BA36"}]}]}],"references":[{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-015.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0387.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-032.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1291","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4583","source":"cve@mitre.org"},{"url":"ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-015.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0387.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0531","sourceIdentifier":"cve@mitre.org","published":"1999-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A63714ED-A697-4AC3-AF13-3B028F9A87EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0409.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1377","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006201453090.1812-200000%40apollo.aci.com.pl","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5010","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0409.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006201453090.1812-200000%40apollo.aci.com.pl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0532","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-06/0031.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1323","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4638","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-06/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0533","sourceIdentifier":"cve@mitre.org","published":"2000-06-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:workshop_debugger_and_performance_tools:2.6:*:*:*:*:*:*:*","matchCriteriaId":"3E4AAD2F-8AD4-4B40-8125-D170F91C200B"}]}]}],"references":[{"url":"ftp://sgigate.sgi.com/security/20000601-01-P","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1379","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4725","source":"cve@mitre.org"},{"url":"ftp://sgigate.sgi.com/security/20000601-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0534","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:aps_filter_development_team:apsfilter:5.4:*:*:*:*:*:*:*","matchCriteriaId":"94CE83DF-386E-4E13-8E41-911BD6B78E3D"}]}]}],"references":[{"url":"http://www.osvdb.org/1389","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1325","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4617","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0535","sourceIdentifier":"cve@mitre.org","published":"2000-06-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-06/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0536","sourceIdentifier":"cve@mitre.org","published":"2000-06-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.87:*:*:*:*:*:*:*","matchCriteriaId":"B53D978C-62C3-4C46-8ACA-5D06899A6D76"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.88:*:*:*:*:*:*:*","matchCriteriaId":"3AC105CC-6E52-475A-95E4-591A66CE2259"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.88_pre1:*:*:*:*:*:*:*","matchCriteriaId":"5C958EBF-21EF-464A-B29B-A0CA65845A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.88_pre2:*:*:*:*:*:*:*","matchCriteriaId":"2E7333CF-980A-4F17-A833-521792072807"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.89_pre1:*:*:*:*:*:*:*","matchCriteriaId":"29B5FEFE-773A-45EE-BD3F-E843ECF16205"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.89_pre2:*:*:*:*:*:*:*","matchCriteriaId":"EEC5DB98-DF04-4EAC-B0AE-C64F31B0E44E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.89_pre3:*:*:*:*:*:*:*","matchCriteriaId":"D88CE5BA-89B6-4205-A4EA-D69CFA1796E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.89_pre4:*:*:*:*:*:*:*","matchCriteriaId":"99C84214-B2AE-484E-B166-F93CAA07C83C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.89_pre5:*:*:*:*:*:*:*","matchCriteriaId":"E0F67EC0-9AD8-407A-ACB7-AE1CF6F93D32"}]}]}],"references":[{"url":"http://www.debian.org/security/2000/20000619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1381","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.synack.net/xinetd/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4986","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.synack.net/xinetd/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0537","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tolis_group:bru:15.1:*:*:*:*:*:*:*","matchCriteriaId":"CB05E0F5-BDBB-4459-8AA6-D2EC5451F8B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tolis_group:bru:16.0:*:*:*:*:*:*:*","matchCriteriaId":"E893023A-9862-4871-B812-60AEE643E6B6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-018.0.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1321","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4644","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-018.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0538","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE00F45E-C410-4268-B0EC-18B4043E6631"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7BB5B124-A5C2-4B24-8091-FF9863D17BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"A32F27D3-0ECD-49BB-B32F-2F531DE6836D"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DC21856A-F57F-4C34-8276-5880B57A2DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"9646F809-1016-49AD-B60A-481CDB7D5ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"926AAAD1-68C5-4816-B387-8B1BB4E9E1C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3630623B-468C-4E71-9C57-EFF83E5EFA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"292DA1C8-5B98-4552-B51B-B0C3F230321F"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FA98847-8A14-409C-86E8-C7652E5ECF0C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96045469627806&w=2","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3399","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1314","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4611","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96045469627806&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0539","sourceIdentifier":"cve@mitre.org","published":"2000-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8587E5C8-193F-4A2B-965D-0ACC7429C7D7"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/818","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1386","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4774","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0540","sourceIdentifier":"cve@mitre.org","published":"2000-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3:*:*:*:*:*:*:*","matchCriteriaId":"8587E5C8-193F-4A2B-965D-0ACC7429C7D7"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1386","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4774","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0541","sourceIdentifier":"cve@mitre.org","published":"2000-06-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_antivirus:2.0:*:netware:*:*:*:*:*","matchCriteriaId":"60F7F210-A968-4B87-A170-0E18DBC72F4B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0164.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1359","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4707","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0542","sourceIdentifier":"cve@mitre.org","published":"2000-06-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ericsson:axc_tigris_multiservice_access_platform:623.0:*:*:*:*:*:*:*","matchCriteriaId":"BBDDD377-7044-4F81-9C07-45BE845C42B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ericsson:axc_tigris_multiservice_access_platform:627.0:*:*:*:*:*:*:*","matchCriteriaId":"E54E4638-E388-40A0-80BC-78286C9860EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ericsson:axc_tigris_multiservice_access_platform:711.0:*:*:*:*:*:*:*","matchCriteriaId":"9A9BC46B-C83E-492B-9427-2D70467A123A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0104.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1345","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4705","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0543","sourceIdentifier":"cve@mitre.org","published":"2000-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:certificate_server:2.5:*:*:*:*:*:*:*","matchCriteriaId":"50D8B5F4-56F9-4E34-A525-491F010382BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:certificate_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BD48D4F5-15D5-44E8-A597-7327EB1BCBC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0107.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1343","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4695","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0544","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0545","sourceIdentifier":"cve@mitre.org","published":"2000-08-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:3:*:*:*:*:*:*:*","matchCriteriaId":"10DE1A02-34EB-480A-B06B-F8B52B52FCD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:4:*:*:*:*:*:*:*","matchCriteriaId":"381EDE3A-A7FF-4361-8975-7B7C2994C76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:5:*:*:*:*:*:*:*","matchCriteriaId":"4636BBCA-45D5-425C-9FC7-7E67FA1A971F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B3D02625-B61A-47B4-9403-2952DBAACF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D90E2EEA-72B4-4AFD-A1D1-43841A91D497"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:6.2:*:*:*:*:*:*:*","matchCriteriaId":"79812BC5-9FA0-4910-9F26-211C2D569567"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:6.3:*:*:*:*:*:*:*","matchCriteriaId":"270D390B-6C70-49BE-BD22-FC52C536F005"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:6.4:*:*:*:*:*:*:*","matchCriteriaId":"0E59C19E-22AE-498A-A6D9-B15E9598E5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mailx:6.5:*:*:*:*:*:*:*","matchCriteriaId":"344E802C-72E8-49E9-B82B-4C18A13CE86C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0435.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20000605","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1305","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0435.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20000605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0546","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus_network_security_project:cygnus_network_security:-:*:*:*:*:*:*:*","matchCriteriaId":"F324E654-8799-45DE-8ECA-779D33033CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerbnet_project:kerbnet:-:*:*:*:*:*:*:*","matchCriteriaId":"A69B5EEC-B360-4F74-839C-1E4909C71126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"83B5C118-EB9E-4CA1-B27A-5D245E334E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:-:*:*:*:*:*:*","matchCriteriaId":"14393125-C495-47AF-ACC9-EF739A606DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:patch10:*:*:*:*:*:*","matchCriteriaId":"C7EDE7F6-5216-40F3-8C31-C3544CDFFBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.7","matchCriteriaId":"EC79658F-1838-40CA-AFB1-3E2B43E339CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1338","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0547","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus_network_security_project:cygnus_network_security:-:*:*:*:*:*:*:*","matchCriteriaId":"F324E654-8799-45DE-8ECA-779D33033CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerbnet_project:kerbnet:-:*:*:*:*:*:*:*","matchCriteriaId":"A69B5EEC-B360-4F74-839C-1E4909C71126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"83B5C118-EB9E-4CA1-B27A-5D245E334E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:-:*:*:*:*:*:*","matchCriteriaId":"14393125-C495-47AF-ACC9-EF739A606DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:patch10:*:*:*:*:*:*","matchCriteriaId":"C7EDE7F6-5216-40F3-8C31-C3544CDFFBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.7","matchCriteriaId":"EC79658F-1838-40CA-AFB1-3E2B43E339CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1338","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0548","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus_network_security_project:cygnus_network_security:-:*:*:*:*:*:*:*","matchCriteriaId":"F324E654-8799-45DE-8ECA-779D33033CFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerbnet_project:kerbnet:-:*:*:*:*:*:*:*","matchCriteriaId":"A69B5EEC-B360-4F74-839C-1E4909C71126"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"83B5C118-EB9E-4CA1-B27A-5D245E334E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:-:*:*:*:*:*:*","matchCriteriaId":"14393125-C495-47AF-ACC9-EF739A606DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:patch10:*:*:*:*:*:*","matchCriteriaId":"C7EDE7F6-5216-40F3-8C31-C3544CDFFBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.0.7","matchCriteriaId":"EC79658F-1838-40CA-AFB1-3E2B43E339CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4875","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-031.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2000-0549","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of service via a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:cygnus_network_security:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05857121-8827-45FD-886F-4269E0336036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:kerbnet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE1B0821-64F1-46E3-8DD3-12FFD1B037F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-031.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-031.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0550","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 4 KDC program improperly frees memory twice (aka \"double-free\"), which allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:cygnus_network_security:4.0:*:*:*:*:*:*:*","matchCriteriaId":"05857121-8827-45FD-886F-4269E0336036"},{"vulnerable":true,"criteria":"cpe:2.3:a:cygnus:kerbnet:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EE1B0821-64F1-46E3-8DD3-12FFD1B037F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AFB8BD89-F049-4C3B-8744-E8D00D752DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-031.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1465","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/k-051.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/www/advisories/krb4kdc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0551","sourceIdentifier":"cve@mitre.org","published":"2000-05-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:danware_data:netop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"11D50435-13B0-4823-97FF-E7740C616101"},{"vulnerable":true,"criteria":"cpe:2.3:a:danware_data:netop:6.50:*:*:*:*:*:*:*","matchCriteriaId":"6C8A7924-FFE7-45E7-8D72-02790A3662E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0339.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1263","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4569","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0552","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icq:icq:2000a:*:*:*:*:*:*:*","matchCriteriaId":"419A7941-2E5A-42E8-A3CA-E6020B4A9388"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1307","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4607","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0237.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0553","sourceIdentifier":"cve@mitre.org","published":"2000-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping \"return-rst\" and \"keep state\" rules, allows remote attackers to bypass access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.15:*:*:*:*:*:*:*","matchCriteriaId":"5D5F9210-DD20-4D86-B4F0-74F60A263F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"ACB9F76C-D145-4347-9A4C-1BD243AE68FB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1377","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1308","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4994","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0554","sourceIdentifier":"cve@mitre.org","published":"2000-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lilikoi:ceilidh:2.60:*:*:*:*:*:*:*","matchCriteriaId":"86541AF7-DADD-4A71-B685-14B8F6610813"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1320","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0555","sourceIdentifier":"cve@mitre.org","published":"2000-06-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lilikoi:ceilidh:2.60:*:*:*:*:*:*:*","matchCriteriaId":"86541AF7-DADD-4A71-B685-14B8F6610813"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1320","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4622","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0556","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog running on port 8002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computalynx:cmail:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E5AE8A35-03D4-4CB0-9E78-F9C25541C1A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.computalynx.net/news/Jun2000/news0806200001.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1319","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4625","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.computalynx.net/news/Jun2000/news0806200001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0557","sourceIdentifier":"cve@mitre.org","published":"2000-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computalynx:cmail:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"E5AE8A35-03D4-4CB0-9E78-F9C25541C1A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1318","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4626","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0558","sourceIdentifier":"cve@mitre.org","published":"2000-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0249.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1317","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0249.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0559","sourceIdentifier":"cve@mitre.org","published":"2000-06-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local users to easily decrypt the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_intrusion_detection:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1.13","matchCriteriaId":"0530ACE0-AFE2-4A51-B40A-0D9366C32187"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1341","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSO.4.21.0006072124320.28062-100000%40bearclaw.bogus.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0561","sourceIdentifier":"cve@mitre.org","published":"2000-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:international_telecommunications:international_telecommunications_webbbs:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"6B5EDDDA-C9CE-46F7-8B7E-16ED0ECB2D5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:international_telecommunications:international_telecommunications_webbbs:1.17:*:*:*:*:*:*:*","matchCriteriaId":"9540867F-66E7-406F-A4D2-6FDEF1ACEA50"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0175.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3544","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1365","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4742","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0562","sourceIdentifier":"cve@mitre.org","published":"2000-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lower."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.23","matchCriteriaId":"0276FA59-5E4A-4EDC-99D4-4B4CEDDC04A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_defender:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"74AC949D-F84C-44F7-83D2-D230F943AF06"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0190.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0563","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_runtime_for_java:*:*:java:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"3D231336-32BE-47F1-A9E6-1D34CF1EFCC0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0056.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1336","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-05-8&msg=391C95DE2DA.5E3BTAKAGI%40java-house.etl.go.jp","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-05-8&msg=391C95DE2DA.5E3BTAKAGI%40java-house.etl.go.jp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0564","sourceIdentifier":"cve@mitre.org","published":"2000-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:0.99b_1.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"55BF15F6-FFF7-4A0D-A2FF-8160AB3D70C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:0.99b_v.3.19:*:*:*:*:*:*:*","matchCriteriaId":"6A5D8068-55DF-4008-98CC-4ABEED68260D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:98.0a:*:*:*:*:*:*:*","matchCriteriaId":"F2CBBD4E-4E3D-4441-88B0-24A6566CCB93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:99a_2.15build1701:*:*:*:*:*:*:*","matchCriteriaId":"B9CB6B89-E3B1-4096-AF07-C9E74BFCABDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:99a_2.21build1800:*:*:*:*:*:*:*","matchCriteriaId":"7181BF12-E9B6-4F8E-B1D0-3251007389D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2000.0a:*:*:*:*:*:*:*","matchCriteriaId":"1C7B95B0-8CCB-4561-B354-80925B9769D6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0218.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0565","sourceIdentifier":"cve@mitre.org","published":"2000-06-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mindstorm:smartftp_daemon:0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C6AD932-4CFE-462D-9CDA-3846DDF34C4E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0100.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1394","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1344","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4706","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0566","sourceIdentifier":"cve@mitre.org","published":"2000-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"makewhatis in Linux man package allows local users to overwrite files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A63714ED-A697-4AC3-AF13-3B028F9A87EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:alpha:*:*:*:*:*","matchCriteriaId":"07396B95-E434-46C9-A345-27C9EA9BEA26"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:sparc:*:*:*:*:*","matchCriteriaId":"0775CE08-C5AD-4FF7-AEA9-537B1EAE3BDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-021.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0390.html","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:015","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-041.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1434","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4900","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-021.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0390.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0567","sourceIdentifier":"cve@mitre.org","published":"2000-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the \"Malformed E-mail Header\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6764F97F-6906-4953-BB1C-AA6345FA8FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.01:*:*:*:*:*:*:*","matchCriteriaId":"BA267F42-5A1F-4663-9D4D-AF5DD64FD2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1481","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4953","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0568","sourceIdentifier":"cve@mitre.org","published":"2000-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybergen:secure_desktop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B11EDF36-73D7-4B0D-B968-FEE9878690E6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1417","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4125690E.00524395.00%40guardianit.se","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=4125690E.00524395.00%40guardianit.se","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0569","sourceIdentifier":"cve@mitre.org","published":"2000-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybergen:sygate:2.0:*:*:*:*:*:*:*","matchCriteriaId":"64CE9873-D031-4DC9-8FCA-7AF2E7ADBF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybergen:sygate:3.11:*:*:*:*:*:*:*","matchCriteriaId":"51E74011-4542-4818-AAF6-2AC5682D244D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0189.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1420","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5049","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0189.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0570","sourceIdentifier":"cve@mitre.org","published":"2000-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centrinity:firstclass_intranet_server:5.770:*:*:*:*:*:*:*","matchCriteriaId":"0EDA5954-66F7-43A3-9892-0C4EEA9AF7A7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0295.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5718","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1421","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4843","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0571","sourceIdentifier":"cve@mitre.org","published":"2000-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:west_street_software:localweb_http_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E2AD66FE-175E-41FB-940F-6E72B15360FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1423","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=NCBBKFKDOLAGKIAPMILPCEIHCFAA.labs%40ussrback.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4896","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=NCBBKFKDOLAGKIAPMILPCEIHCFAA.labs%40ussrback.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0572","sourceIdentifier":"cve@mitre.org","published":"2000-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges."}],"vendorComments":[{"organization":"Razor","comment":"Subsequent releases of Razor address this issue and utilize a more robust encryption mechanism for the Razor password. If you are under maintenance, you have the option of upgrading to a more recent release of Razor at no cost.  If you are not under maintenance and want to upgrade then you will need to contact Jennifer Stone at jstone@visible.com.\n\nSome additional notes ...\n\n- With version 4.1 and above, administrators of Razor may switch and use the local OS authentication instead of Razor’s authentication method.\n\n- OS permissions and protections always apply to the artifacts stored in the database.\n\n- This notice applies to users that have already logged into the supporting system.  This primary means of defense is intact inspite of this particular vulnerability.\n\n- The next Razor release (due out in mid-2007) will allow remote UNIX clients to utilize SSH to authenticate the remote user.  More information on this release and others may be found on the Visible Systems web site:\n\nhttp://www.visible.com/Products/Razor\n\nPlease contact Visible Systems Corporation at 1-800-6-VISIBLE if you have additional questions.","lastModified":"2007-02-22T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visible_systems:razor:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D706F22A-65ED-4893-B4B3-2594316F18B2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1424","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=613309F30B6DD2118C020000F809376C05CABD49%40emss03m09.orl.lmco.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-07-8&msg=613309F30B6DD2118C020000F809376C05CABD49%40emss03m09.orl.lmco.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0573","sourceIdentifier":"cve@mitre.org","published":"2000-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1","source":"cve@mitre.org"},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96171893218000&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96179429114160&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96299933720862&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-13.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-039.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4773","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:29.wu-ftpd.asc.v1.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2000.02","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2000-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96171893218000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96179429114160&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96299933720862&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-020.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000623091822.3321.qmail%40fiver.freemessage.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0574","sourceIdentifier":"cve@mitre.org","published":"2000-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:ftpd:5.51:*:*:*:*:*:*:*","matchCriteriaId":"C2F2A623-1D9D-4656-9D09-07CA0BFBBBB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:ftpd:5.60:*:*:*:*:*:*:*","matchCriteriaId":"797AE65F-8A84-4211-9FB4-42D098F31D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta1:*:academ:*:*:*:*:*","matchCriteriaId":"7BFD083F-3B2C-4343-950F-3062670AB73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:academ:*:*:*:*:*","matchCriteriaId":"C63ACBE3-5BB2-483E-A5FE-87698E98354A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*","matchCriteriaId":"B39D46C4-B153-4301-AE9C-57FB6BA64CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*","matchCriteriaId":"E55582DD-DEF7-4BF8-950C-E7E58BD29DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:*:*:*:*:*:*:*","matchCriteriaId":"FF9B9132-19A1-4242-A129-E5A49F466EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:*:*:*:*:*:*:*","matchCriteriaId":"4B9E32F3-06CF-482D-8313-3D098CDE8B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:*:*:*:*:*:*:*","matchCriteriaId":"0A096214-84AD-44F5-BBEF-F9F17B9B0C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*","matchCriteriaId":"4989799F-143A-45E5-A30C-9E3203649770"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:*:*:*:*:*:*:*","matchCriteriaId":"1E3D0CC6-D1A0-4784-BE93-319C7EE59134"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:*:*:*:*:*:*:*","matchCriteriaId":"4FA32489-F098-43D2-80B7-89CFE0BE9A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:*:*:*:*:*:*:*","matchCriteriaId":"91C6388E-464B-4562-BC7B-7B4A66387B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:*:*:*:*:*:*:*","matchCriteriaId":"923B5711-853D-4A77-8FB3-D5C3D449518D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:*:*:*:*:*:*:*","matchCriteriaId":"9BB1B136-F90E-426B-8010-F2D059E89DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:*:*:*:*:*:*:*","matchCriteriaId":"CD9EFCD7-2A13-420E-B6A0-C1248B2E6E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:*:*:*:*:*:*:*","matchCriteriaId":"573486C8-0349-4BC9-AD7D-3FBF93DDB6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:*:*:*:*:*:*:*","matchCriteriaId":"CAD81A30-9C35-4EEA-B6FE-A4AC76893AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"6AFFA39F-9072-4F19-A695-F383EA61D55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0A5D6359-4E6D-4563-8251-F1719D45E20E"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-13.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1425","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1438","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0575","sourceIdentifier":"cve@mitre.org","published":"2000-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96256265914116&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1426","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4903","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96256265914116&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0576","sourceIdentifier":"cve@mitre.org","published":"2000-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_listener:4.0.7:*:aix:*:*:*:*:*","matchCriteriaId":"553889DA-409F-463B-AF7B-FF1B90118987"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:web_listener:4.0.8:*:aix:*:*:*:*:*","matchCriteriaId":"EC108E3B-D849-4191-B330-5BC2DAC20A0E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0027.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1427","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0577","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:professional_services_ftpserver:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"F579D691-9D70-46D8-9B53-A069AD92B00F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0345.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1411","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211351280.23780-100000%40nimue.tpi.pl","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0345.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211351280.23780-100000%40nimue.tpi.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0578","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mipspro_compilers:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A05CA1F-14A4-47C3-85A8-32A72BF39B56"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mipspro_compilers:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0A4F3F-36F2-4AF9-842B-E80599A4DCE5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1412","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0579","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1413","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0580","sourceIdentifier":"cve@mitre.org","published":"2000-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:2000.0.2195:*:*:*:*:*:*:*","matchCriteriaId":"E187D128-E640-48F9-89C9-2E4DE31DCD1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:2000.2072:*:*:*:*:*:*:*","matchCriteriaId":"500125B2-3376-4035-A1F4-93794C0FF980"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1415","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161935.4619B-100000%40fjord.fscinternet.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161935.4619B-100000%40fjord.fscinternet.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0581","sourceIdentifier":"cve@mitre.org","published":"2000-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:2000.0.2195:*:*:*:*:*:*:*","matchCriteriaId":"E187D128-E640-48F9-89C9-2E4DE31DCD1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:2000.2031:*:*:*:*:*:*:*","matchCriteriaId":"78610E18-E6C4-4F56-9DD3-C56752968D42"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:2000.2072:*:*:*:*:*:*:*","matchCriteriaId":"500125B2-3376-4035-A1F4-93794C0FF980"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1414","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161841.4619A-100000%40fjord.fscinternet.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630161841.4619A-100000%40fjord.fscinternet.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0582","sourceIdentifier":"cve@mitre.org","published":"2000-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the SMTP Security Server proxy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1416","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630162106.4619C-100000%40fjord.fscinternet.com","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#SMTP_Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.3.96.1000630162106.4619C-100000%40fjord.fscinternet.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0583","sourceIdentifier":"cve@mitre.org","published":"2000-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail_vchkpw:4.5:*:*:*:*:*:*:*","matchCriteriaId":"F8FAEA52-FF70-405C-AB1D-2916EE57C72F"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail_vchkpw:4.7:*:*:*:*:*:*:*","matchCriteriaId":"4DDE8768-67FA-43F3-BE26-AB02D2BF5B5D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com","source":"cve@mitre.org"},{"url":"http://www.vpopmail.cx/vpopmail-ChangeLog","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=395BD2A8.5D3396A7%40secureaustin.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vpopmail.cx/vpopmail-ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2000-0584","sourceIdentifier":"cve@mitre.org","published":"2000-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:31.canna.asc.v1.1","source":"cve@mitre.org"},{"url":"http://shadowpenguin.backsection.net/advisories/advisory038.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1445","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4912","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:31.canna.asc.v1.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shadowpenguin.backsection.net/advisories/advisory038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0585","sourceIdentifier":"cve@mitre.org","published":"2000-06-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp_client:2.0:*:*:*:*:*:*:*","matchCriteriaId":"AEB862F1-3C18-42AA-9E7A-1BEF321618AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcp_client:3.0b1:*:*:*:*:*:*:*","matchCriteriaId":"C795F0C4-FDE0-463E-8F04-A2CA341679CE"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:34.dhclient.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-008.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0247.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0014.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000628","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_56.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1388","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4772","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:34.dhclient.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_56.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0586","sourceIdentifier":"cve@mitre.org","published":"2000-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dalnet:ircd:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"13CB5F6F-EDC3-483F-B2CC-044E26DC56FF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/1092.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1404","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/1092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0587","sourceIdentifier":"cve@mitre.org","published":"2000-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.18:*:*:*:*:*:*:*","matchCriteriaId":"4E50A926-D68F-4B1E-A009-0808611885B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*","matchCriteriaId":"2EC24C84-A059-4F09-AE7D-1F077AE8F291"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*","matchCriteriaId":"1B8C2E9C-2305-4DAD-8406-D5BFAFBBEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b1:*:*:*:*:*:*:*","matchCriteriaId":"CF143A96-B3A2-4876-8B50-C583B891752D"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b2:*:*:*:*:*:*:*","matchCriteriaId":"3031BA2A-5FEC-425E-AA1E-DA39FD9CF94E"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b3:*:*:*:*:*:*:*","matchCriteriaId":"6A877D2D-854A-4614-931B-BC42E70CEE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b4:*:*:*:*:*:*:*","matchCriteriaId":"070A2213-B877-42DE-9112-7A90E13778C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b5:*:*:*:*:*:*:*","matchCriteriaId":"53DC7530-D9CC-4E1B-A96D-505CE0005192"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b6:*:*:*:*:*:*:*","matchCriteriaId":"6DAF880E-B556-465A-8CB8-47196EF0D9B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b7:*:*:*:*:*:*:*","matchCriteriaId":"34704098-AD9F-405B-AB35-923546A8B7D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21b8:*:*:*:*:*:*:*","matchCriteriaId":"33E8DEBD-42E4-4EBF-87BF-7F620584BA9B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1401","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0588","sourceIdentifier":"cve@mitre.org","published":"2000-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"4673D2AA-E1BE-4809-94BE-7C6951E9D2D4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1402","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0589","sourceIdentifier":"cve@mitre.org","published":"2000-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:5.0.21:*:*:*:*:*:*:*","matchCriteriaId":"4673D2AA-E1BE-4809-94BE-7C6951E9D2D4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1403","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0590","sourceIdentifier":"cve@mitre.org","published":"2000-07-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DEBB723-06DF-4368-AF20-DC0840FA8556"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0076.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1431","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4878","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0591","sourceIdentifier":"cve@mitre.org","published":"2000-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"690D90A8-E5F4-492D-A338-222CBEB5819A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3DCB9A5D-862A-4266-94D3-385B611A7960"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0038.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1432","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0592","sourceIdentifier":"cve@mitre.org","published":"2000-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:sapporoworks_winproxy:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BC2BEE44-5F58-41F0-985F-0791A967BE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:sapporoworks_winproxy:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7702391A-E631-4720-B417-1B1FEDFA525A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0593","sourceIdentifier":"cve@mitre.org","published":"2000-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:sapporoworks_winproxy:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BC2BEE44-5F58-41F0-985F-0791A967BE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:sapporoworks_winproxy:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7702391A-E631-4720-B417-1B1FEDFA525A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006271417.GFE84146.-BJXON%40lac.co.jp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0594","sourceIdentifier":"cve@mitre.org","published":"2000-07-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_desktop:2.3:*:*:*:*:*:*:*","matchCriteriaId":"39CEEC92-B7FE-4E41-9966-DDA9EDF943C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_ebuilder:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A4B1F951-6F13-4FFF-84F7-0E65A689DB64"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*","matchCriteriaId":"02362C25-B373-4FB1-AF4A-2AFC7F7D4387"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0026.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0098.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0105.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-07/0042.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0018.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-022.0.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-042.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4897","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-07/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-022.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0595","sourceIdentifier":"cve@mitre.org","published":"2000-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-07/0035.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1446","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1437","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-07/0035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0596","sourceIdentifier":"cve@mitre.org","published":"2000-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the \"IE Script\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2000-16.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1398","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=000d01bfe0fb%24418f59b0%2496217aa8%40src.bu.edu","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589359.762392DB%40nat.bg","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=000d01bfe0fb%24418f59b0%2496217aa8%40src.bu.edu","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589359.762392DB%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0597","sourceIdentifier":"cve@mitre.org","published":"2000-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications (VBA) SaveAs function, aka the \"Office HTML Script\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:97:*:*:*:*:*:*:*","matchCriteriaId":"3FFA2986-0E47-43C0-938E-65FC15F13C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*","matchCriteriaId":"3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1399","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589349.ED9DBCAB%40nat.bg","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589349.ED9DBCAB%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0598","sourceIdentifier":"cve@mitre.org","published":"2000-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet proxy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortech:proxy\\+:2.40:*:*:*:*:*:*:*","matchCriteriaId":"35776A0E-D203-482F-B6FE-EB2BAB2FBAC2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0268.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.proxyplus.cz/faq/articles/EN/art01002.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1395","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0268.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.proxyplus.cz/faq/articles/EN/art01002.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0599","sourceIdentifier":"cve@mitre.org","published":"2000-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imesh.com:imesh:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"611DE3FB-88E3-4DB4-9742-DDD0602F9DA2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0335.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.imesh.com/download/download.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1407","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.imesh.com/download/download.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0600","sourceIdentifier":"cve@mitre.org","published":"2000-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1.1:*:netware:*:*:*:*:*","matchCriteriaId":"B708CDB3-0BF9-4FE4-855F-DB6E1FE5A319"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:5.0:*:netware:*:*:*:*:*","matchCriteriaId":"DA8D4321-3683-460F-AFAA-1D31E9B16818"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.0:*:*:*:*:*:*:*","matchCriteriaId":"471D1E06-05B5-4844-A384-19271CAD743C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0264.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1393","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4780","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0601","sourceIdentifier":"cve@mitre.org","published":"2000-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leafdigital:leafchat:1.7:*:*:*:*:*:*:*","matchCriteriaId":"5D9E0D78-B27E-4E6A-88A5-20E7464D2C11"}]}]}],"references":[{"url":"http://www.leafdigital.com/Software/leafChat/history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1396","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.10.10006252056110.74551-100000%40unix.za.net","source":"cve@mitre.org"},{"url":"http://www.leafdigital.com/Software/leafChat/history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.10.10006252056110.74551-100000%40unix.za.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0602","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E521E9F0-2391-4DCD-9B3B-CFC3C6CC0441"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB6C6D8-087A-490B-AC34-75C248DE2FB2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1385","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211209500.22969-100000%40nimue.tpi.pl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211209500.22969-100000%40nimue.tpi.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0603","sourceIdentifier":"cve@mitre.org","published":"2000-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the \"Stored Procedure Permissions\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1444","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-048","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4921","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0604","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211209500.22969-100000%40nimue.tpi.pl","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006211209500.22969-100000%40nimue.tpi.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0605","sourceIdentifier":"cve@mitre.org","published":"2000-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to access the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:courseinfo:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F0007561-D81E-472F-A306-AE336A7B2C2F"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=NTBUGTRAQ&P=R1647","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1460","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=NTBUGTRAQ&P=R1647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0606","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0607","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006192340340.19998-100000%40ferret.lmh.ox.ac.uk","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0608","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"CA46F08C-C959-4239-B5D0-4B0854924CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"DF772BD1-22F1-4AEA-970B-562C6FD38362"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6i:*:*:*:*:*:*:*","matchCriteriaId":"2FEE5850-8115-47EC-ACA5-31ACF7F794A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6j:*:*:*:*:*:*:*","matchCriteriaId":"B2945BC5-C501-49C2-AE58-3D2672DB800C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"348B4CF8-84FD-4F42-B59A-D00A2C355ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"986015E2-61D6-4CE0-91BD-B7EB55A99248"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6i:*:*:*:*:*:*:*","matchCriteriaId":"C7449E62-15E5-4AC0-9914-D874AC8CB2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6j:*:*:*:*:*:*:*","matchCriteriaId":"FC0C7706-812E-4616-AC82-062208753FE2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1376","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-15&msg=4.1.20000621113334.00996820%40qlink.queensu.ca","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-15&msg=4.1.20000621113334.00996820%40qlink.queensu.ca","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0609","sourceIdentifier":"cve@mitre.org","published":"2000-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"CA46F08C-C959-4239-B5D0-4B0854924CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"DF772BD1-22F1-4AEA-970B-562C6FD38362"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6i:*:*:*:*:*:*:*","matchCriteriaId":"2FEE5850-8115-47EC-ACA5-31ACF7F794A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6j:*:*:*:*:*:*:*","matchCriteriaId":"B2945BC5-C501-49C2-AE58-3D2672DB800C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"348B4CF8-84FD-4F42-B59A-D00A2C355ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"986015E2-61D6-4CE0-91BD-B7EB55A99248"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6i:*:*:*:*:*:*:*","matchCriteriaId":"C7449E62-15E5-4AC0-9914-D874AC8CB2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6j:*:*:*:*:*:*:*","matchCriteriaId":"FC0C7706-812E-4616-AC82-062208753FE2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-15&msg=4.1.20000621113334.00996820%40qlink.queensu.ca","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-15&msg=4.1.20000621113334.00996820%40qlink.queensu.ca","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0610","sourceIdentifier":"cve@mitre.org","published":"2000-06-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"DF772BD1-22F1-4AEA-970B-562C6FD38362"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"986015E2-61D6-4CE0-91BD-B7EB55A99248"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0243.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1390","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4770","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0611","sourceIdentifier":"cve@mitre.org","published":"2000-06-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"DF772BD1-22F1-4AEA-970B-562C6FD38362"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmailweb:2.6g:*:*:*:*:*:*:*","matchCriteriaId":"986015E2-61D6-4CE0-91BD-B7EB55A99248"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0243.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1391","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4771","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0612","sourceIdentifier":"cve@mitre.org","published":"2000-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1406","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=395B7E64.9FB3D4DB%40starzetz.de","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=395B7E64.9FB3D4DB%40starzetz.de","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0613","sourceIdentifier":"cve@mitre.org","published":"2000-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"A9C63DA6-1FBC-431A-9D8A-66EA93225294"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/pixtcpreset-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1454","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=B3D6883199DBD311868100A0C9FC2CDC046B72%40protea.citec.net","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4928","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/pixtcpreset-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=B3D6883199DBD311868100A0C9FC2CDC046B72%40protea.citec.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0614","sourceIdentifier":"cve@mitre.org","published":"2000-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*","matchCriteriaId":"E74E0A28-7C78-4160-8BCF-99605285C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vendor/2000-q3/0002.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1450","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vendor/2000-q3/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0615","sourceIdentifier":"cve@mitre.org","published":"2000-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"78D19CF2-C520-4856-901D-7D6FF6340971"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB4716C2-C1EC-4C11-976B-9162503293B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"16A777F4-896E-4BC8-BC73-784F840D81B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"06C0C5A4-9AC7-4E53-8FC3-5C6A5914DA17"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2DC570FD-4F30-4509-B449-540CDFDFC719"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"1B045A1F-4566-4DAB-8A1A-86933F85B8B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D20FC1D5-4CCA-456B-A152-29F0DA126CA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"16DF8D2B-FEF8-47C5-9DAA-8DB92AE4B992"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"03E4468F-44BC-47BC-AE2A-082C4D69136D"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"C9D03015-E0ED-4BF6-81C9-348A10693A34"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"36AB2CEF-2520-4B8B-9AEF-69DA08E38AE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"A4ECCF42-64C9-4D6D-8086-05952DD17847"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"9FC3298E-0FB4-49B8-8610-82CF90DAFE7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"14D76156-AC60-4669-8C3D-6CC8E7BE6900"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"1D812A04-02FA-4521-9DF3-96A1DB731498"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1447","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7361","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0616","sourceIdentifier":"cve@mitre.org","published":"2000-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:4.5:*:*:*:*:*:*:*","matchCriteriaId":"393B794E-E9FA-43B0-A3F6-E30A233CC923"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"529F6FE1-96F5-47C3-8E0D-22A461002A55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:5.5:*:*:*:*:*:*:*","matchCriteriaId":"85A265C6-10F3-430A-BD67-D3DAA9460CC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BE46649B-4577-4DEF-BB79-71E0B96260BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A239948-8AF4-430D-85DD-4DEF1C44CE6D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0294.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0294.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0617","sourceIdentifier":"cve@mitre.org","published":"2000-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanley_t._shebs:xconq:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B4BDC70D-D229-4C72-9F54-68EF2F4B9B6E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0618","sourceIdentifier":"cve@mitre.org","published":"2000-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanley_t._shebs:xconq:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B4BDC70D-D229-4C72-9F54-68EF2F4B9B6E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0619","sourceIdentifier":"cve@mitre.org","published":"2000-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:toplayer:appswitch:2500.0:*:*:*:*:*:*:*","matchCriteriaId":"54039687-2F68-4734-AD40-760217CB8F46"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0680.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0921.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1258","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7364","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0680.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0921.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0620","sourceIdentifier":"cve@mitre.org","published":"2000-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6:*:*:*:*:*:*:*","matchCriteriaId":"341C2874-4A2A-4ECD-A243-10EF6F2588BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.1:*:*:*:*:*:*:*","matchCriteriaId":"97B9657E-D7CE-496F-AE51-8AFA1CCA49CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.2:*:*:*:*:*:*:*","matchCriteriaId":"5A2B4032-71E6-4731-B829-DD8F004B20BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.3:*:*:*:*:*:*:*","matchCriteriaId":"E1DA55DC-E2A9-44B4-84D6-BE9F84898430"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:x:11.0r6.4:*:*:*:*:*:*:*","matchCriteriaId":"2A3657FA-0841-487B-9650-FC06A4E2A88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BEECB0ED-A5C9-4675-9CEB-AD6C19EDA7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B43D5F86-97B2-4175-8ED7-1F937850F9DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0946A224-6A0C-4DE3-89F9-200682431737"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96146116627474&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1409","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4996","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96146116627474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0621","sourceIdentifier":"cve@mitre.org","published":"2000-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the \"Cache Bypass\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6764F97F-6906-4953-BB1C-AA6345FA8FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.01:*:*:*:*:*:*:*","matchCriteriaId":"BA267F42-5A1F-4663-9D4D-AF5DD64FD2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A72832FD-812D-4175-AA50-DC1DDAD5B954"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2000-14.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1501","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5013","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0622","sourceIdentifier":"cve@mitre.org","published":"2000-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long \"keywords\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.3.18:*:*:*:*:*:*:*","matchCriteriaId":"C1D46829-3A28-49AC-9D19-7EFFAE6E55D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.4:*:*:*:*:*:*:*","matchCriteriaId":"971D49D8-BDD1-4B56-830A-7816965069C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"356B3E87-68AD-41F9-A008-D93FFEF536E0"}]}]}],"references":[{"url":"http://website.oreilly.com/support/software/wspro25_releasenotes.txt","source":"cve@mitre.org"},{"url":"http://www.nai.com/research/covert/advisories/043.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1487","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4962","source":"cve@mitre.org"},{"url":"http://website.oreilly.com/support/software/wspro25_releasenotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/research/covert/advisories/043.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0623","sourceIdentifier":"cve@mitre.org","published":"2000-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.3.18:*:*:*:*:*:*:*","matchCriteriaId":"C1D46829-3A28-49AC-9D19-7EFFAE6E55D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.4:*:*:*:*:*:*:*","matchCriteriaId":"971D49D8-BDD1-4B56-830A-7816965069C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"356B3E87-68AD-41F9-A008-D93FFEF536E0"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1492","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0624","sourceIdentifier":"cve@mitre.org","published":"2000-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.64","matchCriteriaId":"0DB469B7-3828-4AC5-925D-4C2117DA51C8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0289.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1496","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.winamp.com/getwinamp/newfeatures.jhtml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4956","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0289.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.winamp.com/getwinamp/newfeatures.jhtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0625","sourceIdentifier":"cve@mitre.org","published":"2000-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netzero:zeroport:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"B56BDFB4-408D-493B-B3B6-E5680FA86D15"}]}]}],"references":[{"url":"http://www.l0pht.com/advisories/netzero.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1483","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.l0pht.com/advisories/netzero.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0626","sourceIdentifier":"cve@mitre.org","published":"2000-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computer_software_manufaktur:alibaba:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DD3CBF4-B593-4C4A-8B9C-D005846B4090"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0237.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1482","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0237.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0627","sourceIdentifier":"cve@mitre.org","published":"2000-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:courseinfo:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F0007561-D81E-472F-A306-AE336A7B2C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:courseinfo:unix:*:*:*:*:*:*:*","matchCriteriaId":"7DD858E2-BC6D-4BBF-A723-470ADC0B11EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0254.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1486","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000719151904.I17986%40securityfocus.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4946","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000719151904.I17986%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0628","sourceIdentifier":"cve@mitre.org","published":"2000-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joshua_chamas:apache_asp:0.16:*:*:*:*:*:*:*","matchCriteriaId":"4F7572B7-3072-4A9A-AD17-DF1B037680AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:joshua_chamas:apache_asp:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7633EABF-1700-432E-9FE2-295F4FDD2F8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joshua_chamas:apache_asp:0.18:*:*:*:*:*:*:*","matchCriteriaId":"7E868058-355F-4CAC-82E2-795AD52B31FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joshua_chamas:apache_asp:1.93:*:*:*:*:*:*:*","matchCriteriaId":"1E758633-F991-424C-B044-3E47D7FF76E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0142.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.nodeworks.com/asp/changes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1457","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4931","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.nodeworks.com/asp/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0629","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8812EC0B-E426-43D7-9E2B-542CAAAB0D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6E8894D1-5147-4065-AA67-ECFE676ED899"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0163.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1459","source":"cve@mitre.org"},{"url":"http://www.sun.com/software/jwebserver/faq/jwsca-2000-02.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sun.com/software/jwebserver/faq/jwsca-2000-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0630","sourceIdentifier":"cve@mitre.org","published":"2000-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the \"File Fragment Reading via .HTR\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1488","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5104","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0631","sourceIdentifier":"cve@mitre.org","published":"2000-07-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the \"Absent Directory Browser Argument\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96390444022878&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1476","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4951","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96390444022878&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0632","sourceIdentifier":"cve@mitre.org","published":"2000-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lsoft:listserv:1.8c:*:*:*:*:*:*:*","matchCriteriaId":"70AFE290-A340-4032-B094-4B7D44D6057E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lsoft:listserv:1.8d:*:*:*:*:*:*:*","matchCriteriaId":"BFA3EAFF-68EC-4504-A73C-28AF55D5DB8C"}]}]}],"references":[{"url":"http://www.lsoft.com/news/default.asp?item=Advisory1","source":"cve@mitre.org"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/43_Advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1490","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4952","source":"cve@mitre.org"},{"url":"http://www.lsoft.com/news/default.asp?item=Advisory1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/nai_labs/asp_set/advisory/43_Advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0633","sourceIdentifier":"cve@mitre.org","published":"2000-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2e:*:alpha:*:*:*:*:*","matchCriteriaId":"2A21DA48-A818-4745-8F58-2C17BFEF44CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2e:*:i386:*:*:*:*:*","matchCriteriaId":"58F0028D-D4BB-4EBC-A665-A4BA95BC29CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2e:*:sparc:*:*:*:*:*","matchCriteriaId":"25B6F37C-9ACD-49F7-9E55-E0FE0B10BBC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0251.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0117.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-053.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4944","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0251.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0634","sourceIdentifier":"cve@mitre.org","published":"2000-04-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:communigate_pro:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"ACA7E146-9B89-4D96-B0AF-5A7D8CF7E933"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0223.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5774","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1493","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5105","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0635","sourceIdentifier":"cve@mitre.org","published":"2000-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akopia:minivend:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6C00576E-C134-4EA3-85E3-448A89DD2F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:akopia:minivend:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A9375BDE-C486-420A-941A-8E6FDC44603D"},{"vulnerable":true,"criteria":"cpe:2.3:a:akopia:minivend:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FB59460C-BD8F-453C-80AD-B0001AF1531C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0150.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1449","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zdnet.com/zdnn/stories/news/0%2C4586%2C2600258%2C00.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4880","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0150.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zdnet.com/zdnn/stories/news/0%2C4586%2C2600258%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0636","sourceIdentifier":"cve@mitre.org","published":"2000-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._a.08.06:*:*:*:*:*:*:*","matchCriteriaId":"643083B1-1762-4DCC-B69B-E1F88951BA22"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.05.35:*:*:*:*:*:*:*","matchCriteriaId":"110052A3-E546-4DD5-9739-FBFE2C377A8A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.07.02:*:*:*:*:*:*:*","matchCriteriaId":"99DF94DF-9E8A-4DAB-A733-3A1B77075974"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.07.03:*:*:*:*:*:*:*","matchCriteriaId":"EE4C44BF-F626-47AE-86B6-95D14CA57D9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.07.17:*:*:*:*:*:*:*","matchCriteriaId":"E3CA4705-7978-4B42-824B-7696296C39D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.08.03:*:*:*:*:*:*:*","matchCriteriaId":"F1110261-8628-493F-8164-6A7DC478A45C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:rev._g.08.04:*:*:*:*:*:*:*","matchCriteriaId":"0A62FF15-83E7-4AF0-BE4F-153330DCE5A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:rev._g.08.20:*:*:*:*:*:*:*","matchCriteriaId":"46BB32BD-8343-4059-A306-83B1DDD739D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:rev._h.08.05:*:*:*:*:*:*:*","matchCriteriaId":"EA79212A-F6D9-47D4-9BE2-82F380E43465"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:rev._h.08.20:*:*:*:*:*:*:*","matchCriteriaId":"D0F35B0A-A56F-4BD8-BD44-6B7298388067"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0265.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1491","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4947","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0265.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0637","sourceIdentifier":"cve@mitre.org","published":"2000-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the \"Excel REGISTER.ID Function\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:97:*:*:*:*:*:*:*","matchCriteriaId":"A78536AA-8694-4E0E-B7C6-9E5C3787D849"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1451","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=396B3F8F.9244D290%40nat.bg","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=396B3F8F.9244D290%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0638","sourceIdentifier":"cve@mitre.org","published":"2000-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B040ABE-485E-4118-989B-6618062A62E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D2D180EE-6ACC-4F1F-8FEE-3CC790AEC74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3435B00B-59AB-4F7F-8936-4DB44581C2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B4F30DBF-78E2-4E6C-BCBF-4E43D0207B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"073613CC-638B-46A9-8BBD-A1D313864BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D29324C9-7C4A-4A5A-A595-A0666498AC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4g:*:*:*:*:*:*:*","matchCriteriaId":"9FDEC456-9591-4195-A251-2196F3049A22"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4h:*:*:*:*:*:*:*","matchCriteriaId":"D7CCF8C5-927E-4D94-9D8D-631134CCF51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4h1:*:*:*:*:*:*:*","matchCriteriaId":"3A6B2570-E8A4-41C8-A5AD-D64333A133E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.09b:*:*:*:*:*:*:*","matchCriteriaId":"69480B13-B4AA-4224-8775-507B4971089D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.09c:*:*:*:*:*:*:*","matchCriteriaId":"FD961EAE-09E4-4574-BDF2-DAA0CB830247"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.09d:*:*:*:*:*:*:*","matchCriteriaId":"B508CE19-E1B7-4240-A86F-D751F40066F6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html","source":"cve@mitre.org"},{"url":"http://bb4.com/README.CHANGES","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4879","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bb4.com/README.CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0639","sourceIdentifier":"cve@mitre.org","published":"2000-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary commands by using bbd to upload a file whose extension will cause it to be executed as a CGI script by the web server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B040ABE-485E-4118-989B-6618062A62E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D2D180EE-6ACC-4F1F-8FEE-3CC790AEC74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3435B00B-59AB-4F7F-8936-4DB44581C2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B4F30DBF-78E2-4E6C-BCBF-4E43D0207B69"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"073613CC-638B-46A9-8BBD-A1D313864BD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D29324C9-7C4A-4A5A-A595-A0666498AC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4g:*:*:*:*:*:*:*","matchCriteriaId":"9FDEC456-9591-4195-A251-2196F3049A22"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4h:*:*:*:*:*:*:*","matchCriteriaId":"D7CCF8C5-927E-4D94-9D8D-631134CCF51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.4h1:*:*:*:*:*:*:*","matchCriteriaId":"3A6B2570-E8A4-41C8-A5AD-D64333A133E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.09b:*:*:*:*:*:*:*","matchCriteriaId":"69480B13-B4AA-4224-8775-507B4971089D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.09c:*:*:*:*:*:*:*","matchCriteriaId":"FD961EAE-09E4-4574-BDF2-DAA0CB830247"},{"vulnerable":true,"criteria":"cpe:2.3:a:sean_macguire:big_brother:1.09d:*:*:*:*:*:*:*","matchCriteriaId":"B508CE19-E1B7-4240-A86F-D751F40066F6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1494","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5103","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0171.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0640","sourceIdentifier":"cve@mitre.org","published":"2000-07-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_poulsen:guildftpd:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"CACDEBBB-1D5F-49C3-A778-830DF5B2C4A1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/573","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1452","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4922","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0641","sourceIdentifier":"cve@mitre.org","published":"2000-07-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Savant web server allows remote attackers to execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_lamont:savant_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3712C895-76D6-4C74-8A60-59696433313F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4901","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0642","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itafrica:webactive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2DDF8C55-A416-4D20-86A0-F86875E60C12"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1497","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671%40Rage.Resentment.org","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671%40Rage.Resentment.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0643","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itafrica:webactive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2DDF8C55-A416-4D20-86A0-F86875E60C12"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1470","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671%40Rage.Resentment.org","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4949","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200007130827.BAA32671%40Rage.Resentment.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0644","sourceIdentifier":"cve@mitre.org","published":"2000-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*","matchCriteriaId":"0F0D720E-2C84-4AD8-8B2A-9F73E3396AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1477","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1506","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5003","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0645","sourceIdentifier":"cve@mitre.org","published":"2000-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*","matchCriteriaId":"0F0D720E-2C84-4AD8-8B2A-9F73E3396AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1506","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0646","sourceIdentifier":"cve@mitre.org","published":"2000-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferred."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*","matchCriteriaId":"0F0D720E-2C84-4AD8-8B2A-9F73E3396AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1506","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0647","sourceIdentifier":"cve@mitre.org","published":"2000-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*","matchCriteriaId":"0F0D720E-2C84-4AD8-8B2A-9F73E3396AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1506","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0648","sourceIdentifier":"cve@mitre.org","published":"2000-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1456","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13BvU6-0007d8-00%40dwarf.box.sk","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13BvU6-0007d8-00%40dwarf.box.sk","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0649","sourceIdentifier":"cve@mitre.org","published":"2000-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"547AB6E2-4E9F-4783-8BB4-0AE297A38C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E701AB0D-E335-47DF-A0CA-607D5C6E9255"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1499","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0650","sourceIdentifier":"cve@mitre.org","published":"2000-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:netshield:4.5:*:*:*:*:*:*:*","matchCriteriaId":"AE266076-85EF-4240-811D-FCC90970728A"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:virusscan:4.5:*:windows_nt:*:*:*:*:*","matchCriteriaId":"3F370D4D-5702-46B1-90C5-9D328B24ED55"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1458","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1458","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5177","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=2753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0651","sourceIdentifier":"cve@mitre.org","published":"2000-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersonate another user by replaying the authentication requests and responses from port 3024 of the victim's machine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"690D90A8-E5F4-492D-A338-222CBEB5819A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3DCB9A5D-862A-4266-94D3-385B611A7960"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1440","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=06256915.00591E18.00%40uprrsmtp2.notes.up.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0652","sourceIdentifier":"cve@mitre.org","published":"2000-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the \"/servlet/file\" string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"64D02294-3244-4CB3-AC4A-5ACE510DCDDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"85D0DA05-D76A-4623-B7EC-07A9D06E6E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"A0AA131F-93DA-481D-8823-0E9C81FCA89B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0342.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1500","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5012","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0342.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0653","sourceIdentifier":"cve@mitre.org","published":"2000-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the \"Persistent Mail-Browser Link\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6764F97F-6906-4953-BB1C-AA6345FA8FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.01:*:*:*:*:*:*:*","matchCriteriaId":"BA267F42-5A1F-4663-9D4D-AF5DD64FD2DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A72832FD-812D-4175-AA50-DC1DDAD5B954"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-045","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0654","sourceIdentifier":"cve@mitre.org","published":"2000-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog, aka a variant of the \"DTS Password\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1466","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4582","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0655","sourceIdentifier":"cve@mitre.org","published":"2000-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:m15:*:*:*:*:*:*:*","matchCriteriaId":"C85C3F06-8FFF-4A6F-BB86-B66A6031647E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.05:*:*:*:*:*:*:*","matchCriteriaId":"494AFC1E-67A3-41CA-B920-B8F778B68A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"213EB326-33D1-4329-A6BB-B1AA1C626E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"61268CF9-E279-4F63-B228-F9ED4B93BB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-011.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0456.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0116.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_60.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-046.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1503","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D200007242356.DAA01274%40false.com","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000016.html","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-011.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0456.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_60.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D200007242356.DAA01274%40false.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000016.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0656","sourceIdentifier":"cve@mitre.org","published":"2000-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.4:*:*:*:*:*:*:*","matchCriteriaId":"623944AE-661A-429F-BCE4-8CB6691186CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1504","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0657","sourceIdentifier":"cve@mitre.org","published":"2000-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.4:*:*:*:*:*:*:*","matchCriteriaId":"623944AE-661A-429F-BCE4-8CB6691186CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1504","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0658","sourceIdentifier":"cve@mitre.org","published":"2000-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.4:*:*:*:*:*:*:*","matchCriteriaId":"623944AE-661A-429F-BCE4-8CB6691186CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1504","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0659","sourceIdentifier":"cve@mitre.org","published":"2000-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.4:*:*:*:*:*:*:*","matchCriteriaId":"623944AE-661A-429F-BCE4-8CB6691186CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1504","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0660","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:2.1:*:standard:*:*:*:*:*","matchCriteriaId":"27A288FA-8810-4615-B2AD-E595FEDA3A66"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0173.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1459","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1462","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4913","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0661","sourceIdentifier":"cve@mitre.org","published":"2000-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wircsrv:irc_server:5.0.7s:*:*:*:*:*:*:*","matchCriteriaId":"F7DE5E55-1B57-40FC-AC20-E016046A90F1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0120.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1448","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4914","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0662","sourceIdentifier":"cve@mitre.org","published":"2000-07-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1474","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=396EF9D5.62EEC625%40nat.bg","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5107","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=396EF9D5.62EEC625%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0663","sourceIdentifier":"cve@mitre.org","published":"2000-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the \"Relative Shell Path\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=269049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1507","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5040","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=269049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0664","sourceIdentifier":"cve@mitre.org","published":"2000-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DCFB725E-36DC-44BF-8642-42DA0DCFEF81"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0374.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/388","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4999","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0374.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0665","sourceIdentifier":"cve@mitre.org","published":"2000-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamsoft:telsrv:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D8B9B04F-C089-40F7-B74B-7343377DD049"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamsoft:telsrv:1.5:*:*:*:*:*:*:*","matchCriteriaId":"5F4743AA-82D5-4FB2-A170-AE0956324342"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0031.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0056.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/373","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1478","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4945","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0666","sourceIdentifier":"cve@mitre.org","published":"2000-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:alpha:*:*:*:*:*","matchCriteriaId":"33E4AFED-E180-429F-AEAB-E9FC311319E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:powerpc:*:*:*:*:*","matchCriteriaId":"FD8008FD-421F-4650-8C42-848B95689CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:sparc:*:*:*:*:*","matchCriteriaId":"1BAEA161-4A19-4B28-97D0-B741D2BBF7FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*","matchCriteriaId":"E74E0A28-7C78-4160-8BCF-99605285C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*","matchCriteriaId":"6E2FE291-1142-4627-A497-C0BB0D934A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF1A678-FEF1-4549-8EDC-518444CFC57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0206.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0230.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0260.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-025.0.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-17.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-043.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1480","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4939","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-025.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0667","sourceIdentifier":"cve@mitre.org","published":"2000-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0273.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1512","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0668","sourceIdentifier":"cve@mitre.org","published":"2000-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_k._johnson:pam_console:0.66:*:*:*:*:*:*:*","matchCriteriaId":"0D11E305-8077-4210-9115-B5047AE8C25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_k._johnson:pam_console:0.72_unpatched:*:*:*:*:*:*:*","matchCriteriaId":"487A2F8B-E4FE-4181-9B6F-A99AE6850D1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-044.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1513","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5001","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0398.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0455.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0669","sourceIdentifier":"cve@mitre.org","published":"2000-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.0:sp5:*:*:*:*:*:*","matchCriteriaId":"D6002095-9692-4B60-800E-B85A0BA7A9D6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1467","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=000501bfeab5%249330c3d0%24d801a8c0%40dimuthu.baysidegrp.com.au","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=000501bfeab5%249330c3d0%24d801a8c0%40dimuthu.baysidegrp.com.au","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0670","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvsweb_developer:cvsweb:1.80:*:*:*:*:*:*:*","matchCriteriaId":"C515B653-AF7E-43A6-82CE-8727C3341631"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:37.cvsweb.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0178.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0196.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1469","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000015.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4925","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:37.cvsweb.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0196.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0671","sourceIdentifier":"cve@mitre.org","published":"2000-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a null character (%00) to the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roxen:webserver:2.0.x:*:*:*:*:*:*:*","matchCriteriaId":"A5A2BA92-BA46-4CA9-8BBD-0FB1E0C9FECE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1510","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4965","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0672","sourceIdentifier":"cve@mitre.org","published":"2000-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BAFF8D91-80A2-454A-8B44-A5A889002692"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC42876-65AD-476A-8B62-25D4E15D1BB6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1548","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5160","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0309.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0673","sourceIdentifier":"cve@mitre.org","published":"2000-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name Conflict or Name Release datagram, aka the \"NetBIOS Name Server Protocol Spoofing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:terminal_server:*:*:*:*:*:*:*","matchCriteriaId":"22B1D814-7954-4E8B-B20C-410B53D9202A"}]}]}],"references":[{"url":"http://www.nai.com/research/covert/advisories/044.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1514","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1515","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5035","source":"cve@mitre.org"},{"url":"http://www.nai.com/research/covert/advisories/044.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0674","sourceIdentifier":"cve@mitre.org","published":"2000-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_vision:ftp_browser:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B813D1F-D579-4764-8C72-E7BFA1B594F3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0177.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1471","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5187","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0177.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0675","sourceIdentifier":"cve@mitre.org","published":"2000-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infopulse:gatekeeper:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5","matchCriteriaId":"9ED9FD73-52D1-4BAC-9915-AA550398B85A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1477","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=00af01bfece2%24a52cbd80%24367e1ec4%40kungphusion","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4948","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=00af01bfece2%24a52cbd80%24367e1ec4%40kungphusion","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0676","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the \"file\", \"http\", \"https\", and \"ftp\" protocols, as demonstrated by Brown Orifice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.04:*:*:*:*:*:*:*","matchCriteriaId":"94F9EFE4-7853-4809-8D94-03B3EFD739E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.05:*:*:*:*:*:*:*","matchCriteriaId":"494AFC1E-67A3-41CA-B920-B8F778B68A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"213EB326-33D1-4329-A6BB-B1AA1C626E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"61268CF9-E279-4F63-B228-F9ED4B93BB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0236.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0265.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-027.1.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-15.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_60.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-054.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1546","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0265.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-027.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_60.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0677","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.data:*:*:*:*:*:*:*:*","matchCriteriaId":"43126EB5-E238-4512-85B9-1B3E3BA32066"}]}]}],"references":[{"url":"http://xforce.iss.net/alerts/advise60.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4976","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise60.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0678","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an attacker who can modify a victim's public certificate to decrypt any data that has been encrypted with the modified certificate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:5.5.3i:*:*:*:*:*:*:*","matchCriteriaId":"FC04D2F4-263E-4ED3-B22A-6AEEB3E03B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:6.5.1i:*:*:*:*:*:*:*","matchCriteriaId":"7FAE1A6C-DB2E-41BE-8497-2F71F79FB9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:6.5.3i:*:*:*:*:*:*:*","matchCriteriaId":"180A6E01-8D38-4938-BCC6-4A004A2A6BF8"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2000-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4354","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1606","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0679","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1523","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0680","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1524","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3Dhvou2daoebb.fsf%40serein.m17n.org","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0681","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:*:sp2:*:*:*:*:*:*","versionEndIncluding":"4.5.2","matchCriteriaId":"E27911BD-A0AE-46F4-BF7D-842E466715FB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0186.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1570","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0682","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD5D4AD-0BA3-42F7-852F-524488D74A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"AC966FC9-3ED4-4CCD-B1E6-74E8CC7CEBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*","matchCriteriaId":"A8F69E7A-8BBB-4D20-AEE9-F37155AD5C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:express:*:*:*:*:*","matchCriteriaId":"0FAB4F19-EFE0-4860-B9E9-E3938A36AE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:express:*:*:*:*:*","matchCriteriaId":"16324B74-4143-473D-858F-B5B1899822B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:express:*:*:*:*:*","matchCriteriaId":"DFA4200B-3877-4FC9-B2AB-E51675CAD71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:express:*:*:*:*:*","matchCriteriaId":"B1C2B98A-EF68-4569-B50C-8F21D2298435"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:express:*:*:*:*:*","matchCriteriaId":"8B0B183B-95A3-463D-B76B-50640F554013"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:express:*:*:*:*:*","matchCriteriaId":"36A0EFDA-409E-44F0-9F8B-167A72D2361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:express:*:*:*:*:*","matchCriteriaId":"51A8AB95-FB23-4A7A-A6F5-EF442EAABD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*","matchCriteriaId":"5F00947F-1804-41D5-8F2B-7E48C77B1306"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:express:*:*:*:*:*","matchCriteriaId":"114E5E3E-84B2-4DD3-98FC-2ABFFA41BAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:express:*:*:*:*:*","matchCriteriaId":"9B6656CF-65ED-4F8E-B9F2-75A9DC1571D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:express:*:*:*:*:*","matchCriteriaId":"7C013AE2-4B06-437A-815F-FAADD28CFA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:express:*:*:*:*:*","matchCriteriaId":"D7306C09-BFBA-4DC0-8EA1-E5A5C0BC080F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000731.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1481","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1518","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000731.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0683","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD5D4AD-0BA3-42F7-852F-524488D74A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"AC966FC9-3ED4-4CCD-B1E6-74E8CC7CEBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*","matchCriteriaId":"A8F69E7A-8BBB-4D20-AEE9-F37155AD5C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:express:*:*:*:*:*","matchCriteriaId":"0FAB4F19-EFE0-4860-B9E9-E3938A36AE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:express:*:*:*:*:*","matchCriteriaId":"16324B74-4143-473D-858F-B5B1899822B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:express:*:*:*:*:*","matchCriteriaId":"DFA4200B-3877-4FC9-B2AB-E51675CAD71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:express:*:*:*:*:*","matchCriteriaId":"B1C2B98A-EF68-4569-B50C-8F21D2298435"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:express:*:*:*:*:*","matchCriteriaId":"8B0B183B-95A3-463D-B76B-50640F554013"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:express:*:*:*:*:*","matchCriteriaId":"36A0EFDA-409E-44F0-9F8B-167A72D2361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:express:*:*:*:*:*","matchCriteriaId":"51A8AB95-FB23-4A7A-A6F5-EF442EAABD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*","matchCriteriaId":"5F00947F-1804-41D5-8F2B-7E48C77B1306"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:express:*:*:*:*:*","matchCriteriaId":"114E5E3E-84B2-4DD3-98FC-2ABFFA41BAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:express:*:*:*:*:*","matchCriteriaId":"9B6656CF-65ED-4F8E-B9F2-75A9DC1571D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:express:*:*:*:*:*","matchCriteriaId":"7C013AE2-4B06-437A-815F-FAADD28CFA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:express:*:*:*:*:*","matchCriteriaId":"D7306C09-BFBA-4DC0-8EA1-E5A5C0BC080F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000728.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1517","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0410.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000728.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0684","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"742DCC2D-B4AD-4D16-8338-21E258C4FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6E3A5C91-82C4-40B6-B8F2-C083AEF76723"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"76738B84-33DD-450B-90A2-B22B77D52857"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000731.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1525","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000731.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0685","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"742DCC2D-B4AD-4D16-8338-21E258C4FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6E3A5C91-82C4-40B6-B8F2-C083AEF76723"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"76738B84-33DD-450B-90A2-B22B77D52857"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000731.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1525","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0434.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://developer.bea.com/alerts/security_000731.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0686","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"E9B28CAE-05E4-48D0-AFBF-5E36D0ACC62C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1630","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0687","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"E9B28CAE-05E4-48D0-AFBF-5E36D0ACC62C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1630","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0688","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:subscribe_me_lite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"40571E79-263F-41C4-A5E8-AB5EDC66A281"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96722957421029&w=2","source":"cve@mitre.org"},{"url":"http://www.cgiscriptcenter.com/subscribe/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1607","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96722957421029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cgiscriptcenter.com/subscribe/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0689","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:account_manager:lite_1.0:*:*:*:*:*:*:*","matchCriteriaId":"9138B699-ECC9-48AF-9EBA-9CE70D7C0A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:account_manager:pro_1.0:*:*:*:*:*:*:*","matchCriteriaId":"2322740D-1D73-408B-BFE8-BCC7AD0953E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cgiscriptcenter.com/acctlite/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1604","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5125","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cgiscriptcenter.com/acctlite/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0690","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E97D1366-A8E7-42C7-B83A-B4BF58FC3F39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.02:*:*:*:*:*:*:*","matchCriteriaId":"3A22F425-6EAB-4292-82BC-5B198DDE4E39"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0370.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0452.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0370.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0452.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0691","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gert_doering:mgetty:1.1.19:*:*:*:*:*:*:*","matchCriteriaId":"CB9DA80F-5D86-425B-BC06-1FEF1117D628"},{"vulnerable":true,"criteria":"cpe:2.3:a:gert_doering:mgetty:1.1.20:*:*:*:*:*:*:*","matchCriteriaId":"3E24C243-AA86-40A3-9DD3-A87859E25C40"},{"vulnerable":true,"criteria":"cpe:2.3:a:gert_doering:mgetty:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"C9508A8E-D4C1-4C21-B25F-E8145EC5F75B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-029.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1612","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-029.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0692","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CD0B7FE2-93BD-483D-9392-97858585B0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A1BA78A3-0F0F-4082-938C-EF2265F1CD22"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1597","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0693","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the \"cp\" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate \"cp\" program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tech-source:raptor_gfx_pgx32:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"10ADF855-F422-471E-B5B6-3E217C855D20"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/1501","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1563","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/1501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0694","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tech-source:raptor_gfx_pgx32:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"10ADF855-F422-471E-B5B6-3E217C855D20"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5740","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0695","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tech-source:raptor_gfx_pgx32:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"10ADF855-F422-471E-B5B6-3E217C855D20"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0696","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A70C7D11-5DEA-473C-AB5A-C3676EAAE668"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4:*:*:*:*:*:*:*","matchCriteriaId":"09366485-E68C-4E5B-8C76-FD6D8CD48B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E03C0EB-3336-4CF9-8088-CD90E768B1A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3D613BAC-1341-4B6D-971A-9CB9FE4342EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/sun/2000-q3/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2000/Aug/0105.html","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/en/avisos/s21sec-004-en.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1554","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5069","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/sun/2000-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2000/Aug/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/en/avisos/s21sec-004-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0697","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A70C7D11-5DEA-473C-AB5A-C3676EAAE668"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4:*:*:*:*:*:*:*","matchCriteriaId":"09366485-E68C-4E5B-8C76-FD6D8CD48B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E03C0EB-3336-4CF9-8088-CD90E768B1A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3D613BAC-1341-4B6D-971A-9CB9FE4342EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/sun/2000-q3/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2000/Aug/0105.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5058.php","source":"cve@mitre.org"},{"url":"http://www.s21sec.com/en/avisos/s21sec-004-en.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1556","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/sun/2000-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2000/Aug/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/5058.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s21sec.com/en/avisos/s21sec-004-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0698","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minicom:minicom:1.82.0:*:*:*:*:*:*:*","matchCriteriaId":"446014BF-F292-4939-A21D-9C8D0C9B078C"},{"vulnerable":true,"criteria":"cpe:2.3:a:minicom:minicom:1.82.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3AA40E-A4C2-4588-945E-FD7713B4E215"},{"vulnerable":true,"criteria":"cpe:2.3:a:minicom:minicom:1.83.0:*:*:*:*:*:*:*","matchCriteriaId":"5E362D61-1BA2-458C-BE54-67D96BA90062"},{"vulnerable":true,"criteria":"cpe:2.3:a:minicom:minicom:1.83.1:*:*:*:*:*:*:*","matchCriteriaId":"128737AC-4AB8-4132-BF18-7456C99931B6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/77361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1599","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/77361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0699","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the PASS command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1560","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0700","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, do not properly handle line card failures, which allows remote attackers to bypass ACLs or force the interface to stop forwarding packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"82BFEABB-6E90-4A24-BBE3-2BDB524028A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"9B784C9F-79EE-4D08-9D03-985EC7E378FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2A6F8329-15C7-4FED-A61D-5AF4F3A33976"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5CFBBDA3-8A5E-407D-8608-45C1BD56BF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FF2207E5-7458-40C5-AEF4-73B271EAB3C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1A0D82E1-CCF7-429B-A637-479E839EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5BB7513-C232-4B4F-BE68-972B05086ABD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"ECCE69A3-41C6-4893-86D4-7F264352C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gigabit_switch_router_12008:*:*:*:*:*:*:*:*","matchCriteriaId":"935E7463-DE83-4743-B51C-A8DB8433E371"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gigabit_switch_router_12012:*:*:*:*:*:*:*:*","matchCriteriaId":"8FBF1961-42C5-4570-87A4-C0B962CA5DEF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gigabit_switch_router_12016:*:*:*:*:*:*:*:*","matchCriteriaId":"E75CA58A-9E97-462D-A745-B6927A350015"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/gsraclbypassdos-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/793","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/798","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1541","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/gsraclbypassdos-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0701","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"767101D3-ABB0-4D34-AA28-75F78A392F39"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0474.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0479.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-030.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/73220","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1539","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000802105050.A11733%40rak.isternet.sk","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0474.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0479.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/73220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000802105050.A11733%40rak.isternet.sk","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0702","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0261.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/1602","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5131","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/1602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0703","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"suidperl (aka sperl) does not properly cleanse the escape sequence \"~!\" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the \"interactive\" environmental variable and calling suidperl with a filename that contains the escape sequence."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C7EF5BB8-FFEA-4927-A289-3C9A7ADEC6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:*","matchCriteriaId":"AB034FE1-9575-45B4-9E8F-1B068E3ED1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D6D7F3D2-FE93-4F2F-B8FB-F2A7869502FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.6:*:*:*:*:*:*:*","matchCriteriaId":"EA6112C9-0E67-47D3-94A7-0D0254ECF27F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0022.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0086.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0113.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0153.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-026.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_59.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-048.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1547","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000017.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-026.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_59.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-August/000017.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0704","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewnn:freewnn:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F70C9AEB-A7EC-437B-A8E6-8F51837C1C16"},{"vulnerable":true,"criteria":"cpe:2.3:a:freewnn:freewnn:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8EEEDC3E-18E9-4E4D-A6B9-E6128DA8D21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freewnn:freewnn:1.1.1_axxx:*:*:*:*:*:*:*","matchCriteriaId":"160AC5B9-9953-4D42-9B1E-861684212BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:omron:worldview:6.5:*:*:*:*:*:*:*","matchCriteriaId":"E09A2D35-994C-4C62-8010-8340CE958128"},{"vulnerable":true,"criteria":"cpe:2.3:a:wnn:wnn4:4.2.2tl:*:*:*:*:*:*:*","matchCriteriaId":"EBDB0ACB-6D53-471E-AABD-99451747ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wnn:wnn4:4.2.5tl:*:*:*:*:*:*:*","matchCriteriaId":"BC53AB3A-7442-47DE-AAF6-16C1998746D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:wnn:wnn4:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D3D3BC05-E25A-47AE-93D2-AF695FD91266"}]}]}],"references":[{"url":"ftp://sgigate.sgi.com/security/20000803-01-A","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11080","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1603","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5163","source":"cve@mitre.org"},{"url":"ftp://sgigate.sgi.com/security/20000803-01-A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0705","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luca_deri:ntop:1.2a7_9:*:*:*:*:*:*:*","matchCriteriaId":"79299128-535E-4376-937F-28019654E77E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0459.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/1496","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-049.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1550","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0459.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/1496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0706","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luca_deri:ntop:1.2a7_9:*:*:*:*:*:*:*","matchCriteriaId":"79299128-535E-4376-937F-28019654E77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:luca_deri:ntop:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"AA98ACBB-664A-452D-818C-2E59593F390B"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:36.ntop.asc","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000830","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1576","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:36.ntop.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0707","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pccs-linux:mysqldatabase_admin_tool:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EC4ADEBB-E37B-4572-9F0C-156BF9B0AEEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:pccs-linux:mysqldatabase_admin_tool:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FE096BF7-B9EE-4BB9-BEAA-0EC02665EAFA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0015.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://pccs-linux.com/public/view.php3?bn=agora_pccslinux&key=965951324","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1557","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://pccs-linux.com/public/view.php3?bn=agora_pccslinux&key=965951324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/1557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0708","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:telnetserver:2000:*:*:*:*:*:*:*","matchCriteriaId":"5CED3EFE-3DFD-4C17-9F67-8FDE91A51845"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=NTBUGTRAQ&P=R4247","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.pragmasys.com/TelnetServer/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1605","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=NTBUGTRAQ&P=R4247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.pragmasys.com/TelnetServer/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0709","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1608","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0710","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1608","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://msdn.microsoft.com/workshop/languages/fp/2000/sr12.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0711","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:*","matchCriteriaId":"CB67AEF8-DD02-4F20-B920-AC0B26D47C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:*","matchCriteriaId":"D133B730-EEDA-46E7-8CC4-4D0104D65C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:*","matchCriteriaId":"962D0B64-8EEE-4589-84B3-D504906AEEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.04:*:*:*:*:*:*:*","matchCriteriaId":"94F9EFE4-7853-4809-8D94-03B3EFD739E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.05:*:*:*:*:*:*:*","matchCriteriaId":"494AFC1E-67A3-41CA-B920-B8F778B68A99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"61268CF9-E279-4F63-B228-F9ED4B93BB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2000-15.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1545","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0712","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lids:lids:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"4B60F7A3-13ED-4B0C-B5FD-4C99C2284198"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0486.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.egroups.com/message/lids/1038","source":"cve@mitre.org"},{"url":"http://www.lids.org/changelog.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0486.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.egroups.com/message/lids/1038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lids.org/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0713","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"465F9134-DD86-4F13-8C39-949BE6E7389A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4C05F6A5-0FB3-489B-9B8B-64C569C03D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AABA4FE3-662B-4956-904D-45086E000890"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_business_tools:4.0:*:*:*:*:*:*:*","matchCriteriaId":"36194C6A-7CA0-4AFF-A4E8-5B1A716F59F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_business_tools:4.05:*:*:*:*:*:*:*","matchCriteriaId":"13A1E8E4-FDF2-4972-9F29-64BDCA141178"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1C92642-7C8D-411A-8726-06A8A6483D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F509566A-6D4A-40C0-8A16-F8765C5DCAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0382.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/misc/pdfsecurity.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1509","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0382.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.adobe.com/misc/pdfsecurity.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0714","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_massachusetts:scheme:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"EAB6C95E-E1F1-4DAC-A452-C770E7CDAAB6"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-047.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1551","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0715","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kirk_bauer:diskcheck:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B7D94EC1-0630-41DE-A6C9-D55480519BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2000/Aug/0082.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2000/Aug/0096.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2000/Jun/0298.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1552","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2000/Aug/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2000/Aug/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2000/Jun/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0716","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*","matchCriteriaId":"63BE92A3-5320-4E68-89F7-BF977E602FB5"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=459","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1553","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5070","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0717","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goodtech:ftp_server_95_98:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBC9344-4655-4231-94E5-AC41D7E30BBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:goodtech:ftp_server_95_98:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24DFAA5A-749D-41A1-A7A2-8DAB6C3912EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:goodtech:ftp_server_nt_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B559198F-F002-4322-BC0E-6A6AA69FB11D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=02ff01c0124c%24e9387660%240201a8c0%40aviram","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5166","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=02ff01c0124c%24e9387660%240201a8c0%40aviram","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0718","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0146.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1567","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0719","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:varicad:varicad:7.0:*:*:*:*:*:*:*","matchCriteriaId":"CD92E9C9-86AB-4692-895E-8DFE9DD8E99C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0126.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0720","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new authors by directly posting an HTTP request to the new.cgi program with an addAuthor parameter, and setting the Referer to the news.cgi program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gwscripts:gwscripts_news_publisher:1.05:*:*:*:*:*:*:*","matchCriteriaId":"2DF581D7-7607-43EA-A267-5F8B3785FFF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gwscripts:gwscripts_news_publisher:1.05a:*:*:*:*:*:*:*","matchCriteriaId":"11FA1E31-1E21-414A-93F3-DB139DD8C9E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gwscripts:gwscripts_news_publisher:1.05b:*:*:*:*:*:*:*","matchCriteriaId":"D99B8B94-4BDD-4E63-8133-E9F4FC8C62BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gwscripts:gwscripts_news_publisher:1.06:*:*:*:*:*:*:*","matchCriteriaId":"756FAAEC-D6C7-4390-BC94-2BC554B19C15"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1621","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5169","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=003301c0123b%2418f8c1a0%24953b29d4%40e8s9s4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0721","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan horses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:multisoft:flagship:4.4:*:*:*:*:*:*:*","matchCriteriaId":"1392F771-F12E-4873-B7DC-3DD1D8D97F9B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0114.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1586","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0722","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:gnome_updater:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A671C7C-4645-42A2-BCB2-24889376733A"},{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:gnome_updater:0.2:*:*:*:*:*:*:*","matchCriteriaId":"3A0F6CDB-69CA-43C8-9F40-06449CCD5E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:gnome_updater:0.3:*:*:*:*:*:*:*","matchCriteriaId":"527BBC9A-C2B9-40A0-8172-36DF4D1A698D"},{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:gnome_updater:0.4:*:*:*:*:*:*:*","matchCriteriaId":"8A55263F-7D90-448A-BCC0-AA3593262310"},{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:gnome_updater:0.5:*:*:*:*:*:*:*","matchCriteriaId":"1FCEF096-31AA-4038-AF34-9B580E2C2135"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0240.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1593","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0240.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0723","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:gnome_installer:0.2:*:*:*:*:*:*:*","matchCriteriaId":"16525724-A6BF-4DA6-A4CF-CFDE674E11D6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1596","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0724","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:helix_code:go-gnome_pre-installer:1.5:*:*:*:*:*:*:*","matchCriteriaId":"584CAC57-D4D6-4A00-BFFC-FE292CBFBB94"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0351.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0356.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1622","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0351.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0356.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0725","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:1.10.3:*:*:*:*:*:*:*","matchCriteriaId":"46B2B101-676C-4EF3-90FB-7B5D36D1ADF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C49596F-E215-4B70-8397-3C247F509D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"23673C10-0D61-4835-A37C-9AAA00F1DA30"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2_beta1:*:*:*:*:*:*:*","matchCriteriaId":"33CAC1ED-C055-4526-AE2A-E758C8960466"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0198.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0259.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2000/20000821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-052.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1577","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Hotfix_08_09_2000/security_alert","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0198.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0259.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2000/20000821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Hotfix_08_09_2000/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0726","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalkerlab:mailers:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F3A1CB18-39D9-46DA-827A-207C5FFF45F5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1623","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000829194618.H7744%40thathost.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000829194618.H7744%40thathost.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0727","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via a URL that contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*","matchCriteriaId":"28CC6233-E207-40CC-81FF-A8670EEA4295"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96766355023239&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96886599829687&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20000910a","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-060.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1624","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96766355023239&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96886599829687&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20000910a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0728","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*","matchCriteriaId":"28CC6233-E207-40CC-81FF-A8670EEA4295"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96766355023239&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96886599829687&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-060.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1624","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96766355023239&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96886599829687&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-031.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0729","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0337.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1625","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5967","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0337.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0730","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0731","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jeremy_arnold:worm_webserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AE5ACE0C-474A-4D85-A8A2-AC593546D66F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0111.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1535","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5148","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0732","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Worm HTTP server allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jeremy_arnold:worm_webserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AE5ACE0C-474A-4D85-A8A2-AC593546D66F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0111.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1626","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5149","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0733","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"}]}]}],"references":[{"url":"ftp://sgigate.sgi.com/security/20000801-02-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1572","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"ftp://sgigate.sgi.com/security/20000801-02-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0734","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeye_digital_security:iris:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EEEA14BE-9F19-48F2-9683-40FB7B8DF449"},{"vulnerable":true,"criteria":"cpe:2.3:a:spynet:capturenet:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"720C0A6B-DCFE-442D-B48B-D595B53E5C52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96774637326591&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1627","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96774637326591&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0735","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user replies to a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:1.26.3:*:*:*:*:*:*:*","matchCriteriaId":"67D6EB04-364E-4F14-BD36-F37C20AD8047"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0234.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1588","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0736","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:1.26.3:*:*:*:*:*:*:*","matchCriteriaId":"67D6EB04-364E-4F14-BD36-F37C20AD8047"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0234.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1588","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://member.nifty.ne.jp/rimarts/becky-e/Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0737","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the \"Service Control Manager Named Pipe Impersonation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1535","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0738","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5:*:*:*:*:*:*:*","matchCriteriaId":"27DD72FC-3FEF-43BC-8A68-3299213151F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0101.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1589","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5100","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0739","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9B0AA86-A1A2-4154-8F93-CD40F4A4D820"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0hotfix1:*:*:*:*:*:*:*","matchCriteriaId":"E47369C1-0D9F-49F8-910E-CEB193AD7115"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0hotfix2:*:*:*:*:*:*:*","matchCriteriaId":"591E0058-8826-455E-9D05-CB8387FB0D5E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/hf3pki10.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1489","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1537","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5066","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/hf3pki10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0740","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9B0AA86-A1A2-4154-8F93-CD40F4A4D820"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0hotfix1:*:*:*:*:*:*:*","matchCriteriaId":"E47369C1-0D9F-49F8-910E-CEB193AD7115"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0hotfix2:*:*:*:*:*:*:*","matchCriteriaId":"591E0058-8826-455E-9D05-CB8387FB0D5E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/hf3pki10.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1488","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1536","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5026","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/hf3pki10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0741","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E9B0AA86-A1A2-4154-8F93-CD40F4A4D820"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0hotfix1:*:*:*:*:*:*:*","matchCriteriaId":"E47369C1-0D9F-49F8-910E-CEB193AD7115"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:net_tools_pki_server:1.0hotfix2:*:*:*:*:*:*:*","matchCriteriaId":"591E0058-8826-455E-9D05-CB8387FB0D5E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/hf3pki10.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1490","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1538","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/hf3pki10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0742","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address, aka the \"Malformed IPX Ping Packet\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1544","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&mid=63120","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-054","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&mid=63120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0743","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) that contains a long ticket value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_minnesota:gopherd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C64BD158-CF62-438F-BD18-3841BB617411"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_minnesota:gopherd:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3DFF8DA-128D-465D-9730-1B4FFD46551E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0112.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1569","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0112.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0744","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2023-11-07T01:55:23.877","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2000-0743. Reason: This candidate is a duplicate of CVE-2000-0743. Notes: All CVE users should reference CVE-2000-0743 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2000-0745","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A9E1DB3-F0A2-4BD8-9D9D-53CA07B50ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7200662-F3B7-4755-8887-3BEEEDB469F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0243.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1521","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1592","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0746","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.  They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site, aka the \"IIS Cross-Site Scripting\" vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*","matchCriteriaId":"0951E183-2BFE-4B19-9F06-107B5E22DBC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1594","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1595","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=39A12BD6.E811BF4F%40nat.bg","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=39A12BD6.E811BF4F%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0747","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0379.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5036","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0379.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0748","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with a Trojan horse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"AC07AD0D-5DF9-41A4-8592-CEFF1842355D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"30017C56-42A9-4AF9-B5B3-7357E424F837"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C8A51F38-3F5A-4F6D-93EE-776B5C2FF48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8DBEC27E-3220-42CE-B6CC-675F387CB506"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E641DFFB-CBAF-4DCF-944F-443CFF836A53"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1511","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0375.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0749","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0338.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1628","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5968","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0750","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata.html#mopd","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-050.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1558","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata.html#mopd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0751","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata.html#mopd","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-050.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1559","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata.html#mopd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0752","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0339.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1629","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0753","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/201422","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/78240","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1631","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/201422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/78240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0754","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0755","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0756","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Springmail.105.967737080.0.16997300%40www.springmail.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=Springmail.105.967737080.0.16997300%40www.springmail.com","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0757","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aptis_software:totalbill:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5053B053-C23F-4EB6-9A33-28C06850A5C7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0074.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1555","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0758","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"440F99F3-4778-4B41-87CD-81C857D2CCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lyris:list_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C2DD1EAD-778A-426A-A604-C41D489632C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0149.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lyris.com/lm/lm_updates.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1584","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0149.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lyris.com/lm/lm_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0759","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC42876-65AD-476A-8B62-25D4E15D1BB6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/4967.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1531","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/4967.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719184401.17782A-100000%40grex.cyberspace.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0760","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BAFF8D91-80A2-454A-8B44-A5A889002692"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC42876-65AD-476A-8B62-25D4E15D1BB6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1532","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26date%3D2000-07-15%26msg%3DPine.SUN.3.96.1000719235404.24004A-100000%40grex.cyberspace.org","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0761","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:os2_ftp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"95799B11-78BE-4770-B2C1-0EC820B9A7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:os2_ftp_server:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C7B35302-1B34-49E6-B17C-01762300A001"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:os2_ftp_server:4.3:*:*:*:*:*:*:*","matchCriteriaId":"6094B4B5-225B-439C-AAE6-2465523C5E92"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/ps/products/tcpip/fixes/v4.3os2/ic27721/README","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0166.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1582","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.software.ibm.com/ps/products/tcpip/fixes/v4.3os2/ic27721/README","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0762","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrator and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_access_control:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E98CCF8A-D664-45EE-A435-90379F981290"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_access_control:5.0:*:*:*:*:*:*:*","matchCriteriaId":"76E1F4B2-CC90-4940-8E1B-4B38591B8F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_access_control:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"F63210BA-7BB9-4591-8DFE-958C8CF5B7F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:etrust_access_control:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"2008A8B4-AC31-4C7B-AF4E-A5C2C45D6557"}]}]}],"references":[{"url":"http://support.ca.com/techbases/eTrust/etrust_access_control-response.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1517","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1583","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=004601c003a1%24ba473260%24ddeaa2cd%40itradefair.net","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5076","source":"cve@mitre.org"},{"url":"http://support.ca.com/techbases/eTrust/etrust_access_control-response.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=004601c003a1%24ba473260%24ddeaa2cd%40itradefair.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0763","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_bagley:xlock:4.16:*:*:*:*:*:*:*","matchCriteriaId":"DE36D516-F942-4398-BEFE-9C7E28CCE2DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_bagley:xlock:4.16.1:*:*:*:*:*:*:*","matchCriteriaId":"2F4362FD-2913-424C-BFBF-41B64473273E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0212.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0294.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0340.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20000816","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1585","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000815231724.A14694%40subterrain.net","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0294.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0340.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20000816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000815231724.A14694%40subterrain.net","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0764","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_8100:*:*:*:*:*:*:*:*","matchCriteriaId":"3218FE18-1E23-43F6-930D-8889EB1F845F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0338.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1609","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5154","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0765","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the \"Microsoft Office HTML Object Tag\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*","matchCriteriaId":"3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1561","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-056","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0766","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.4.49:*:*:*:*:*:*:*","matchCriteriaId":"59F3113B-6C5F-4508-9644-00B1591BA298"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1610","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008270354.UAA10952%40user4.hushmail.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008270354.UAA10952%40user4.hushmail.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0767","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka the \"Scriptlet Rendering\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0768","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the \"Frame Domain Verification\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"D0BDA2A8-EBB9-47AB-9DA0-5C24527F7210"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows:*:*:*:*:*","matchCriteriaId":"D2CFDA81-A703-4330-88B0-F3F18B3BB7FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_2000:*:*:*:*:*","matchCriteriaId":"A7B6FB02-F15F-486D-8E7C-40830ABDB62F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_95:*:*:*:*:*","matchCriteriaId":"0CE25503-0EDA-4AFA-A4B8-36396BB4A4E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:windows_98:*:*:*:*:*","matchCriteriaId":"376DA3A6-FAB8-4B18-B9D9-C176675C7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0769","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.7","matchCriteriaId":"333B83C5-EC0D-4335-A873-B56A3FFEA611"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96715834610888&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1611","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96715834610888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0770","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the \"File Permission Canonicalization\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1565","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0771","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the \"Local Security Policy Corruption\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0772","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account \"sa\" with no password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tumbleweed:messaging_management_system:4.3:*:*:*:*:*:*:*","matchCriteriaId":"DE241542-7FD0-43C5-B5B4-DBC004280862"},{"vulnerable":true,"criteria":"cpe:2.3:a:tumbleweed:messaging_management_system:4.5:*:*:*:*:*:*:*","matchCriteriaId":"29A1DFD6-D05F-4436-AE8E-8AAB0FDD5E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tumbleweed:messaging_management_system:4.6:*:*:*:*:*:*:*","matchCriteriaId":"2CE6B4AC-B7E5-4AB0-9E4F-82BFBA4B43EA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5072","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://thompson.tumbleweed.com/NewKB/bulletin/UPFiles/sa-official.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0773","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a \"....\", a variant of the dot dot directory traversal attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bajie:java_http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"007A5986-89DC-499C-AAC0-4A3D768628F7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5021","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0774","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sample Java servlet \"test\" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bajie:java_http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"007A5986-89DC-499C-AAC0-4A3D768628F7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1521","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0426.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0775","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robtex:viking_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.6_build355","matchCriteriaId":"B3A49397-0B2A-4661-92E6-450EEDD44A1E"}]}]}],"references":[{"url":"http://www.robtex.com/viking/bugs.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1614","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=399a01c01122%240d7f2310%240201a8c0%40aviram","source":"cve@mitre.org"},{"url":"http://www.robtex.com/viking/bugs.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=399a01c01122%240d7f2310%240201a8c0%40aviram","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0776","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediahouse_software:statistics_server_livestats:5.02:*:*:*:*:*:*:*","matchCriteriaId":"0D6B06EA-A63F-44A8-8024-3E296EDBFE10"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0118.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1568","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5113","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0777","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the \"Money Password\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:money:2000:*:*:*:*:*:*:*","matchCriteriaId":"04303051-3FE6-45B0-B721-5331536A5D68"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:money:2001:*:*:*:*:*:*:*","matchCriteriaId":"5672DA19-6EAB-48B8-96CB-8AF426BD8B33"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1615","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-061","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0778","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a \"Translate: f\" header, aka the \"Specialized Header\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=5212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1578","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=080D5336D882D211B56B0060080F2CD696A7C9%40beta.mia.cz","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-058","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A927","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=5212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=080D5336D882D211B56B0060080F2CD696A7C9%40beta.mia.cz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0779","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Improper_stderr","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1487","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1534","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Improper_stderr","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0780","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96767207207553&w=2","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1617","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96767207207553&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0781","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:6.63_linux:*:*:*:*:*:*:*","matchCriteriaId":"0EAAF3F1-70E3-464A-8245-3F8F127FD1F1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0431.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1519","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5023","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0431.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0782","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:netauth:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"23D01245-6C2F-44A2-BA67-E63D2120099C"}]}]}],"references":[{"url":"http://netwinsite.com/netauth/updates.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1587","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NEBBJCLKGNOGCOIOBJNAGEHLCPAA.marc%40eeye.com","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5090","source":"cve@mitre.org"},{"url":"http://netwinsite.com/netauth/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=NEBBJCLKGNOGCOIOBJNAGEHLCPAA.marc%40eeye.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0783","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox:ii:*:*:*:*:*:*:*","matchCriteriaId":"31264E24-5E9A-4C76-B373-0D8FA58B7F37"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0162.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1573","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5098","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0784","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded \"rsadmin\" account with a null password, which allows remote attackers to execute arbitrary commands via ssh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rapidstream:rapidstream:2000:*:*:*:*:*:*:*","matchCriteriaId":"C13F6038-2FB7-4814-A058-D6192963474E"},{"vulnerable":true,"criteria":"cpe:2.3:h:rapidstream:rapidstream:4000:*:*:*:*:*:*:*","matchCriteriaId":"03CD6CE7-23B7-4A45-82C0-A5F10AD9CC55"},{"vulnerable":true,"criteria":"cpe:2.3:h:rapidstream:rapidstream:6000:*:*:*:*:*:*:*","matchCriteriaId":"653929D6-6E9F-470F-B3DB-95F5E14D2AC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:rapidstream:rapidstream:8000:*:*:*:*:*:*:*","matchCriteriaId":"0EFA822E-72CE-4EA6-A7FB-C4FCE94B670D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0216.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1574","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0216.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0785","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wircsrv:irc_server:5.0.7s:*:*:*:*:*:*:*","matchCriteriaId":"F7DE5E55-1B57-40FC-AC20-E016046A90F1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96353027909756&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96353027909756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0786","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:userv:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9A1B3C00-2F7B-4DA8-A238-3E9C45CC0B3F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0389.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96473640717095&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0389.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96473640717095&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0787","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0B8C5104-52ED-42EC-97A5-05D345597496"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DAF68327-9D45-41F3-B120-C9E71A0A3259"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"07373BC7-F34E-47A2-9057-64C04C45EA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"F18504E4-03C8-45C9-B89D-86327D5663D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"3F6EE47C-0AE8-4CCD-8A2D-54E55BE9C7D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"103E7180-AFF5-4EBF-A9FD-EFE2A6C00256"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D371520F-1F2D-4EAB-A4D1-5CD13DBF6C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4CA8BBE2-4ABE-4574-9BD7-A26F2FF25333"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"74588BF3-4DA4-410B-8416-C90E7F446238"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"721836E8-A4B6-46D6-BEDD-9B269DDB0525"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.5.xdev:*:*:*:*:*:*:*","matchCriteriaId":"D2C27A32-761C-4413-8856-6689150BBB4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-055.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1601","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0788","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*","matchCriteriaId":"90D7BA07-3BCA-41CF-B5D3-341E912650A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1566","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5322","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0789","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bardon_data_systems:winu:4.x:*:*:*:*:*:*:*","matchCriteriaId":"B322BD64-604F-4D64-A51E-7C066F1A5274"},{"vulnerable":true,"criteria":"cpe:2.3:a:bardon_data_systems:winu:5.0:*:*:*:*:*:*:*","matchCriteriaId":"937E6E4D-8E11-4D45-8ED0-954F91C85A7E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0201.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0790","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file that is listed in the folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=3998370D.732A03F1%40nat.bg","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=3998370D.732A03F1%40nat.bg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0791","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0179.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1575","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0792","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alan_cox:gnome-lokkit:0.1:*:*:*:*:*:*:*","matchCriteriaId":"E50F12AC-CF90-4B9C-A6B1-14045DEDF894"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0252.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0793","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B5217A98-F7EA-4DC1-B7F8-CD6BAE700E65"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B3C2BFDB-DF41-4D5E-979C-0AA01908FB09"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=398222C5%40zathras.cc.vt.edu","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=398222C5%40zathras.cc.vt.edu","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0794","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osview."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/5063.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8568","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5063.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0795","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"http://www.osvdb.org/1485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0796","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"http://www.osvdb.org/1484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5064","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0797","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040104-01-P.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3815","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5062","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040104-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0798","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the contents of arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"}]}]}],"references":[{"url":"http://www.osvdb.org/8569","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0799","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1530","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5065","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20001101-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/templates/archive.pike?list=1&msg=200008021924.e72JOVs12558%40ix.put.poznan.pl","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0800","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C7F08806-9458-439A-8EAE-2553122262ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*","matchCriteriaId":"E74E0A28-7C78-4160-8BCF-99605285C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*","matchCriteriaId":"6E2FE291-1142-4627-A497-C0BB0D934A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_58.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/suse_security_announce_58.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0801","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0388.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0388.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0802","sourceIdentifier":"cve@mitre.org","published":"2000-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"84F855F6-EFC0-4B60-B772-D66A1A39E3CD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96430372326912&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96430372326912&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0803","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*","versionEndExcluding":"1.17","matchCriteriaId":"3D12195B-922F-44A8-BC6E-5FA696CB83AB"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5280","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0804","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening closed TCP connection requests, aka \"One-way Connection Enforcement Bypass.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-way_Connection","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5468","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-way_Connection","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0805","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka \"Retransmission of Encapsulated Packets.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Retransmission_of","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4415","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5469","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Retransmission_of","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0806","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka \"Inter-module Communications Bypass.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Inter-module_Communications","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4413","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5162","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Inter-module_Communications","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0807","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the \"OPSEC Authentication Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#OPSEC_Authentication","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4420","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5471","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#OPSEC_Authentication","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0808","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka \"One-time (s/key) Password Authentication.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-time_Password","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4421","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5137","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#One-time_Password","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0809","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Getkey_Buffer","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5139","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#Getkey_Buffer","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0810","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E97D1366-A8E7-42C7-B83A-B4BF58FC3F39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.01:*:*:*:*:*:*:*","matchCriteriaId":"39CA0640-803C-40F5-AD07-350C789FE132"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.02:*:*:*:*:*:*:*","matchCriteriaId":"3A22F425-6EAB-4292-82BC-5B198DDE4E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.03:*:*:*:*:*:*:*","matchCriteriaId":"2E4E8025-5F2D-4FF3-B469-214BAB0FD87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.04:*:*:*:*:*:*:*","matchCriteriaId":"FC7F5CF0-DE7F-4F2E-ADF9-37F2FCD27863"}]}]}],"references":[{"url":"http://www.osvdb.org/1600","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1782","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5371","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0811","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E97D1366-A8E7-42C7-B83A-B4BF58FC3F39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.01:*:*:*:*:*:*:*","matchCriteriaId":"39CA0640-803C-40F5-AD07-350C789FE132"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.02:*:*:*:*:*:*:*","matchCriteriaId":"3A22F425-6EAB-4292-82BC-5B198DDE4E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.03:*:*:*:*:*:*:*","matchCriteriaId":"2E4E8025-5F2D-4FF3-B469-214BAB0FD87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:auction_weaver:1.04:*:*:*:*:*:*:*","matchCriteriaId":"FC7F5CF0-DE7F-4F2E-ADF9-37F2FCD27863"}]}]}],"references":[{"url":"http://www.osvdb.org/4053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1783","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5372","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0812","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1FF95716-6357-4F5D-A6C4-79EE8E3C49E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8812EC0B-E426-43D7-9E2B-542CAAAB0D30"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:1.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"454CFAE0-1FA0-4E25-8E2E-93E289CCF3EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6E8894D1-5147-4065-AA67-ECFE676ED899"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/197&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1600","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2542","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5135","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/197&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/advisory.html?id=2542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0813","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers (\"FTP Bounce\") via invalid FTP commands that are processed improperly by FireWall-1, aka \"FTP Connection Enforcement Bypass.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#FTP_Connection","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4434","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5474","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/list_vun.html#FTP_Connection","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0816","sourceIdentifier":"cve@mitre.org","published":"2000-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-056.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-080.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1785","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise64.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5320","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-056.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise64.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0817","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, aka the \"Netmon Protocol Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:network_monitor:*:*:*:*:*:*:*:*","matchCriteriaId":"C7E54C9C-74C5-4D66-9ED5-525AEF885C7E"}]}]}],"references":[{"url":"http://xforce.iss.net/alerts/index.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5399","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/index.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0818","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:listener:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1401CC07-14D9-4558-819A-85D2B8DA867F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:listener:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"75A28B67-A114-4956-B0FC-C6D22DE8E87F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:listener:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"465571B9-5189-4CD6-B279-23B340476C5C"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise66.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5380","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/listener_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise66.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0824","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED8F0E8-A969-4F7F-A100-662F4A5426FD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0509.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0525.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=93760201002154&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-028.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000902","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/updates/MDKSA-2000-040.php3","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/updates/MDKSA-2000-045.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-057.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/79537","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/648","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5173","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0509.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0525.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=93760201002154&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-028.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/updates/MDKSA-2000-040.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/updates/MDKSA-2000-045.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/79537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0825","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.00:*:*:*:*:*:*:*","matchCriteriaId":"0A81DF07-7B75-4590-861C-F0FBC81E86AD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0071.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96659012127444&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=96654521004571&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5475","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=96659012127444&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=96654521004571&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0826","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mobius:documentdirect_for_the_internet:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3FF3B1D7-DA61-4406-8DDA-66D10D2C73C2"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a090800-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1657","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5210","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a090800-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0827","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arbitrary commands via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mobius:documentdirect_for_the_internet:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3FF3B1D7-DA61-4406-8DDA-66D10D2C73C2"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a090800-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1657","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5211","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a090800-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0828","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mobius:documentdirect_for_the_internet:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3FF3B1D7-DA61-4406-8DDA-66D10D2C73C2"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a090800-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1657","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5212","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a090800-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0829","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply nested directories in /tmp or /var/tmp/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:tmpwatch:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C8A78557-96FB-458B-A6B8-CF61BBFEBBDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:tmpwatch:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D976654E-FA94-4146-9FB1-7764E39C2AC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-080.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/81364","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1664","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5217","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/81364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0830","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:webtv:*:*:*:*:*:*:*:*","matchCriteriaId":"3BB38E8E-B3B2-4C2F-84E7-D52BFD5E9236"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/81852","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1671","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-074","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/81852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0831","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:ftp\\+\\+_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"21961F5E-AAD0-4B63-9B15-8E176FBC305D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0109.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0832","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscar_nierstrasz:htgrep:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"6A7CF62D-124C-4DCC-B18A-F3D92C025A5B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0208.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5476","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0208.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0833","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jack_de_winter:winsmtp:1.6f:*:*:*:*:*:*:*","matchCriteriaId":"55AB3A6D-2BE5-4300-B832-5AF210B96315"},{"vulnerable":true,"criteria":"cpe:2.3:a:jack_de_winter:winsmtp:2.x:*:*:*:*:*:*:*","matchCriteriaId":"7E0A2A24-C4DE-452E-889D-03C35AB4A54C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/81693","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1680","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5255","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/81693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0834","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the \"Windows 2000 Telnet Client NTLM Authentication\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a091400-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1683","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5242","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a091400-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0835","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.3:*:*:*:*:*:*:*","matchCriteriaId":"94F70201-3D0E-463A-82B8-4CDE086EAF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.4:beta3:*:*:*:*:*:*","matchCriteriaId":"2147F86B-2293-4D20-B5FC-58F5DA936D7D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1684","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0836","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadgun_software:camshot_webcam:2.6trial_version:*:*:*:*:*:*:*","matchCriteriaId":"189D20B9-41B9-41CC-A2B2-1C1E81659F42"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0176.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1685","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5246","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0837","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:ftp_serv-u:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"CA71E661-8D57-4CE6-9C38-9FB84162FA50"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/73843","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1543","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/73843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0838","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:fur_http_server:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"E5EF62B1-BB39-48A9-8CFB-9276768442F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0111.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5237","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0839","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:wincom_lpd:1.00.90:*:*:*:*:*:*:*","matchCriteriaId":"4CCFF522-C01B-400A-9185-06114BC0FA0E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0212.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5258","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0840","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davide_libenzi:xmail:0.58:*:*:*:*:*:*:*","matchCriteriaId":"A0DC8B05-AD4E-4ACD-BF23-91989831E4C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5192","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0841","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davide_libenzi:xmail:0.58:*:*:*:*:*:*:*","matchCriteriaId":"A0DC8B05-AD4E-4ACD-BF23-91989831E4C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1652","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5191","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0842","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The search97cgi/vtopic\" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0086.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0843","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dave_airlie:pam_smb:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E008E992-638F-49A2-8643-E6ABCA55BDEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:luke_kenneth_casson_leighton:pam_ntdom:0.23:*:*:*:*:*:*:*","matchCriteriaId":"D68A438A-D4EE-4E6F-80AA-6CCD9E5EDFC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0073.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0114.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000911","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-047.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/adv8_draht_pam_smb_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1666","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-047.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/adv8_draht_pam_smb_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0844","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some functions that implement the locale subsystem on Unix do not  properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_ebuilder:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E02719FF-924A-4E96-AE1D-5994A8D4275E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"203BDD63-2FA5-42FD-A9CD-6BDBB41A63C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"DD5E0678-45C7-492A-963C-897494D6878F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E55C28A7-CD21-47CD-AA50-E8B2D89A18E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"44C6203A-D05B-47B1-8BC2-BA021EBAFDEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF25306-E7C2-4F9A-A809-4779A6C0A079"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B3BA7775-30F2-4CA0-BA6E-70ED12A48D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB038A89-1CA6-4313-B7CE-56C894945FFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2B3BC86F-5718-4232-BFFF-6244A7C09B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E6118CC1-6E51-4E1B-8F58-43B337515222"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F3D3B348-270F-4209-B31A-2B40F5E4A601"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A9C005-4392-4C95-9B92-98EEC73EFE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F0297F56-5F41-48FD-AB47-36E3BD2AB7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF1A678-FEF1-4549-8EDC-518444CFC57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"981A0654-C17D-48BB-A8B3-A728CB159C33"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2AA8956D-F533-42BA-A06B-7CDB0A267B2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C6619B49-8A89-4600-A47F-A39C8BF54259"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A0AA1204-D181-4E1C-B795-159FC57E86A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"24740C11-59D0-4071-97BD-8BF7084FC1FC"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000901-01-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0427.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2000-q4/0000.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-030.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000902","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-057.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1634","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5176","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000901-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0436.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0427.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2000-q4/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-030.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/adv5_draht_glibc_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0845","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"8237F390-43DB-4B07-9CD7-C3F804710497"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0204.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0846","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ashley_montanaro:darxite:0.4:*:*:*:*:*:*:*","matchCriteriaId":"666EBBBF-B016-4592-94C0-9DEC5EDF870B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0256.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1598","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5134","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0847","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:4.7b:*:*:*:*:*:*:*","matchCriteriaId":"C8B5612D-2592-4D36-9973-3C3CDF18C7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:4.7c:*:*:*:*:*:*:*","matchCriteriaId":"272E8047-AFBF-49BD-8A13-F39E688CB818"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.20:*:*:*:*:*:*:*","matchCriteriaId":"16766308-A2F2-4155-A4F7-702808CC9450"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0425.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0437.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0108.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1646","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1687","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5223","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0425.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0437.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0108.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0848","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host:  request header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FC25AE4-76D2-4FE6-8B33-7069322EBC5D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1691","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5252","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-4.ibm.com/software/webservers/appserv/doc/v3022/fxpklst.htm#Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0849","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the \"Unicast Service Race Condition\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D073958F-0428-4E15-97B0-8EDAD0E80632"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3DDE73-E623-45A3-AA49-17BAFB89A2CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1655","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-064","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0850","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending \"$/FILENAME.ext\" (where ext is .ccc, .class, or .jpg) to the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:siteminder:3.6:*:*:*:*:*:*:*","matchCriteriaId":"2837196C-771B-46EA-9176-D450C6046503"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:siteminder:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0D23E120-0D4A-426E-84B9-075EF715E3B4"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a091100-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1681","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5230","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a091100-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0851","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the \"Still Image Service Privilege Escalation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a090700-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1651","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5203","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a090700-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0852","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0110.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1686","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5248","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0853","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-01:*:*:*:*:*:*:*","matchCriteriaId":"5B8C55BC-81D8-46E2-A303-22D379E3CC65"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0072.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1668","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5254","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0854","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1699","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5263","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0855","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xs4all_data:xs4all_data_sunftp:1.0_build_9:*:*:*:*:*:*:*","matchCriteriaId":"A21FE51E-C424-4DD5-A102-92097707D57D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1637","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0856","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xs4all_data:xs4all_data_sunftp:1.0_build_9:*:*:*:*:*:*:*","matchCriteriaId":"A21FE51E-C424-4DD5-A102-92097707D57D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0857","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian_kienzl:muh:2.05d:*:*:*:*:*:*:*","matchCriteriaId":"006CF8D2-CAA9-47A3-8DAB-F5E99D1693B1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0067.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0068.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1665","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0858","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the \"Invalid URL\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vendor/2000-q3/0065.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/80413","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1642","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5202","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vendor/2000-q3/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/80413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0859","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gordano:ntmail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B41F8197-E230-497C-87C9-6DA293D43E09"},{"vulnerable":true,"criteria":"cpe:2.3:a:gordano:ntmail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2147A4FA-3268-4466-8F10-6E7C9F8DB144"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0471.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1640","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5182","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0471.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0860","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"92647629-083F-4042-8365-4AD2EBC9C1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*","matchCriteriaId":"83BE1120-6370-4470-8586-6581EDF3FD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0455.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0477.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0150.html","source":"cve@mitre.org"},{"url":"http://cvsweb.php.net/viewcvs.cgi/php4/main/rfc1867.c.diff?r1=1.38%3Aphp_4_0_2&tr1=1.1&r2=text&tr2=1.45&diff_format=u","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1649","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5190","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0455.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0477.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.php.net/viewcvs.cgi/php4/main/rfc1867.c.diff?r1=1.38%3Aphp_4_0_2&tr1=1.1&r2=text&tr2=1.45&diff_format=u","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0861","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1D965E3E-E08C-40EA-AF66-470F473F0262"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0112.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1667","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5493","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0112.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0862","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:spectra:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42D8A283-08F2-4F40-AA94-FDE57403DE02"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vendor/2000-q3/0059.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5466","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vendor/2000-q3/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0863","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"2.96","matchCriteriaId":"D1EA6C49-8581-4710-A8A0-3496A38AC953"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.97:*:*:*:*:*:*:*","matchCriteriaId":"9C4BBB11-6DFF-4CA5-91F7-6C6A43431AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.98:*:*:*:*:*:*:*","matchCriteriaId":"624FEE6A-75FE-46EA-AB85-AF94C7AAE2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.99:*:*:*:*:*:*:*","matchCriteriaId":"81458087-B1E8-4B09-BA17-36FD31E2D100"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.100:*:*:*:*:*:*:*","matchCriteriaId":"FF297C39-C0E1-496C-8C4C-74CF0D16BEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.101:*:*:*:*:*:*:*","matchCriteriaId":"9C2A955A-15D3-4B9E-A77D-BE6456F9E273"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.102:*:*:*:*:*:*:*","matchCriteriaId":"D9456C03-F149-4F9B-84B7-99C5878F795C"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.103:*:*:*:*:*:*:*","matchCriteriaId":"E72881EE-C8E1-4CDA-9BD6-C4930EE6B1E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.104:*:*:*:*:*:*:*","matchCriteriaId":"E12033AF-2AA5-4F13-A020-B2BAFC1804E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:listmanager:linux:2.105.1:*:*:*:*:*:*:*","matchCriteriaId":"22C81928-EA21-46DB-8EB5-BE31CDE4F28E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0111.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5503","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-09/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0864","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a  symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:esound:0.2.19:*:*:*:*:*:*:*","matchCriteriaId":"B380BD42-CF0E-44A2-AB26-CB60AC1457A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0095.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0328.htm","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0118.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0365.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20001008","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/esound_daemon_race_condition.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-077.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1659","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5213","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0328.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-08/0365.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20001008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/esound_daemon_race_condition.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0865","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tridia:doublevision:3.07.00:*:*:*:*:*:*:*","matchCriteriaId":"AFDFDCB0-D4D8-4C2E-A9D0-BFC301484424"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0185.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1697","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5261","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0185.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0866","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase_superserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1DB0894E-F477-45F1-902B-D87C4E2291BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0027.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5205","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0867","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:slink:*:*:*:*:*","matchCriteriaId":"FAB6D992-C0E9-4951-85FD-5FE54045AEAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:potato:*:*:*:*:*","matchCriteriaId":"470653CE-3BF8-498E-B673-82AC854B23C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"F432C6C2-8676-4DD5-B9E6-71F6C164EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0193.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:050","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97726239017741&w=2","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/adv9_draht_syslogd_txt.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5824","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-061.html","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000023.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5259","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97726239017741&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/adv9_draht_syslogd_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-September/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0868","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a090700-2.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1658","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5197","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a090700-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0869","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C7F08806-9458-439A-8EAE-2553122262ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:ppc:*:*:*:*:*","matchCriteriaId":"E74E0A28-7C78-4160-8BCF-99605285C0EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*","matchCriteriaId":"6E2FE291-1142-4627-A497-C0BB0D934A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a090700-3.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1656","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5204","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q3/0906.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a090700-3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0870","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.4.281:*:*:*:*:*:*:*","matchCriteriaId":"DFE301FA-1D94-4F1D-ADF6-84A5451FF0B3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5219","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0871","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.4.281:*:*:*:*:*:*:*","matchCriteriaId":"DFE301FA-1D94-4F1D-ADF6-84A5451FF0B3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/409","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1677","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5220","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0872","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_purciful:phpphotoalbum:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"2B6D46B4-762D-4E46-8AA6-06FED7D9DA41"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0015.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1650","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5198","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0873","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0454.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1660","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5214","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0454.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0874","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A2A8B413-CD80-4D91-BE69-9063EA60345B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A9F8ADFF-D7B7-4907-B5DB-3920BC6EFB7B"}]}]}],"references":[{"url":"http://www.osvdb.org/1545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/80888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5206","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/80888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0875","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*","matchCriteriaId":"0F0D720E-2C84-4AD8-8B2A-9F73E3396AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc12:*:*:*:*:*:*:*","matchCriteriaId":"599F7D23-563D-439A-9868-F9169569282A"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd_pro:2.41_rc12:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4206-6635-401B-9E0D-1B222DC6D0B5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.wftpd.com/bug_gpf.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5194","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.wftpd.com/bug_gpf.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0876","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a \"%C\" command, which generates an error message that includes the pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"BE581DA0-0DEC-4C2D-B2CA-FFBDC39FAF95"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc11:*:*:*:*:*:*:*","matchCriteriaId":"0F0D720E-2C84-4AD8-8B2A-9F73E3396AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.4.1_rc12:*:*:*:*:*:*:*","matchCriteriaId":"599F7D23-563D-439A-9868-F9169569282A"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.34:*:*:*:*:*:*:*","matchCriteriaId":"2955B341-3B28-4474-96DD-AA11CD14E1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.40:*:*:*:*:*:*:*","matchCriteriaId":"B9B1592D-0D0E-4B03-9414-82AAD16B680E"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd_pro:2.41_rc12:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4206-6635-401B-9E0D-1B222DC6D0B5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5829","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5196","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0488.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0877","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ranson_johnson:mailform:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0B4A969B-8B12-4C29-8DAD-24F76F5D1859"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0092.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1670","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5224","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0878","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ranson_johnson:mailto_cgi_script:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"079184BA-72BC-4C10-A56C-09E989819D4F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0088.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1669","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5241","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0879","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plus_technologies:lpplus:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49A54053-DF3A-47E1-AB8A-5BA32BA6AB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:plus_technologies:lpplus:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C66BF777-D87A-4C19-AC77-49A90C43DCC7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1643","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5199","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0880","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plus_technologies:lpplus:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49A54053-DF3A-47E1-AB8A-5BA32BA6AB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:plus_technologies:lpplus:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C66BF777-D87A-4C19-AC77-49A90C43DCC7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1643","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5200","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0881","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plus_technologies:lpplus:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49A54053-DF3A-47E1-AB8A-5BA32BA6AB10"},{"vulnerable":true,"criteria":"cpe:2.3:a:plus_technologies:lpplus:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C66BF777-D87A-4C19-AC77-49A90C43DCC7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1644","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5201","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0531.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0882","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_510t:2.63:*:*:*:*:*:*:*","matchCriteriaId":"751D9D67-A085-4B4B-8894-CC485A8BCE58"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_510t:2.64:*:*:*:*:*:*:*","matchCriteriaId":"B445FB3F-505E-4274-902F-6F4D4880957C"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_520t:2.63:*:*:*:*:*:*:*","matchCriteriaId":"799D2573-872F-4728-83DA-2CFDEFA8AAE1"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_520t:2.64:*:*:*:*:*:*:*","matchCriteriaId":"95E1ABCD-FA76-401B-9035-5E5177E3F87B"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_550f:2.63:*:*:*:*:*:*:*","matchCriteriaId":"BBC0117F-DF7E-48B0-AB6F-1ACD32C2E953"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_550f:2.64:*:*:*:*:*:*:*","matchCriteriaId":"55668A24-B8AE-4099-9F41-1802F492AB01"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_550t:2.63:*:*:*:*:*:*:*","matchCriteriaId":"6E683C8D-2E0C-424B-B866-3E0C68A792D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:express_550t:2.64:*:*:*:*:*:*:*","matchCriteriaId":"041F03B7-568B-4F54-AD74-BB80D80448B1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0533.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1647","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0533.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0883","sourceIdentifier":"cve@mitre.org","published":"2000-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0111.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1678","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5257","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0884","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the \"Web Server Folder Traversal\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.osvdb.org/436","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1806","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5377","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A44","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0885","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the \"Netmon Protocol Parsing\" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F714FC20-0412-472D-B4A3-EA548EE14E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"43E8A8EF-B54F-4413-9BC8-A6A479951313"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5399","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0886","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the \"Web Server File Request Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1912","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/templates/archive.pike?mid=143604&list=1&fromthread=0&end=2000-11-11&threads=0&start=2000-11-05&","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-086","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5470","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A191","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/templates/archive.pike?mid=143604&list=1&fromthread=0&end=2000-11-11&threads=0&start=2000-11-05&","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0887","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the \"zxfr bug.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-20.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2000/20001112","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-107.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/143843","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1923","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5540","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2000/20001112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/143843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0888","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the \"srv bug.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:-:*:*:*:*:*:*","matchCriteriaId":"D0F0B3CC-F040-4D1D-8977-69B11282708B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:p1:*:*:*:*:*:*","matchCriteriaId":"CEBD7B33-5B16-4235-8792-69E09CFB0C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:-:*:*:*:*:*:*","matchCriteriaId":"85850031-73A2-4980-8841-5D2E3BC082C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*","matchCriteriaId":"BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"BEED8045-CEA2-4EBE-A864-22D1B6103F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*","matchCriteriaId":"64C3DB3B-4C8E-4647-A61B-ECED4EB63439"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*","matchCriteriaId":"B3255FB4-D84E-487B-B53A-4EA01D6613A3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2000-20.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2000/20001112","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-107.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5814","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0657.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2000-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2000/20001112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0889","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-19.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/198&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2000-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2000-0890","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/626919","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2325","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6047","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/626919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0891","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*","versionEndIncluding":"5.02","matchCriteriaId":"E321FE41-5FF3-4E79-BE77-AE96B92075C7"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/5962","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.notes.net/R5FixList.nsf/Search%21SearchView&Query=CBAT45TU9S","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5045","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/5962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.notes.net/R5FixList.nsf/Search%21SearchView&Query=CBAT45TU9S","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0892","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:u_win:u_win:*:*:*:*:*:*:*:*","matchCriteriaId":"57FF6FFA-1312-4200-8AC9-026A2E8FCC15"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/22404","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6644","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/22404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0893","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","matchCriteriaId":"056B3397-81A9-4128-9F49-ECEBE1743EE8"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/28027","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/28027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2000-0894","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:1.6:*:*:*:*:*:*:*","matchCriteriaId":"E378C1F1-5C90-4F3C-8967-0AFA959B5690"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EF1982BC-5E49-401B-AB99-A75C7E319DC4"}]}]}],"references":[{"url":"http://www.osvdb.org/4404","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2119","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise70.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5554","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise70.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0895","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:1.6:*:*:*:*:*:*:*","matchCriteriaId":"E378C1F1-5C90-4F3C-8967-0AFA959B5690"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"EF1982BC-5E49-401B-AB99-A75C7E319DC4"}]}]}],"references":[{"url":"http://www.osvdb.org/4403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2114","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise70.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5218","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise70.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0896","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:1.6:*:*:*:*:*:*:*","matchCriteriaId":"E378C1F1-5C90-4F3C-8967-0AFA959B5690"}]}]}],"references":[{"url":"http://www.osvdb.org/1690","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2113","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise70.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5749","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise70.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0897","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"82D993A9-83F8-410B-B2E3-00D5207CFD96"}]}]}],"references":[{"url":"http://home.lanck.net/mf/srv/index.htm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97421834001092&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1941","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5524","source":"cve@mitre.org"},{"url":"http://home.lanck.net/mf/srv/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97421834001092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0898","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"82D993A9-83F8-410B-B2E3-00D5207CFD96"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97421834001092&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97421834001092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0899","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"82D993A9-83F8-410B-B2E3-00D5207CFD96"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97421834001092&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1942","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97421834001092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0900","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a \"%2e%2e\" string, a variation of the .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.16:*:*:*:*:*:*:*","matchCriteriaId":"DAA5CDC3-EF0B-4A2D-B0DC-C1C0D6B07CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.17:*:*:*:*:*:*:*","matchCriteriaId":"2A847C36-1DCF-4FCC-8E52-F9FE4E1DBD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.18:*:*:*:*:*:*:*","matchCriteriaId":"2A85AC9E-7532-4306-9CF3-2AFE9363342B"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.19:*:*:*:*:*:*:*","matchCriteriaId":"B58EB965-E06F-4985-B5B4-08EC0B9B8F71"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:73.thttpd.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0025.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1737","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5313","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:73.thttpd.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0901","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juergen:weigert_screen:3.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AABEFE1E-3BDF-4C25-BD33-B74B1E54C71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:juergen:weigert_screen:3.9.4:*:*:*:*:*:*:*","matchCriteriaId":"981882E7-FC9C-40BF-B24D-1438D82110A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:juergen:weigert_screen:3.9.5:*:*:*:*:*:*:*","matchCriteriaId":"76A6038A-34F0-4D11-8BE3-87A057B76891"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:46.screen.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0530.html","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/updates/MDKSA-2000-044.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/adv6_draht_screen_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-058.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/80178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1641","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5188","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:46.screen.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-08/0530.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/updates/MDKSA-2000-044.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/adv6_draht_screen_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/80178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0902","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_purciful:phpphotoalbum:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"2B6D46B4-762D-4E46-8AA6-06FED7D9DA41"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/80858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/80858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0903","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:voyager:2.01b:*:*:*:*:*:*:*","matchCriteriaId":"8C4C4049-5A12-4FC4-A1DB-B11E3CB25895"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/79956","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1648","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/79956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0904","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:voyager:2.01b:*:*:*:*:*:*:*","matchCriteriaId":"8C4C4049-5A12-4FC4-A1DB-B11E3CB25895"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/79956","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1648","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/79956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0905","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:voyager:2.01b:*:*:*:*:*:*:*","matchCriteriaId":"8C4C4049-5A12-4FC4-A1DB-B11E3CB25895"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/79956","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1648","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/79956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0906","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moreover.com:cached_feed.cgi_script:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4980C2E4-2D50-4195-98C7-3803BD8A06D1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0013.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1762","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5334","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0907","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.92:*:*:*:*:*:*:*","matchCriteriaId":"E26ABE5A-F702-4E6B-9089-97B8E81490E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0131.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0131.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0908","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcplus:browsegate:2.80:*:*:*:*:*:*:*","matchCriteriaId":"AE48FAB4-8CE1-4AC2-AC8D-E04BFBF5658D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96956211605302&w=2","source":"cve@mitre.org"},{"url":"http://www.netcplus.com/browsegate.htm#BGLatest","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1702","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5270","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96956211605302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netcplus.com/browsegate.htm#BGLatest","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0909","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D405F684-38E2-4AC4-8451-F4842E67C509"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.10:*:*:*:*:*:*:*","matchCriteriaId":"358A71B0-79F2-4728-AC1E-5872BC64B2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:59.pine.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0441.html","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-073.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-102.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/84901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1709","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5283","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:59.pine.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0441.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-073.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/84901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0910","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the \"from\" address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:1.2:*:*:*:*:*:*:*","matchCriteriaId":"8695C97E-2E1A-480D-9DC9-8AD981B72CD5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html","source":"cve@mitre.org"},{"url":"http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000910","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1674","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5278","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ssl.coc-ag.de/sec/hordelib-1.2.0.frombug.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0911","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D11E08A4-79D6-46FE-880F-66E9778C298E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/82088","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1679","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5227","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/82088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0912","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the \"multi\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jcs_web_works:multihtml:*:*:*:*:*:*:*:*","matchCriteriaId":"AB6FB2C6-1A30-49AC-8464-DBDC6888520F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5285","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0913","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.14:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"E80E240C-9879-48EC-AC9A-2C1FD5E2DD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"AF16AF7D-9475-435F-AE36-F16CE8F45A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"06F3141B-2C30-4230-A425-465E235539EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6D2C9EA-1241-4DE6-A6CD-FCD7EEC9B42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5EA86B9-4F86-4ADA-BC6A-4F6E261848F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CA6523AC-ECC9-4A79-9387-18308FCF9A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCBCF0F-63FB-4A03-92F8-FF121083CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4363C07C-179B-4797-947F-7440AD1F2D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:win32:*:*:*:*:*","matchCriteriaId":"5E3B21AE-B167-4E49-AC32-537DCAABAB33"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0352.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0174.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0021.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-035.0.txt","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-060-2.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-088.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-095.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1728","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5310","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0352.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-035.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-060-2.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0914","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0078.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1592","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1759","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5340","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0915","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1803","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5385","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:54.fingerd.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0916","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1766","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0917","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_ebuilder:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E02719FF-924A-4E96-AE1D-5994A8D4275E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DF1A678-FEF1-4549-8EDC-518444CFC57F"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:56.lprng.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-22.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-065.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1712","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5287","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:56.lprng.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0918","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kvt:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AD94AA3E-282F-4562-8C90-82D2CE337C85"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/83914","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/1700","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/83914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/1700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0919","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpix:phpix:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA6E38A4-5011-4349-AC69-527A488FDDBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpix:phpix:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9C532BB8-60BD-4632-AF61-CE58B72AD813"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpix:phpix:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F19959A6-A663-449C-9F63-CB5F647485F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0117.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1773","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5331","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0920","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a \"%2E\" instead of a \".\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boa:boa_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"0.94.8.2","matchCriteriaId":"4B1D3572-6F72-4EC9-868E-6D3D3E301224"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:60.boa.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0092.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1770","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5330","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:60.boa.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0921","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hassan_consulting:shopping_cart:*:*:*:*:*:*:*:*","versionEndIncluding":"1.18","matchCriteriaId":"2414B6D5-0D16-4280-A991-705243829E13"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0115.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1777","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5342","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0922","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bytes_interactive:web_shopper:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3971F31C-0EAA-4BCF-9BBD-5BEA531F9E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytes_interactive:web_shopper:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CC43E7A6-9911-40EB-8B44-CCA0F1C6B834"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0120.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1776","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5351","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0923","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aplio:aplio_phone:2.0.33_build1:*:*:*:*:*:*:*","matchCriteriaId":"62E6FA59-739E-4302-86BE-53B8EC6FDEE4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5333","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0924","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the \"catigory\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:armada_design:master_index:1.0:*:*:*:*:*:*:*","matchCriteriaId":"098CE136-9B5D-451B-9F82-BAD97EF4E127"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0141.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/461","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1772","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5355","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0141.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0925","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartwin_technology:cyberoffice_shopping_cart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F212B71-567F-494E-B372-04E519506C4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0001.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97050819812055&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1734","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5318","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97050819812055&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0926","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the \"Price\" hidden form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartwin_technology:cyberoffice_shopping_cart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F212B71-567F-494E-B372-04E519506C4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97050627707128&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1733","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5319","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97050627707128&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0927","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wquinn:quotaadvisor:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3AE9F1D3-C53F-4413-8894-5CFAFDFC4F3C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09//0331.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0173.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1724","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5302","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09//0331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0173.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0928","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wquinn:diskadvisor:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"FE4A190A-3FD3-47C5-A414-32C053B9D43D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0091.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1765","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5327","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0929","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the \"OCX Attachment\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97024839222747&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1714","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5309","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97024839222747&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0930","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:pegasus_mail:3.12:*:*:*:*:*:*:*","matchCriteriaId":"17384992-EF0A-4E59-BA16-6D6E31755AD3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1738","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5326","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0436.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0931","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:pegasus_mail:3.11:*:*:*:*:*:*:*","matchCriteriaId":"26984F0D-12A5-4C81-A8F0-5C1EE2CB8F4C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/137518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1750","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/137518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0932","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper_for_smtp:3.x:*:*:*:*:*:*:*","matchCriteriaId":"AA14560A-D811-4087-B5E4-FA24988C48AD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0181.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5641","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0933","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the \"Simplified Chinese IME State Recognition\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1729","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0934","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-062.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1703","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5271","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0935","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1872","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5443","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0936","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1874","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5445","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0937","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1873","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5442","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0938","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5442","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0939","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5444","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0940","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the \"name\" or \"display\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metertek:pagelog.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ED267E4B-B4BD-464F-9570-7763C8F39016"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0422.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5451","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0422.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0941","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the \"whois\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kootenay_web_inc:kootenay_web_inc_whois:1.0:*:*:*:*:*:*:*","matchCriteriaId":"47BAF439-099B-42D8-82FA-B7D9DAE546E8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kootenayweb.bc.ca/scripts/whois.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1883","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5438","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0419.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0420.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kootenayweb.bc.ca/scripts/whois.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0942","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the \"Indexing Services Cross Site Scripting\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:indexing_service:*:*:*:*:*:*:*:*","matchCriteriaId":"E8D01793-B14A-4A3E-868F-8F9C74AB7482"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/141903","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1861","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5441","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/141903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0943","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max-wilhelm_bruker:bftpd:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"F1ED895A-7AC7-4951-B772-11479856E580"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0397.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5426","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0397.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0944","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-522"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi:script_center_news_update:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27376C80-C1F3-41D3-844F-0BE1C05E4E7D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1881","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5433","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0945","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3500_xl:*:*:*:*:*:*:*:*","matchCriteriaId":"DA122273-0B84-4CE6-AAF6-F89E1F986C33"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/444","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1846","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5415","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0380.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0946","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:easy_access_keyboard_software:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F97203-4197-498E-9139-C172531C62FC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0023.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5831","source":"cve@mitre.org"},{"url":"http://www5.compaq.com/support/files/desktops/us/revision/1723.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5718","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www5.compaq.com/support/files/desktops/us/revision/1723.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0947","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:1.5:*:*:*:*:*:*:*","matchCriteriaId":"5C22AB17-D78C-4330-A7BA-02495AE92F0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:1.5.3-4:*:*:*:*:*:*:*","matchCriteriaId":"CDA14719-B1F6-4547-A746-073FAFF3DCE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:1.6:a10:*:*:*:*:*:*","matchCriteriaId":"1883251B-87AF-40B4-87E7-C11C5B2B2257"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5630","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-013.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-061.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0948","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gnorpm:*:*:*:*:*:*:*:*","versionEndIncluding":"0.94","matchCriteriaId":"A2D4FBE0-8739-436B-9330-C587D488AA84"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0043.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0184.html","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-055.php3?dis=7.0","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-072.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/136866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1761","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5317","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-055.php3?dis=7.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/136866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0949","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:lbl_traceroute:1.4a5:*:*:*:*:*:*:*","matchCriteriaId":"270B8B64-276D-4C16-B242-0DD2E2A7F1DB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001013","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-078.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1739","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5311","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0357.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-034.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-053.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-October/000025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0950","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tis:internet_firewall_toolkit:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D8F8D55-AA37-4701-BD6E-03DFAC1C6E34"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5420","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0951","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a100400-1.txt","source":"cve@mitre.org"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=272079","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1756","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5335","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a100400-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.microsoft.com/technet/support/kb.asp?ID=272079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0952","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shigio_yamaguchi:global:3.55:*:*:*:*:*:*:*","matchCriteriaId":"A22EA8E1-B640-494E-A38C-5D34C89E714D"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6486","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5424","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0953","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolvable_corporation:shambala_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D0038B0E-2EF8-421C-B745-03B09DC2322B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1778","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5345","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0954","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolvable_corporation:shambala_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D0038B0E-2EF8-421C-B745-03B09DC2322B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1771","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5346","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0134.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0955","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:virtual_central_office_4000:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.3","matchCriteriaId":"643BB7C9-FAB0-475E-8425-C5E0EFB5CEA3"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a102600-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1885","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5425","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a102600-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0956","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.24:*:*:*:*:*:*:*","matchCriteriaId":"DD2651BC-04DB-4807-95FC-E4DD48A504F2"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2000-094.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1875","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5427","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0957","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mysql:pam_mysql:0.1:*:*:*:*:*:*:*","matchCriteriaId":"69F34F78-005A-4385-B950-7E64CB764E0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mysql:pam_mysql:0.2:*:*:*:*:*:*:*","matchCriteriaId":"D8197EC1-9941-4A9E-AAC9-EDC562AE0A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mysql:pam_mysql:0.3:*:*:*:*:*:*:*","matchCriteriaId":"3B5E13E9-39A1-4667-BE2C-3BD30CBA35A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pam_mysql:pam_mysql:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4E26729E-81B9-4F32-A853-149F7B771C06"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5447","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0374.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0958","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:hotjava_browser:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D5EF4789-27AB-405D-854D-EA7158003EA3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0349.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5428","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0959","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"8AFD93D5-70BB-475C-BDD3-DEDE9965C5BA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/85028","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5299","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/85028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0960","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:4.15:*:*:*:*:*:*:*","matchCriteriaId":"294BA50A-A19B-46F8-8D9E-4F0DA98F74E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:4.15:patch1:*:*:*:*:*:*","matchCriteriaId":"41AD2442-625E-4654-8654-0BF345FAC3B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:4.15:patch2:*:*:*:*:*:*","matchCriteriaId":"32228CBD-0C64-40B9-85A8-6925FDEEC89F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97138100426121&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1787","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5364","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97138100426121&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0961","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messaging_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6BFC3BDA-6B7E-4C95-8455-C60A61560C06"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:netscape_messaging_server_multiplexor:4.0:*:*:*:*:*:*:*","matchCriteriaId":"96C18478-4A02-48BE-AC28-AC4FF1D8F436"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0334.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5292","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0334.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0962","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0299.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1723","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5634","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0963","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ncurses:*:*:*:*:*:*:*:*","versionEndExcluding":"5.6","matchCriteriaId":"05541A17-7388-4157-9481-461E930FC3EF"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/138550","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/1142","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44487","source":"cve@mitre.org","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-036.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/138550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/1142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0964","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:hinet_lp:5100.0:*:*:*:*:*:*:*","matchCriteriaId":"34DF0E00-BEAC-47D2-9D28-66EE75825CE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0336.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1727","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5298","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0965","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:10.24:*:*:*:*:*:*:*","matchCriteriaId":"D9B7C178-4BE6-4397-A4E2-01375E4CA978"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*","matchCriteriaId":"1D462D6F-EB68-4E31-87FD-D918F5DEF3FB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5361","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0966","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0020.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5379","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0967","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:75.php.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0204.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a101200-1.txt","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-037.0.txt","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-062.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-088.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-095.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1786","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5359","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:75.php.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2000/a101200-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-037.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-062.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0968","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"EC796554-0AC5-40DE-B3AA-69A60D7C6786"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/141060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1799","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5375","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/141060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0969","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0CA42F82-2F19-4253-B9B2-AED23607672E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6983","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/141060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5413","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0409.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/141060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0970","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the \"Session ID Cookie Marking\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.acrossecurity.com/aspr/ASPR-2000-07-22-1-PUB.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7265","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5396","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-2000-07-22-1-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0971","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long \"RCPT TO\" or \"MAIL FROM\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_mail_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"987701CD-2DE1-4CCB-9AF9-F3ACD3865FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_mail_server:4.2:*:*:*:*:*:*:*","matchCriteriaId":"93291607-B845-4999-B464-395E268A7B59"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0301.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5397","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5398","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0301.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0972","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5410","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0317.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-0973","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.0:*:*:*:*:*:*:*","matchCriteriaId":"666F4E03-9AAF-4708-A8AA-C43AB80B57DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.1:*:*:*:*:*:*:*","matchCriteriaId":"C0164C24-6535-4E3C-92F1-43BDF8594FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.1beta:*:*:*:*:*:*:*","matchCriteriaId":"610B0EA6-4F36-4CE3-B5B2-72BF64EC8C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B174FCC4-C63A-4530-A871-6D438CD8849F"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CE40B979-ED1F-40CF-9296-E673F19990EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.5:*:*:*:*:*:*:*","matchCriteriaId":"559792F4-B6FF-4A90-9D1A-BA73E0157FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9E351F24-7E36-4D80-AC1D-C40C85611285"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2BFE1EAA-5E39-42FA-8F2E-097003C05B8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:7.1:*:*:*:*:*:*:*","matchCriteriaId":"21AEE075-CEB9-4080-B417-E0285AD2CD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1EA5BC99-FA45-4860-B676-9C89BE882522"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:7.2:*:*:*:*:*:*:*","matchCriteriaId":"69D07770-7E79-4B7C-AD6F-BB8ADDD9E270"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3B94C50A-E303-475B-9545-F038D8BAD2F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:7.3:*:*:*:*:*:*:*","matchCriteriaId":"7B54972E-C1E0-4CAC-A567-5681B4BF3641"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:curl:7.4:*:*:*:*:*:*:*","matchCriteriaId":"E7ABC917-EE6C-4C29-83AE-0414D605C85D"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:72.curl.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1804","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5374","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:72.curl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0974","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify contents of all documents but the first without detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E054978B-8466-4D12-B7DC-7E72CC57F0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F38F964B-C5D1-4177-BD31-7AB4083CC431"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DF7811A-B254-4829-AED2-C70BD5C82592"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"72ED862B-6278-41ED-9619-115E6552AFBB"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:67.gnupg.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-038.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0201.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0361.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000334","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001111","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1608","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-089.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1797","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5386","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:67.gnupg.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-038.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0975","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anaconda_partners:foundation_directory:*:*:*:*:*:*:*:*","matchCriteriaId":"CAB9CA6D-A115-4108-9CB6-C665F2258300"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0210.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5750","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0976","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:xlib:3.3x:*:*:*:*:*:*:*","matchCriteriaId":"8A62FA5E-16B2-40E7-B751-DA2609EF85D3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020502-01-I","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/5751.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1805","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020502-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0211.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/5751.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0977","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the \"filename\" parameter in a POST request, which is then sent by email to the address specified in the \"email\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oatmeal_studios:mail_file:1.10:*:*:*:*:*:*:*","matchCriteriaId":"AB713105-EB24-407E-B353-9496EC7249A3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1807","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5358","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5358","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0978","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the \"&\" shell metacharacter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bb4:big_brother_network_monitor:1.5c2:*:*:*:*:*:*:*","matchCriteriaId":"015807EA-DDA5-450E-B7A4-084E1596B662"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0162.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1779","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5719","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0979","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the \"Share Level Password\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97147777618139&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1780","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5395","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A996","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97147777618139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0980","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1781","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5357","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0981","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.20:*:*:*:*:*:*:*","matchCriteriaId":"578BA199-EF04-4595-AFDE-54FD66B7FC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.21:*:*:*:*:*:*:*","matchCriteriaId":"B82E464F-3871-40C7-A758-B81582D193AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22:*:*:*:*:*:*:*","matchCriteriaId":"05B7E2C5-6139-47F9-A310-F2BC0EF83942"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*","matchCriteriaId":"48DBBAC9-AA05-409F-82B2-A552A3417E45"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0318.html","source":"cve@mitre.org"},{"url":"http://www.mysql.com/documentation/mysql/commented/manual.php?section=Security","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5409","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0318.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mysql.com/documentation/mysql/commented/manual.php?section=Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0982","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the \"Cached Web Credentials\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*","matchCriteriaId":"44FF4E47-AD75-42C7-BB84-42BBA46A58B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1793","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5367","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0983","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the \"NetMeeting Desktop Sharing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4492BB3B-A225-4CD2-B857-1C8793B5DC39"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ273854","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/140341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1798","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5368","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ273854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/140341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0984","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a \"?/\" string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*","matchCriteriaId":"5A92DCEF-C205-4145-91B0-DB9991130457"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ioshttpserverquery-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1838","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5412","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ioshttpserverquery-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0985","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long \"MAIL FROM\" or \"RCPT TO\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nevis_systems:all-mail:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6E8E4DFA-26FD-4D01-A0CE-FBBBFC760431"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a101200-2.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1789","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a101200-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0986","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5390","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0987","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long \"connect\" command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"58CD5369-4262-421D-BC2C-C3E9986A5471"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EC58370-C10D-4559-81C8-C67B64EE2502"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/140340","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/140709","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5401","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/140340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/140709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0988","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bardon_data_systems:winu:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"7F104889-9EDB-45B2-A39F-616D12645E9C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0238.html","source":"cve@mitre.org"},{"url":"http://www.bardon.com/pwdcrack.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1801","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5376","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0238.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bardon.com/pwdcrack.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0989","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:inbusiness_email_station:1.4.87:*:*:*:*:*:*:*","matchCriteriaId":"78A23DD9-7CAF-4126-BB9E-3C9911504130"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0293.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6488","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5414","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0293.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0990","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an \"SMTP AUTH\" command with an unknown username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.20:*:*:*:*:*:*:*","matchCriteriaId":"BD542D23-A05C-43C3-949C-634B21E517EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:krzysztof_dabrowski:cmd5checkpw:0.21:*:*:*:*:*:*:*","matchCriteriaId":"FD6D32BC-E219-4F5D-B4EC-4C9706A4CBC5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0258.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://members.elysium.pl/brush/cmd5checkpw/changes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1809","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5382","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://members.elysium.pl/brush/cmd5checkpw/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0991","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the \"HyperTerminal Buffer Overflow\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hilgraeve:hyperterminal:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"CCBDB0F6-C4E9-46FD-A315-2A6596EA1DF5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1815","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-079","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0992","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*","matchCriteriaId":"316C8534-9CE3-456C-A04E-5D2B789FBE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"41BF66ED-CB08-440E-AC05-A31371B7A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E0EE3216-D8FF-43F0-9329-6676E2CEC250"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9310E12D-1136-4AD6-9678-8ADCD9EE58C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"BBEDF399-58DE-491A-8B51-87E0392FF9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"CBDF2DE8-8559-4BED-80AE-E1420BBF4043"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"23EB8421-76BF-47D1-B294-68412D5E4572"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9560989-5342-4C6B-974F-7D90C467BA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"971835AF-E908-4C74-9DE0-167349138DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"2E0D49C5-54B4-4437-A2D3-3EBFA1D9A3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"926B57D7-009C-4317-ACFB-98551FADC5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0359.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:057","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1742","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5312","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0359.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0993","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97068555106135&w=2","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata27.html#pw_error","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1744","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5339","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:58.chpass.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97068555106135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata27.html#pw_error","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0994","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=97068555106135&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1746","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5338","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=97068555106135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5338","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0995","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6125","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5635","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5635","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0996","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6124","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5636","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0997","sourceIdentifier":"cve@mitre.org","published":"2000-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1752","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5337","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-0998","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in top program allows local attackers to gain root privileges via the \"kill\" or \"renice\" function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*","matchCriteriaId":"0EB09993-B837-4352-B09D-3656F62638A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*","matchCriteriaId":"0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*","matchCriteriaId":"29EAA113-2404-4ABB-826B-3AA2AA858D02"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1895","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:62.top.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-0999","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9B72CFB3-39C7-469C-AA59-69F5B8993BF7"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/028_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1000","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*","matchCriteriaId":"8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/137374","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1747","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5314","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/137374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1001","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the \"price\" hidden form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:element_n.v:element_instantshop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7D4C2DFB-4792-4666-BE6A-75AF9CAE713B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97240616129614&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6487","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5402","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97240616129614&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1002","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to determine valid email addresses on the server for SPAM attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:communigate_pro:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8E4802FD-52E5-4A8B-8AAB-4536A4A8AC4A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/139523","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1792","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5363","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/139523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1003","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/139511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1794","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/139511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1004","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97068555106135&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5336","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97068555106135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1005","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extropia:extropia_webstore:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F5C64FF0-0D27-453A-A2AF-BEE1605A4DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:extropia:extropia_webstore:2.0:*:*:*:*:*:*:*","matchCriteriaId":"401F0F91-4227-4A89-8C00-55D99E9D1C24"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/138495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1774","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5347","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/138495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1006","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset=\"\" command, aka the \"Malformed MIME Header\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1869","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-082","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5448","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/bid/1869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1007","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:i-gear:3.5:*:*:*:*:*:*:*","matchCriteriaId":"6E61525F-0BFE-4738-9D7F-85E190D75D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:i-gear:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"CEC883C1-A120-4D8B-AB71-DDD245FBF098"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0048.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5791","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1008","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:palm:palm_os:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"189F51EC-95A6-499A-8F51-39F67B49C7C2"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a092600-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1715","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a092600-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1009","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1871","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5437","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1010","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:alpha:*:*:*:*:*","matchCriteriaId":"07396B95-E434-46C9-A345-27C9EA9BEA26"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:sparc:*:*:*:*:*","matchCriteriaId":"0775CE08-C5AD-4FF7-AEA9-537B1EAE3BDE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/137890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1764","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5344","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/137890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1011","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5638","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1012","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1013","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1014","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"17439B5B-0B66-490B-9B53-2C9D576C879F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3240","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1717","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5291","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0325.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1015","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"F30590C0-E506-42E8-9C55-11C836D59A6C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0366.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1731","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5306","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0366.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1016","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/84360","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1707","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/84360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1017","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webteacher:webdata:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"9D88549A-F6AE-4B2E-9671-CBAFE2F4357B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0007.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0032.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1732","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1018","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mendel_cooper:shred:1.0:*:*:*:*:*:*:*","matchCriteriaId":"53ED9F96-6E79-4232-BEB2-2C26E8350EC2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97119799515246&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97131166004145&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1788","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5722","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97119799515246&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97131166004145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1019","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:search_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B039D838-F1FE-407B-B70F-B93C41295514"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:search_software:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"F2BB83EB-686A-4ABD-A293-C67846F661A6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97301487015664&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1866","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5439","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97301487015664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1020","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF752E6A-0AB8-4B82-A895-9AF79B0783FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96925269716274&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1689","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5250","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96925269716274&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1021","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF752E6A-0AB8-4B82-A895-9AF79B0783FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96925269716274&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1689","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5250","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96925269716274&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1022","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B1C4F7D5-DCD0-409C-86BF-A96A5253DF64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8198D129-76D0-4983-BFC4-8EC724FE1B6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"6BEECFAA-9DD5-4950-B9F1-CF8582225314"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.3:*:*:*:*:*:*:*","matchCriteriaId":"49566EAC-05AF-4880-8000-351AF538E4CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:4.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"118CBF59-DAD8-468E-B279-F6359E4624F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7AA2E425-904C-4070-8F5F-B81BCF3147F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*","matchCriteriaId":"604CF950-5D4B-4DC6-819E-0528B22CB05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"999A0969-60EB-4B2E-A274-9F05D9F840E5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1698","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5277","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1023","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alabanza:control_panel:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"83EAD8B6-4C25-4834-A1A5-E1B26701440F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/84766","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1710","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5284","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/84766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1024","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unify:ewave_servletexec:3.0c:*:*:*:*:*:*:*","matchCriteriaId":"A7944E5F-FAAC-443E-BB7C-BC42392EA209"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97306581513537&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1876","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5450","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97306581513537&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1025","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the \"/servlet/\" string, which invokes the ServletExec servlet and causes an exception if the servlet is already running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unify:ewave_servletexec:3.0c:*:*:*:*:*:*:*","matchCriteriaId":"A7944E5F-FAAC-443E-BB7C-BC42392EA209"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97295224226042&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1868","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5435","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97295224226042&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1026","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9B50919-7C67-416D-BA2F-50747CDBE08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.4a6:*:*:*:*:*:*:*","matchCriteriaId":"950C6522-3C7F-4E81-8952-246FFE1072C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CC000D-857D-4E12-82E6-7F8168B463EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.5_alpha:*:*:*:*:*:*:*","matchCriteriaId":"45083B9F-95CC-4EB7-9591-2146084CBBC5"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1870","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5480","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:61.tcpdump.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0681.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1027","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"999A0969-60EB-4B2E-A274-9F05D9F840E5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97059440000367&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1877","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5646","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97059440000367&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1028","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.00:*:*:*:*:*:*:*","matchCriteriaId":"6E436D06-FA3A-43F6-AF84-2E9C2F42E3FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.01:*:*:*:*:*:*:*","matchCriteriaId":"DCB1B6DC-4FF9-40DC-BAD5-91A04E79981E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"E178238D-E17A-48C9-8922-AC92474BDF55"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.05:*:*:*:*:*:*:*","matchCriteriaId":"560C17E1-6154-4291-A838-5E76139B9FB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.06:*:*:*:*:*:*:*","matchCriteriaId":"3194CFA3-F0B3-487A-99C6-1A7DF1EF0586"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.07:*:*:*:*:*:*:*","matchCriteriaId":"035890F7-BF48-4669-812A-1DCBD91A8F34"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.08:*:*:*:*:*:*:*","matchCriteriaId":"F9AED8F3-2501-444D-8141-37FEE2246747"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.09:*:*:*:*:*:*:*","matchCriteriaId":"10974B0F-DA3A-4E3E-8914-8CEB366E9CC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"C54F7F74-7DD7-431E-AE75-1D1199D63032"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/142792","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/1886","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5460","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/142792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/1886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1029","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:*","matchCriteriaId":"BB79EDA4-9B2C-4C4C-A5DE-CB8C6EB00BDC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/141660","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1887","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5462","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/141660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1030","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:csandt:corporatetime_for_the_web:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2","matchCriteriaId":"32596B9D-76D9-4B12-8A8E-59A3FAEB1B47"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/142672","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1888","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/142672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1031","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:pk8:*:*:*:*:*:*","matchCriteriaId":"884D55C0-F5EB-484E-8886-1C6C12320BCB"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:pk4:*:*:*:*:*:*","matchCriteriaId":"5A788DB8-B738-4498-9C0B-68FCB92086F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0034.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/320067","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/75188","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1889","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5461","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/320067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/75188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1032","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers to identify valid usernames on the firewall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"}]}]}],"references":[{"url":"http://www.osvdb.org/1632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/142808","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1890","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5816","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/142808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1033","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cat_soft:serv-u:2.5x:*:*:*:*:*:*:*","matchCriteriaId":"7F9E83D8-9A38-4CD0-885F-70AF50A50E23"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/141905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1860","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5436","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/141905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1034","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the \"ActiveX Parameter Validation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97349782305448&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1899","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-085","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5467","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97349782305448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1035","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft:0.7x:*:*:*:*:*:*:*","matchCriteriaId":"17CFF0EF-21A4-4C27-AB0E-93BF261BEB79"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96879389027478&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1690","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.synnergy.net/Archives/Advisories/dethy/typsoft-ftpd.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96879389027478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.synnergy.net/Archives/Advisories/dethy/typsoft-ftpd.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1036","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extent_technologies:rbs_isp:2.5:*:*:*:*:*:*:*","matchCriteriaId":"582B4E3F-E10D-4E6B-A541-A7CD07833624"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0252.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1704","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5275","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1037","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/76389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1662","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/76389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1038","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:as400_firewall:r440:*:*:*:*:*:*:*","matchCriteriaId":"75A2F90D-63BA-412C-A9B8-244415FA0C71"}]}]}],"references":[{"url":"http://as400service.rochester.ibm.com/n_dir/nas4apar.NSF/5ec6cdc6ab42894a862568f90073c74a/9ce636030a58807186256955003d128d?OpenDocument","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=SA90544&apar=only","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5266","source":"cve@mitre.org"},{"url":"http://as400service.rochester.ibm.com/n_dir/nas4apar.NSF/5ec6cdc6ab42894a862568f90073c74a/9ce636030a58807186256955003d128d?OpenDocument","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=SA90544&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1039","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the \"NAPTHA\" class of vulnerabilities.  NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.html","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_NAPTHA.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2000-21.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2022","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-091","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razor.bindview.com/publish/advisories/adv_NAPTHA.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2000-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1040","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0356.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-039.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001014","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-086.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1820","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5394","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0356.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-039.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1041","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swen_thuemmler:ypbind:3.3:*:*:*:*:*:*:*","matchCriteriaId":"72D0839C-B7EC-4750-99A4-6CD70DC3803C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-039.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5759","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-039.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1042","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5730","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1043","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5731","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1044","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1820","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5394","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1045","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_85:*:*:*:*:*:*:*","matchCriteriaId":"F1454E19-D72A-4A22-8F3A-E1E9E71DD526"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_105:*:*:*:*:*:*:*","matchCriteriaId":"3CDB22E9-2A08-40BA-9C17-C809008E02BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_113:*:*:*:*:*:*:*","matchCriteriaId":"23C0888A-1DA7-432C-8E5B-8738B9411D6B"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-066-1.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-024.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1863","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5449","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-066-1.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1046","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) \"RCPT TO,\" (2) \"SAML FROM,\" or (3) \"SOML FROM\" commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"43FCF018-AE63-4D6B-B6D2-2DF6912E4D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9ADEA116-1DB1-4D19-B073-A36B63313BA8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0093.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1047","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long ENVID keyword in the \"MAIL FROM\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6256A050-8C38-4CC2-86F2-3364FAABDE59"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C0A1146D-E261-4AE9-8852-5988B3AB5865"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"99139690-6962-4373-9853-4EF28C922768"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E5FD1CC4-DFD4-4A32-AD45-353583463916"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_enterprise_server:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"068A0CE8-C88D-4D4D-822A-3CCC88EF2C32"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF6E13D4-7764-4A02-B599-B68BB45F4AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC4294-9363-406C-8C64-964A95DA2052"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"F9C6D1AA-ABEE-4491-828F-3AE3E6D3A029"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DB86430D-3A2D-4A07-A94B-731640E24269"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D480F91-6FEE-4675-8AE8-B0A20803B382"}]}]}],"references":[{"url":"http://www.osvdb.org/442","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/143071","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1905","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5488","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/143071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1048","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FA8E8CEE-E78A-46D5-B73D-C75CC8D088B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C7BC4C8-FB7B-4A88-B97B-984D9AA8EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C1D98E1-EBE1-4697-906F-E29C91D9074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.1_beta_a:*:*:*:*:*:*:*","matchCriteriaId":"8AB1D7C0-E484-4441-AA68-FBA5A3309547"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0245.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5373","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1049","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of \".\" characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"EF7B2456-5820-4B72-9375-4945B95F371E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97310314724964&w=2","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=18085&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5452","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97310314724964&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=18085&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1050","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra \"/\" in the beginning of the request (aka the \"extra leading slash\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:sp1:*:*:*:*:*:*","matchCriteriaId":"EF7B2456-5820-4B72-9375-4945B95F371E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236316510117&w=2","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5407","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236316510117&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=17966&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1051","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.x:*:*:*:*:*:*:*","matchCriteriaId":"9C0A179E-281A-441B-B5B0-04D839E363D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236692714978&w=2","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=17968&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5405","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236692714978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=17968&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1052","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.x:*:*:*:*:*:*:*","matchCriteriaId":"9C0A179E-281A-441B-B5B0-04D839E363D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236692714978&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236692714978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1053","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling the com.livesoftware.jrun.plugins.JSP JSP servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.x:*:*:*:*:*:*:*","matchCriteriaId":"9C0A179E-281A-441B-B5B0-04D839E363D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236125107957&w=2","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=17969&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5406","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236125107957&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=17969&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1054","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"3BF391B2-17C6-4633-8CE9-35B637BFDC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.3\\(3\\):*:windows_nt:*:*:*:*:*","matchCriteriaId":"C8203963-D3FA-464F-9C43-C3A26B628B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.4\\(2\\):*:windows_nt:*:*:*:*:*","matchCriteriaId":"674F9D34-BD92-436D-B149-CB30BC4069E2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1705","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5272","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1055","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"3BF391B2-17C6-4633-8CE9-35B637BFDC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.3\\(3\\):*:windows_nt:*:*:*:*:*","matchCriteriaId":"C8203963-D3FA-464F-9C43-C3A26B628B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.4\\(2\\):*:windows_nt:*:*:*:*:*","matchCriteriaId":"674F9D34-BD92-436D-B149-CB30BC4069E2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1569","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5273","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1056","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"3BF391B2-17C6-4633-8CE9-35B637BFDC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.3\\(3\\):*:windows_nt:*:*:*:*:*","matchCriteriaId":"C8203963-D3FA-464F-9C43-C3A26B628B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.4\\(2\\):*:windows_nt:*:*:*:*:*","matchCriteriaId":"674F9D34-BD92-436D-B149-CB30BC4069E2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1708","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5274","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/csecureacsnt-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1057","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:4.11:*:hp_ux:*:*:*:*:*","matchCriteriaId":"0A8A9CE5-0303-4B2A-9844-86268D47F92B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:4.11:*:solaris:*:*:*:*:*","matchCriteriaId":"D61BEE01-0A97-4202-831C-0DBC5582664F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.01:*:hp_ux:*:*:*:*:*","matchCriteriaId":"A15652A8-A673-4652-8BEA-A38207D9B77E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.01:*:solaris:*:*:*:*:*","matchCriteriaId":"B3A43C94-1DDA-4F04-9BE1-42636286AB8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:hp_ux_10.x:*:*:*:*:*","matchCriteriaId":"05E589CE-62AE-4FD8-AF2C-ABF73F5678B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:hp_ux_11.x:*:*:*:*:*","matchCriteriaId":"1271CE87-C584-427B-9DC5-C52A04E361FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:solaris:*:*:*:*:*","matchCriteriaId":"B97EC5AC-1C14-47FD-BA59-48879B1176F7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0140.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1682","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5229","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1058","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the \"Java SNMP MIB Browser Object ID parsing problem.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:4.11:*:*:*:*:*:*:*","matchCriteriaId":"4670BB0B-F94E-44FE-A1E5-2EEAF58C0C75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.01:*:*:*:*:*:*:*","matchCriteriaId":"1218361D-6F62-4035-B0B2-9BEB19539A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0274.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97004856403173&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5282","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0274.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97004856403173&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1059","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an \"xhost + localhost\" command, which allows local users to sniff X Windows events and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-052.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/136495","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1735","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5305","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-052.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/136495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1060","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an \"xhost + localhost\" command in the xinitrc program, which allows local users to sniff X Windows traffic and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:xfce:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8CA20054-FC0B-4E69-A628-615A3C46850A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0022.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1736","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5305","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1061","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the \"Microsoft VM ActiveX Component\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.x:*:*:*:*:*:*:*","matchCriteriaId":"45091F51-BA28-4FEB-9F84-58AC2E1DB48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.x:*:*:*:*:*:*:*","matchCriteriaId":"B0DCFCBD-8EDF-47B5-823F-5E05CD22AF4F"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-075","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5127","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1062","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.04:*:*:*:*:*:*:*","matchCriteriaId":"60C68BF3-FF26-485D-83EF-934F1C74507C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.05:*:*:*:*:*:*:*","matchCriteriaId":"99649072-7DA1-404D-BF7F-E16A85544002"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.20:*:*:*:*:*:*:*","matchCriteriaId":"017D5FFF-0735-4152-B99C-35D85D8EA5C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1775","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5353","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1063","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.04:*:*:*:*:*:*:*","matchCriteriaId":"60C68BF3-FF26-485D-83EF-934F1C74507C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.05:*:*:*:*:*:*:*","matchCriteriaId":"99649072-7DA1-404D-BF7F-E16A85544002"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.20:*:*:*:*:*:*:*","matchCriteriaId":"017D5FFF-0735-4152-B99C-35D85D8EA5C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1775","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5353","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1064","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.04:*:*:*:*:*:*:*","matchCriteriaId":"60C68BF3-FF26-485D-83EF-934F1C74507C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.05:*:*:*:*:*:*:*","matchCriteriaId":"99649072-7DA1-404D-BF7F-E16A85544002"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.20:*:*:*:*:*:*:*","matchCriteriaId":"017D5FFF-0735-4152-B99C-35D85D8EA5C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1775","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5353","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1065","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.04:*:*:*:*:*:*:*","matchCriteriaId":"60C68BF3-FF26-485D-83EF-934F1C74507C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.05:*:*:*:*:*:*:*","matchCriteriaId":"99649072-7DA1-404D-BF7F-E16A85544002"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.20:*:*:*:*:*:*:*","matchCriteriaId":"017D5FFF-0735-4152-B99C-35D85D8EA5C1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1775","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5354","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97119729613778&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1066","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:63.getnameinfo.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1894","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5454","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:63.getnameinfo.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1068","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DEBB723-06DF-4368-AF20-DC0840FA8556"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it_pro:1.6:*:*:*:*:*:*:*","matchCriteriaId":"832C4436-00A1-4771-A520-560DE791D4D2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236719315352&w=2","source":"cve@mitre.org"},{"url":"http://www.cgi-world.com/pollit.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5792","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236719315352&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cgi-world.com/pollit.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1069","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same value to the entered_password and admin_password parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DEBB723-06DF-4368-AF20-DC0840FA8556"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it:2.01:*:*:*:*:*:*:*","matchCriteriaId":"42165FB2-5945-4962-8D4C-550E67AD3875"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it_pro:1.6:*:*:*:*:*:*:*","matchCriteriaId":"832C4436-00A1-4771-A520-560DE791D4D2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236719315352&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5419","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236719315352&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1070","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8DEBB723-06DF-4368-AF20-DC0840FA8556"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it:2.01:*:*:*:*:*:*:*","matchCriteriaId":"42165FB2-5945-4962-8D4C-550E67AD3875"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi-world:poll_it_pro:1.6:*:*:*:*:*:*:*","matchCriteriaId":"832C4436-00A1-4771-A520-560DE791D4D2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97236719315352&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5794","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97236719315352&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1071","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an \"xhost +\" command, which allows remote attackers to monitor X Windows events and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:iplanet_ical:2.1:patch2:*:*:*:*:*:*","matchCriteriaId":"377FC32F-3C96-473E-A6EA-2522AC15B81C"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7213","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1767","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5752","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1072","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:iplanet_ical:2.1:patch2:*:*:*:*:*:*","matchCriteriaId":"377FC32F-3C96-473E-A6EA-2522AC15B81C"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1768","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5756","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1073","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:iplanet_ical:2.1:patch2:*:*:*:*:*:*","matchCriteriaId":"377FC32F-3C96-473E-A6EA-2522AC15B81C"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7210","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1769","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5757","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1074","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:iplanet_ical:2.1:patch2:*:*:*:*:*:*","matchCriteriaId":"377FC32F-3C96-473E-A6EA-2522AC15B81C"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1769","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5757","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a100900-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1075","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:4.12:*:*:*:*:*:*:*","matchCriteriaId":"025DC6F0-A1FF-4325-8F58-2337BA961DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_certificate_management_system:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FEBFF8AA-E42A-4CE9-AD08-4A1BBFFD3A90"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html","source":"cve@mitre.org"},{"url":"http://www.iplanet.com/downloads/patches/0122.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4086","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/486","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1839","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5421","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iplanet.com/downloads/patches/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1076","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:4.12:*:*:*:*:*:*:*","matchCriteriaId":"025DC6F0-A1FF-4325-8F58-2337BA961DBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_certificate_management_system:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FEBFF8AA-E42A-4CE9-AD08-4A1BBFFD3A90"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5422","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1077","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.x:*:*:*:*:*:*:*","matchCriteriaId":"D7F12D3A-AE61-49BD-A164-F74A10B2F0FB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/141435","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5446","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/141435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1078","sourceIdentifier":"cve@mitre.org","published":"2000-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a \"?\" character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq_web_front:windows_9x:*:*:*:*:*:*:*","matchCriteriaId":"A697B7D0-C602-4D06-A1A1-33FA3BF0296C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/138332","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5332","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/138332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1079","sourceIdentifier":"cve@mitre.org","published":"2000-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0116.html","source":"cve@mitre.org"},{"url":"http://www.nai.com/research/covert/advisories/045.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1620","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5168","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1079","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/research/covert/advisories/045.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1080","sourceIdentifier":"cve@mitre.org","published":"2000-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake:1.9:*:*:*:*:*:*:*","matchCriteriaId":"61028BF2-6AF9-4145-B096-DA93E3197040"},{"vulnerable":true,"criteria":"cpe:2.3:a:j._p._grossman:proquake:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7A3E828B-9669-440D-B9A6-012024ADBBD2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97318797630246&w=2","source":"cve@mitre.org"},{"url":"http://proquake.ai.mit.edu/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1900","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5527","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97318797630246&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://proquake.ai.mit.edu/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5527","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1081","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2030","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A231","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1082","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2031","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1083","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2038","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1084","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2039","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570878710037&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1085","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2040","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1086","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2041","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1087","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2042","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1088","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the \"Extended Stored Procedure Parameter Parsing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2043","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97570884410184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1089","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the \"Phone Book Service Buffer Overflow\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2048","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.stake.com/research/advisories/2000/a120400-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.stake.com/research/advisories/2000/a120400-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1090","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:far_east:*:*:*","matchCriteriaId":"AD94A633-41F4-4515-88C5-818A1BEDED11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:5.0:*:*:*:far_east:*:*:*","matchCriteriaId":"C8F1F3C9-EF3A-4723-825F-0A728837D0C5"}]}]}],"references":[{"url":"http://www.nsfocus.com/english/homepage/sa_08.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2100","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5729","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.nsfocus.com/english/homepage/sa_08.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1092","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a \"/\" in front of the target filename in the \"file\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_heiphetz_group:ezshopper:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DA91E5DF-0069-4896-8392-5BCA8E98970D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alex_heiphetz_group:ezshopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5DB24D0E-9799-4C96-B9F0-45B821ABA365"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97676270729984&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2109","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5740","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97676270729984&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1093","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long \"goim\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:*","matchCriteriaId":"ED10DFD8-2532-466D-8EBB-F05081F2935D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:*","matchCriteriaId":"0D371BDC-9E31-4EB1-88E9-82C2976086E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:*","matchCriteriaId":"64B46D19-9103-40C5-A6A4-D5BE8DF8276E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:*","matchCriteriaId":"D47319C5-1E96-4AEB-ABA9-638DFF22BD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:*","matchCriteriaId":"483C0045-4C10-4120-AB89-C36467993E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:*","matchCriteriaId":"7577D890-E06A-477C-80BE-48075FB16437"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:*","matchCriteriaId":"34B6D42F-9FD9-4E0D-BB59-8E65E817889C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:*","matchCriteriaId":"9C2B7D7B-DB48-458B-9CA5-813782BA600D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:*","matchCriteriaId":"FF19BBC6-C4F2-4636-8650-E178FFD6BF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E00F0805-8C73-43B1-87AC-744434046E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*","matchCriteriaId":"8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*","matchCriteriaId":"172E406F-108C-4D9A-80AB-78CDF134C4A8"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a121200-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5732","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a121200-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1094","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a \"buddyicon\" command with a long \"src\" argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aim:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.2229","matchCriteriaId":"90BDB096-13CB-4E99-B7C6-953B82D6A954"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97668265628917&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97683774417132&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a121200-1.txt","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1692","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=97668265628917&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97683774417132&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.atstake.com/research/advisories/2000/a121200-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2000-1095","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0179.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0596.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000340","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001120","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-071-1.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-108.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1936","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5516","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2000-q4/0596.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-071-1.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1096","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating world-writeable temporary files and modifying them while the victim is editing the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_vixie:vixie_cron:3.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D8F45BCD-EBC1-4707-8C53-A25F373026A5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0237.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1960","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5543","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0237.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1097","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:soho_firewall:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1B5EA1E-E755-4517-9C2A-B489FEFA3FCB"},{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:soho_firewall:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"762138D4-CCCF-493A-B362-DC88B1D909EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0406.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1667","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2013","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5596","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0406.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1098","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:soho_firewall:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A1B5EA1E-E755-4517-9C2A-B489FEFA3FCB"},{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:soho_firewall:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"762138D4-CCCF-493A-B362-DC88B1D909EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0439.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0435.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0439.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1099","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"FBCDE0DF-29CB-4C41-84F5-664A9845F4CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.1:update3:*:*:*:*:*:*","matchCriteriaId":"38A647E6-2BC2-4E71-96FB-7CA457484CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2:update4:*:*:*:*:*:*","matchCriteriaId":"5B791B1F-D6AA-451D-A415-C2C9BE44865A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2:update5:*:*:*:*:*:*","matchCriteriaId":"A4D34197-1500-47C7-848D-676F7592BCD4"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/7255","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5605","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/7255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1100","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trlinux:postaci_webmail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"CEA2CF48-2C03-45A7-B87E-86A54BEEDF81"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0433.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2029","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0433.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1101","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the \"Restrict to home directory\" option enabled allows local users to escape the home directory via a \"/../\" string, a variation of the .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.41_rc14:*:*:*:*:*:*:*","matchCriteriaId":"0BFFAD53-125B-4633-9AC4-A580B17A60F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:2.41_rc14:*:pro:*:*:*:*:*","matchCriteriaId":"8D405E5C-7528-44FA-A923-6467E5C00E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"48834DE9-009F-4ADF-882C-731AAE13216C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0386.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/5608.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2005","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0386.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/5608.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1102","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via \"mode +owgscfxeb\" and \"oper\" commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ptlink:ptlink_irc_services:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"1E207D40-EE27-4513-992D-B302A8A6CD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ptlink:ptlink_ircd:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6205F328-8C56-4324-9D6E-C7F0C612E616"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/147115","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2008","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/147115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1103","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"950CE88E-E396-4D32-AC9D-B76EB2B537C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7ECF99E9-1C3B-4D8F-A52E-28D0BFEB2E9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A37687D5-1239-474B-994C-C638AB9B105B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/147120","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2009","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/147120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1104","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Variant of the \"IIS Cross-Site Scripting\" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client.  The client then executes those scripts in the same context as the trusted site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1105","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:indexing_service:*:*:windows_2000:*:*:*:*:*","matchCriteriaId":"3091F662-8B47-4AB6-B82B-9E644ED7DC51"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/144270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1933","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/144270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1106","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan VirusWall creates an \"Intscan\" share to the \"InterScan\" directory with permissions that grant Full Control permissions to the Everyone group, which allows attackers to gain privileges by modifying the VirusWall programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"0A8C3171-8055-4B3B-97CE-D39770073914"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/147563","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2014","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5606","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/147563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1107","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0387.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2015","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5590","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0387.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1108","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local users to corrupt files by creating a symbolic link to the target file, calling mc, and specifying that link as a TTY argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*","matchCriteriaId":"0A4BBBE0-E96D-4BCB-BF5B-673888C00AC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0192.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001125","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-078.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1945","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5519","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-078.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1109","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows other local users to gain privileges by creating directories that contain special characters followed by the commands to be executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*","matchCriteriaId":"EB4028BE-4173-4175-B9EF-A85A47476A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*","matchCriteriaId":"FC64619A-D8C3-4613-9A51-849DC65DC959"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*","matchCriteriaId":"0A4BBBE0-E96D-4BCB-BF5B-673888C00AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*","matchCriteriaId":"D410B4E1-DA7A-4F62-A0F9-E8C5A147BD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"949399A7-6E77-4F12-86EE-7B6FBAA16D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*","matchCriteriaId":"FDE8085F-84F3-4305-A52B-FEFF05E9FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*","matchCriteriaId":"D5DA21F1-8700-437C-8D64-70D97A508598"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*","matchCriteriaId":"B03CA3A4-86E2-4E10-8F56-51B814F51540"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*","matchCriteriaId":"F5AA5CCF-F160-4092-A7E7-29459E2528F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*","matchCriteriaId":"F2B90B64-72A2-46D3-A6CC-07052FC70740"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*","matchCriteriaId":"1E7739C2-C590-479E-8A0B-2EC95E836E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*","matchCriteriaId":"25C1FE96-BC31-48D3-BB64-F132E17B8244"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0373.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-036","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_011_mc.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5929","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0373.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_011_mc.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1110","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.data:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1900FF78-33E3-481D-8984-E45BD83DBF75"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0384.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2017","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0384.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1111","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/147914","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2018","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5598","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/147914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1112","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the \".WMS Script Execution\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1976","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-090","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5575","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1113","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the \".ASX Buffer Overrun\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a112300-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1980","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-090","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5574","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/a112300-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1114","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as \".\", or \"+\", or \"%20\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unify:ewave_servletexec:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B937CCF3-EC98-429B-A3C8-2DFA132495C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:unify:ewave_servletexec:3.0c:*:*:*:*:*:*:*","matchCriteriaId":"A7944E5F-FAAC-443E-BB7C-BC42392EA209"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1970","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1115","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"2000a_2000.0.1.32","matchCriteriaId":"CBA64EDD-BEBD-4C51-A0AE-DEB397CBC07A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0299.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1979","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.software602.com/products/ls/support/newbuild.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5583","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.software602.com/products/ls/support/newbuild.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1116","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E931DDE7-290F-4B14-A103-91EFB49EA169"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:3.0_build_1:*:*:*:*:*:*:*","matchCriteriaId":"AA7672FB-3D77-43E7-9DA0-01DFF97FC76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E92863B0-9FE6-474C-8D10-75040BCF91FD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0041.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5388","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1117","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the client by measuring delays in the execution of the getSystemResource method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:r5:*:*:*:*:*:*:*","matchCriteriaId":"2F4F8C0C-B817-4E38-95E6-5896E365C75F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0341.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1994","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0341.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1118","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as \"/+/\" or \"/.\" to the HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:24link:24link:1.06:*:*:*:*:*:*:*","matchCriteriaId":"00A35EA1-0DDD-475E-B59A-10AA583AF1EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0369.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1119","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long \"x=\" argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08812&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY10721&apar=only","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1676","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2032","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5621","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08812&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY10721&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1120","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2033","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5620","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1121","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2034","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5619","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08143&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY08287&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1122","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05F20EC2-ADE6-4F96-A2E7-1DCCA819D657"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"91D7C561-4D23-430B-A7D8-137E52B08FF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY07790&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY07831&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2035","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY07790&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY07831&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1123","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY12638&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2036","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5617","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY12638&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1124","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY12638&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5616","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97569466809056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY12638&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1125","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2e:*:*:*:*:*:*:*","matchCriteriaId":"24EEDE00-6F40-4A9A-BF74-6BE6CEAE39E0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97336034309944&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1914","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97336034309944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1126","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/2850","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1954","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/2850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1127","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/143845","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1919","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/143845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1128","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows local users to place a Trojan horse \"common.exe\" program in the C:\\Program Files directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1EE9789B-3A6E-4F30-A85F-7A8B075DFF60"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0073.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1920","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2000-q4/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1129","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5:*:*:*:*:*:*:*","matchCriteriaId":"27DD72FC-3FEF-43BC-8A68-3299213151F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1999","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1130","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5:*:*:*:*:*:*:*","matchCriteriaId":"27DD72FC-3FEF-43BC-8A68-3299213151F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1993","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1131","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bill_kendrick:gbook.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"668AB7F3-8345-4940-9C6C-952D61609267"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0144.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1940","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5509","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1132","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed \"forum\" variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2D5C5D80-B6E6-44DC-B9D4-CE6DBC6CAA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3EA26ADB-8D94-4C9E-97BB-24AE9FD47984"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54FA798C-D639-4E2A-9D8E-300E93A097ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CA418C3B-B98C-4A8E-92E9-7280A9D61B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:5.0:*:*:*:*:*:*:*","matchCriteriaId":"391D155A-F680-4D9E-AD43-7D6A26EF5557"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5FF2D08-2062-41E8-988F-40A2B6F95ED5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dcscripts.com/dcforum/dcfNews/124.html#1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1646","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1951","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5533","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dcscripts.com/dcforum/dcfNews/124.html#1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1133","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flicks_software:authentix:5.1c:*:*:*:*:*:*:*","matchCriteriaId":"75441BFD-B352-4E3E-8E1A-AFE46BF5BC94"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97353881829760&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97362374200478&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1907","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97353881829760&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97362374200478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1134","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*","matchCriteriaId":"4EC3F7E5-5D49-471B-A705-ADD2642E5B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2e:*:*:*:*:*:*:*","matchCriteriaId":"24EEDE00-6F40-4A9A-BF74-6BE6CEAE39E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:76.tcsh-csh.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011103-02-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0418.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q1/0009.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000350","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000354","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97561816504170&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-042.0.txt","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-043.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001111a","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/10277","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-069.php3","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-075.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-117.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-121.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/146657","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2006","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4047","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:76.tcsh-csh.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011103-02-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q1/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97561816504170&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-042.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-043.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001111a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/10277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-069.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-075.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/146657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1135","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Note: fixed in potato version","cveTags":[],"descriptions":[{"lang":"en","value":"fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://www.debian.org/security/2000/20001130","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7208","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5633","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1136","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:elvis_tiny:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.9","matchCriteriaId":"724696ED-86AA-4EBB-AF0C-39A71505CE7A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97502995616099&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1984","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5632","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97502995616099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1137","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:2.15:*:*:*:*:*:*:*","matchCriteriaId":"B99B8A89-1278-40CF-9ED9-2D46E7E288D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:2.16tr:*:*:*:*:*:*:*","matchCriteriaId":"103C2F3C-3E99-4E3A-A4A9-612C693DCBEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:2.18:*:*:*:*:*:*:*","matchCriteriaId":"2D340B1E-B564-458C-AE06-F5BE1937A4D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ed:2.18.0:*:*:*:*:*:*:*","matchCriteriaId":"3ADD11EF-0274-4AAF-A346-FBC91156BE82"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000359","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001129","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-076.php3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6491","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-123.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5723","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-076.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-123.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1138","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.5","matchCriteriaId":"76033B86-850B-4028-AB50-7A4C45D9A560"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1D5D749-546A-4655-A0BF-0A2D4E9F51A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C43E91B-492D-42E0-9C59-3DA83AF7367B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C944AEC-18C2-487E-8E0F-EC525D21EDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D4B2601-B62F-4235-BFFD-281235737450"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CA83054E-5E6B-48A4-8799-5C8507BFEB68"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97370725220953&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1925","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97370725220953&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1139","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the \"Exchange User Account\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/1958","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-088","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5537","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/bid/1958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1140","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1908","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5473","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1141","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 modifies the kernel so that \"..\" does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5473","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1142","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5949","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1143","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5473","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1144","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting \"/\" file system is higher than normal, which allows attackers to determine that they are in a chroot environment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1909","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5472","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1145","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManTrap processes or modify arbitrary data files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5950","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1146","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recourse_technologies:mantrap:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8D798097-939A-4884-946F-90B066426FBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1913","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5528","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97349791405580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1147","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the \"LANGUAGE\" argument in a script tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/143070","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1911","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5510","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/143070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1148","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain privileges on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:volano_llc:volanochatpro:2.1:*:*:*:*:*:*:*","matchCriteriaId":"650D86A2-79D6-4768-852B-D30034AA882C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0072.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0085.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1906","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5465","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1149","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the \"Terminal Server Login Buffer Overflow\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:terminal_server:*:*:*:*:*:*:*","matchCriteriaId":"22B1D814-7954-4E8B-B20C-410B53D9202A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/143991","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1924","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5489","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/143991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1150","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xavier_ducrohet:felix:2.3:*:*:*:*:*:*:*","matchCriteriaId":"9D2C6297-E56E-4FC8-A3F5-BB52DBCA2A5D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1151","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abisoft:baxter:x:*:*:*:*:*:*:*","matchCriteriaId":"FDAC2D3E-9060-45E0-B1C8-FC11E6CE87D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:abisoft:baxter:y:*:*:*:*:*:*:*","matchCriteriaId":"63D6B63A-ADFA-4A5C-A062-D677DBFBDB4B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1152","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:4.5:*:*:*:*:*:*:*","matchCriteriaId":"A78731F7-6AFC-4349-972C-929323519225"},{"vulnerable":true,"criteria":"cpe:2.3:o:be:beos:5:*:*:*:*:*:*:*","matchCriteriaId":"2B968A85-4802-4BD6-B55D-26AC23F39A1D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1153","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kenny_carruthers:postmaster:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6BF7643-FEDE-4D18-894C-9A5C178673C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1154","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_kloss:robinhood:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D79B33DE-FC8A-49CB-8427-CEA24F5DC3D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1155","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_kloss:robinhood:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D79B33DE-FC8A-49CB-8427-CEA24F5DC3D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1156","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:staroffice:5.2:*:*:*:*:*:*:*","matchCriteriaId":"144E91CB-BC98-48B0-9507-10BFD22280F3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0115.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1922","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5487","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1157","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:sniffer_agent:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"9BB4D6E8-00A0-484E-9C3C-B21794DB30D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1901","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1158","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:sniffer_agent:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"9BB4D6E8-00A0-484E-9C3C-B21794DB30D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1159","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:sniffer_agent:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"9BB4D6E8-00A0-484E-9C3C-B21794DB30D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1160","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:sniffer_agent:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"9BB4D6E8-00A0-484E-9C3C-B21794DB30D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1903","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1161","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:0.77b:*:*:*:*:*:*:*","matchCriteriaId":"91F083DD-A0E4-4976-AA90-411E997EAB2D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0271.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1969","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1162","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:4.3:*:*:*:*:*:*:*","matchCriteriaId":"563638C2-75D6-4EBB-BE65-A2DBCB9B2425"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.10.10:*:*:*:*:*:*:*","matchCriteriaId":"31868FF9-396E-43F3-87CC-99653D2EEB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.10.15:*:*:*:*:*:*:*","matchCriteriaId":"65386D8C-7D7C-464A-839D-6B4B39F724BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.50:*:*:*:*:*:*:*","matchCriteriaId":"718E9B80-DD01-45E5-B61C-B5BA2036262F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20001123","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-114.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1990","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5563","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2000/20001123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1163","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:4.3:*:*:*:*:*:*:*","matchCriteriaId":"563638C2-75D6-4EBB-BE65-A2DBCB9B2425"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.10.10:*:*:*:*:*:*:*","matchCriteriaId":"31868FF9-396E-43F3-87CC-99653D2EEB75"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.10.15:*:*:*:*:*:*:*","matchCriteriaId":"65386D8C-7D7C-464A-839D-6B4B39F724BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.10cl:*:*:*:*:*:*:*","matchCriteriaId":"5FB97AFC-64CA-4B20-8BB6-DFF70225400D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:5.50:*:*:*:*:*:*:*","matchCriteriaId":"718E9B80-DD01-45E5-B61C-B5BA2036262F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001123","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1991","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5564","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1164","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"968A0212-EE5D-4D8A-837E-41424ED5964B"},{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc:3.3.3r7:*:*:*:*:*:*:*","matchCriteriaId":"2433C9F8-D11B-4263-8541-76C1470B41FA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1961","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5545","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0253.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1165","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:balabit:syslog-ng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.6","matchCriteriaId":"237C9B6B-9F31-46D9-9B2C-F4DBF3E1AA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:balabit:syslog-ng:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"CDB6CA0D-295B-492F-A519-E3DDBCCB4B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:balabit:syslog-ng:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"D5C7636A-9CC1-4D42-876C-6DAE6C4503CB"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:02.syslog-ng.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0300.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.balabit.hu/products/syslog-ng/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1981","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5576","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:02.syslog-ng.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0300.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.balabit.hu/products/syslog-ng/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1166","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Twig webmail system does not properly set the \"vhosts\" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to the index.php3 program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C69CBC4B-9E86-41CF-AECF-BCE1FD1A58CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0351.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://twig.screwdriver.net/file.php3?file=CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1998","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5581","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0351.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://twig.screwdriver.net/file.php3?file=CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1167","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the \"nat deny_incoming\" command, which allows remote attackers to connect to the target system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:70.ppp-nat.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1655","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1974","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5584","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:70.ppp-nat.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1168","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E0C0BA13-BCB4-43EF-B4DB-B36BF27268FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97502498610979&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1988","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97502498610979&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1169","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0195.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000345","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2000-Nov/0004.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001118","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-068.php3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2114","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6248","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-111.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1949","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5517","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archives/suse-security-announce/2000-Nov/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-068.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1170","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pelesoft:netsnap:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9965EAFF-BD57-4C1E-8933-9867E6EC6A40"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97439536016554&w=2","source":"cve@mitre.org"},{"url":"http://www.netsnap.com/new.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1956","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5534","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97439536016554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netsnap.com/new.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1171","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the \"thesection\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FD95F968-93AD-471C-B0B9-C1A28996307D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0263.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1963","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5553","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0263.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1172","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6D1EE775-471F-4D9F-9635-41CB581168D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"5E56639E-2F96-4110-8846-0EA887D2967B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0204.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1173","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsys:cyberpatrol:4.04.003:*:*:*:*:*:*:*","matchCriteriaId":"9009A873-47FF-43F8-8B2A-3E72A3E2E260"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsys:cyberpatrol:4.04.005:*:*:*:*:*:*:*","matchCriteriaId":"6CBC6E4F-4CB3-4BB2-9B49-A66962290EB2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0323.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1977","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1174","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.13","matchCriteriaId":"0417AE0B-C63A-4D69-B619-9221C3574DEB"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:81.ethereal.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0251.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000342","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001122a","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-116.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1972","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5557","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:81.ethereal.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0251.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001122a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1175","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jan_hubicka:koules:1.4:*:*:*:*:*:*:*","matchCriteriaId":"9F3B11C3-9830-4E67-A3E8-956F17A4B800"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/145823","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1967","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/145823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1176","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the \"catsearch\" form field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-11:*:*:*:*:*:*:*","matchCriteriaId":"3135BB83-CC1C-45F4-AB13-A93A17D89290"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0110.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1921","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1177","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bb4:big_brother_network_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5d2","matchCriteriaId":"1574E39D-9780-4A0E-AA52-768B962F5D95"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0284.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bb4.com/incident.nov21","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1971","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bb4.com/incident.nov21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1178","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*","matchCriteriaId":"9894A324-ABBD-4FF4-8A51-D73381F40814"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=97500174210821&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2000/20001201","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-072.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-110.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1959","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5546","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=97500174210821&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2000/20001201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-072.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/1959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1179","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netopia:650-st_isdn_router:3.3.2_firmware:*:*:*:*:*:*:*","matchCriteriaId":"9233BCCB-6E06-4F64-86CA-182A3A444675"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97440068130051&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1952","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5536","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97440068130051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1180","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97474521003453&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1968","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5551","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97474521003453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1181","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE671A54-2E76-467E-8945-10982B79F4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"AF90DED4-7EFE-4C4A-8766-E7109F76673D"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9392C48A-A1AB-43F7-8374-02BDCE6589AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0236.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://service.real.com/help/faq/security/memory.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1957","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5538","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://service.real.com/help/faq/security/memory.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1182","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables proxy handling."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D40436FD-27BA-4F22-8574-47E2C2FF9E9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.5:*:*:*:*:*:*:*","matchCriteriaId":"8335934B-5CFC-4AF5-BD7D-10329694FF08"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0224.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5535","source":"cve@mitre.org"},{"url":"https://www.watchguard.com/support/patches.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0224.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.watchguard.com/support/patches.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1183","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nec:socks_5:1.0r5:*:*:*:*:*:*:*","matchCriteriaId":"85476271-78BE-4958-9A84-9EDC96C16463"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0219.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2000-1184","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*","matchCriteriaId":"29EAA113-2404-4ABB-826B-3AA2AA858D02"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:69.telnetd.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6083","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5959","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:69.telnetd.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1185","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itserv_incorporated:ridewaypn:6.22:*:*:*:*:*:*:*","matchCriteriaId":"E30FDDE1-7AD0-4E3F-9616-52C0E7E86858"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0201.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1938","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1186","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phf:phf:*:*:*:*:*:*:*:*","matchCriteriaId":"C7364BB2-0BEC-451C-B39A-184DE26A00C9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0221.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5970","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1187","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.75","matchCriteriaId":"FE8BCED1-674C-4050-9230-D233EFD2FD20"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.75","matchCriteriaId":"B5B287C2-FD02-4927-BC55-991FEDDD16BD"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:66.netscape.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000344","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2000-Nov/0005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97500270012529&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7207","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-109.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5542","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:66.netscape.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archives/suse-security-announce/2000-Nov/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97500270012529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1188","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the \"page\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-soft:quikstore:2.0:*:*:*:*:*:*:*","matchCriteriaId":"377E6491-A9EF-497D-A0B4-14C2A3040848"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-soft:quikstore:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E8BE6EC1-575F-4250-ACB4-A36248B1960B"},{"vulnerable":true,"criteria":"cpe:2.3:a:i-soft:quikstore:2.9.10:*:*:*:*:*:*:*","matchCriteriaId":"BAB0C3AB-8616-41DB-BE82-B755D3DC6041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0283.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0283.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1189","sourceIdentifier":"cve@mitre.org","published":"2001-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000358","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-082.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-120.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5747","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-082.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1190","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jon_atkins:imwheel:*:*:*:*:*:*:*:*","matchCriteriaId":"7629D851-38A8-42AF-B063-50D126395D28"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95984116811100&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/4941.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-016.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95984116811100&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/4941.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1191","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-209"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htdig_project:htdig:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.6","matchCriteriaId":"5F8E9346-E62E-4DDB-B8A7-2ACC66D0F2CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig_project:htdig:3.2.0:beta1:*:*:*:*:*:*","matchCriteriaId":"4377A3BB-1313-4158-B7C1-152D9EBA9B1C"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4366","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7367","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10526","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securiteam.com/exploits/htDig_reveals_web_server_configuration_paths.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2000-1192","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:btt_software:snmp_trap_watcher:1.16:*:*:*:*:*:*:*","matchCriteriaId":"96EA2D92-47F8-4498-92E4-CA090AD0489C"}]}]}],"references":[{"url":"http://www.bttsoftware.co.uk/snmptrap.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5ZP0C000KC.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/985","source":"cve@mitre.org"},{"url":"http://www.bttsoftware.co.uk/snmptrap.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5ZP0C000KC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1193","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020407-01-I","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4284","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020407-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1194","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"53A7DCAB-B79E-437C-A060-CA0DA9ABA314"}]}]}],"references":[{"url":"http://www.mdma.za.net/fk/FK9.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1227","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mdma.za.net/fk/FK9.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1195","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A3F7AE75-0E35-4D41-9949-30FDE0425CC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"}]}]}],"references":[{"url":"http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4225","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1196","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:publishingxpert:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"A441C539-5EA9-47D5-9EEE-2946A63AD1DE"}]}]}],"references":[{"url":"http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0004-exploits/ooo1.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7362","source":"cve@mitre.org"},{"url":"http://docs.iplanet.com/docs/manuals/pubx/2.5.2_Relnotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.org/0004-exploits/ooo1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1197","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imap:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1C6BF4FD-2F4C-4FB4-AB05-BBEEABA85BCB"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:15.imap-uw.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95624629924545&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1132","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:15.imap-uw.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=95624629924545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1198","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:2.53:*:*:*:*:*:*:*","matchCriteriaId":"B223F362-D00F-4D93-8328-33FF1CE331EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B1208414-D175-41E2-BCBC-9E5EDBC41FFD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95624629924545&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=95634229925906&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/1132","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=95624629924545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=95634229925906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/1132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1199","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF7D1F6F-044C-478D-991D-D70281FD7C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6EB98484-1234-4BA2-ACB0-28F4BE684D92"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95659987018649&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1139","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4364","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=95659987018649&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1200","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/44430","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/959","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/44430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1201","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:*:*:*:*:*:*","matchCriteriaId":"85711114-A402-4B53-AA91-DC66937606F1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0085.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-07/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1202","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server_ssl_module_common:1.0:*:*:*:*:*:*:*","matchCriteriaId":"20AF083E-9C2C-4535-B317-4DBBB1A88DD4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/54073","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1092","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4235","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/54073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1203","sourceIdentifier":"cve@mitre.org","published":"2001-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"640FCA2F-155E-4A05-9435-9E1446B65D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4A113B07-5CBE-4B28-9AE5-627FB3222640"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"55D71763-C009-4257-9899-51B8EAC3D096"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB826C12-8B6E-4636-A6FC-90D47CCB706B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A190AC8-E0AC-4CCF-8E5B-62F97633173A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B990B6CA-8288-47E6-8D09-5F56FC844F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C6A9DC42-4A06-4FA0-9E4A-2ABC52D1D083"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C9CC25-44BD-4000-A5BD-62B55E9855D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0F8C3E35-9D62-4E10-91AA-EFFC40A35918"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B9F784ED-9EB5-4CBA-98BE-B6C78F5B66DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=95886062521327&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/209754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3212","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-21&end=2002-01-27&mid=209116&threads=1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7012","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=95886062521327&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/209754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-21&end=2002-01-27&mid=209116&threads=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1204","sourceIdentifier":"cve@mitre.org","published":"2000-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.14:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"}]}]}],"references":[{"url":"http://www.apacheweek.com/issues/00-10-13","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/00-10-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1205","sourceIdentifier":"cve@mitre.org","published":"2000-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which does not add an explicit charset, or (3) various messages that are generated by certain Apache modules or core code.  NOTE: the printenv issue might still exist for web browsers that can render text/plain content types as HTML, such as Internet Explorer, but CVE regards this as a design limitation of those browsers, not Apache.  The printenv.pl/acuparam vector, discloser on 20070724, is one such variant."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.12:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D9B12229-3F9E-469C-8AD6-7E43FA45B876"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"691D7D29-420E-4ABC-844F-D5DD401598F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"1EC3D727-F7C1-4CA1-BBF4-9A38BD3B052F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"EB2EC909-197D-4509-9D89-374D89BBBA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"96E2083D-E7EC-49D1-A870-7F0B0AF0F614"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"F715F8CB-A473-4374-8CF1-E9D74EBA5E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00243.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0233.html","source":"cve@mitre.org"},{"url":"http://httpd.apache.org/info/css-security/apache_specific.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=118529436424127&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10938","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35597","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://httpd.apache.org/info/css-security/apache_specific.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=118529436424127&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1206","sourceIdentifier":"cve@mitre.org","published":"1999-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote attackers to retrieve arbitrary files."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.11:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"F715F8CB-A473-4374-8CF1-E9D74EBA5E8F"}]}]}],"references":[{"url":"http://www.apacheweek.com/issues/00-01-07#status","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/00-01-07#status","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1207","sourceIdentifier":"cve@mitre.org","published":"2000-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97034397026473&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97063854808796&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-059.php3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-075.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97034397026473&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97063854808796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-059.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1208","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses format strings from the checkremote() call."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función startprinting() de printjob.c en el paquete lpr lpd basado en BSD puede permitir a usuarios locales ganar privilegios mediante una llamada impropia a syslog que usa cadenas de formato de la llamada checkremote()."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96994604300675&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/137555","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5286.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-066.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1711","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96994604300675&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/137555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/5286.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1209","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager:7.0:*:*:*:*:*:*:*","matchCriteriaId":"875427C5-D74E-4299-BD02-051D3D052F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"27B2FE40-2B7A-4707-86EF-FD7C6E2FEE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:1.1:*:*:*:*:*:*:*","matchCriteriaId":"034C9386-7576-4313-815F-6C0DFB90C38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*","matchCriteriaId":"803B702A-3D4D-4438-A182-B181BEA00270"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:2.1:*:*:*:*:*:*:*","matchCriteriaId":"87261CA0-1226-46EA-9725-23DFBB443067"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:2.1b:*:*:*:*:*:*:*","matchCriteriaId":"71C976B5-5B6C-40DC-8C9E-10283B2BCA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:2.1c:*:*:*:*:*:*:*","matchCriteriaId":"36FEFBCD-D125-49B9-804D-6F013E7C5937"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4C4C2153-508E-4A2A-8EFC-A2BA37FF9DBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msde:2000:*:*:*:*:*:*:*","matchCriteriaId":"3FF06B44-FC10-49CD-954E-9C4058731A2A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=96333895000350&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96593218804850&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96644570412692&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273639","source":"cve@mitre.org"},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/1459.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/635463","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3570","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4797","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=96333895000350&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96593218804850&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=96644570412692&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200008/0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ313418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq321081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/1459.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/635463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.microsoft.com/security/security_bulletins/ms02020_sql.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1210","sourceIdentifier":"cve@mitre.org","published":"2002-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"7D2BC87B-7CF4-4BE2-A541-1AEE1C784854"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=95371672300045&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/4205.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=95371672300045&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/4205.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1211","sourceIdentifier":"cve@mitre.org","published":"2000-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0a1:*:*:*:*:*:*:*","matchCriteriaId":"6D4E13A0-7384-49E3-A848-8E864C340F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"0EA5CE15-530A-400D-9FDF-7044CD8C6DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"B7DC30CD-684E-4C53-833E-6EF2C8D1A3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"DABDC050-BF8B-4F8C-9FCD-4B0D86E46D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"C91E72CC-8AEA-49E5-BB7D-3C16E2E30A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1b1:*:*:*:*:*:*:*","matchCriteriaId":"98EBD292-5FC6-4463-B085-A34D1DFDB0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"15B80335-5F59-4530-A241-437367369BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53427D40-495B-4F37-95A5-6D069186CBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1DB2FC39-A95D-414E-A67E-66AF79A12CEB"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/5824.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6282","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-125.html","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/5824.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-083.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2000-12-08/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1212","sourceIdentifier":"cve@mitre.org","published":"2000-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0a1:*:*:*:*:*:*:*","matchCriteriaId":"6D4E13A0-7384-49E3-A848-8E864C340F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b1:*:*:*:*:*:*:*","matchCriteriaId":"0EA5CE15-530A-400D-9FDF-7044CD8C6DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"B7DC30CD-684E-4C53-833E-6EF2C8D1A3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"DABDC050-BF8B-4F8C-9FCD-4B0D86E46D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0b4:*:*:*:*:*:*:*","matchCriteriaId":"C91E72CC-8AEA-49E5-BB7D-3C16E2E30A0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1b1:*:*:*:*:*:*:*","matchCriteriaId":"98EBD292-5FC6-4463-B085-A34D1DFDB0C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"15B80335-5F59-4530-A241-437367369BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53427D40-495B-4F37-95A5-6D069186CBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1DB2FC39-A95D-414E-A67E-66AF79A12CEB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-007","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6283","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-135.html","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alert","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5778","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2000:086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2000-12-18/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1213","sourceIdentifier":"cve@mitre.org","published":"2000-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:iputils:iputils:*:*:*:*:*:*:*:*","versionEndIncluding":"2000-10-10","matchCriteriaId":"AD894839-1AD2-4707-B171-2CE7076D6446"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97249980727834&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-087.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97249980727834&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1214","sourceIdentifier":"cve@mitre.org","published":"2000-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:iputils:iputils:*:*:*:*:*:*:*:*","versionEndIncluding":"2000-10-10","matchCriteriaId":"AD894839-1AD2-4707-B171-2CE7076D6446"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97208562830613&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97249980727834&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5431.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-087.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1813","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97208562830613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97249980727834&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/5431.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2000-087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/1813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1215","sourceIdentifier":"cve@mitre.org","published":"2001-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A80A1E8B-43C8-449F-9B16-01F30D23E3D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100094373621813&w=2","source":"cve@mitre.org"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/984555","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10685","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100094373621813&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/5552251934afaa9585256c0000737a7f?OpenDocument&Highlight=0%2CAWHN4A8QWM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/984555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1216","sourceIdentifier":"cve@mitre.org","published":"2000-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"92B77367-8BF2-4E68-A7F1-D0780E102CCA"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/433499","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7929","source":"cve@mitre.org","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/433499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1217","sourceIdentifier":"cve@mitre.org","published":"2000-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account are locally cached, allows local users to bypass account lockout policies and make an unlimited number of login attempts, aka the \"Domain Account Lockout\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/818496","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1973","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5585","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/818496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/1973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1218","sourceIdentifier":"cve@mitre.org","published":"2000-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query, which allows remote attackers to poison the DNS cache."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*","matchCriteriaId":"40FC681A-7B85-4495-8DCC-C459FE7E2F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:-:*:*:*:*:*:*:*","matchCriteriaId":"A2354216-8103-49F9-A95C-7DE4F738BBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/458659","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4280","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/458659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/4280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2000-1219","sourceIdentifier":"cve@mitre.org","published":"2000-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:g\\+\\+:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3","matchCriteriaId":"3F8F6387-72F3-4659-B298-4B1752213D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3","matchCriteriaId":"0914E3FE-A632-4E8B-B6E4-71CC6DBD07D3"}]}]}],"references":[{"url":"http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/540517","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://gcc.gnu.org/ml/gcc-bugs/2002-05/msg00198.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/540517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2000-1220","sourceIdentifier":"cve@mitre.org","published":"2000-01-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute with arbitrary command line arguments, as demonstrated using the -C option to specify a configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9092D88-585D-4A0C-B181-E8D93563C74B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2000/Jan/0116.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/lpd_advisory.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000109","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/39001","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.l0pht.com/advisories/lpd_advisory","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/927","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3841","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/lists/bugtraq/2000/Jan/0116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2000/lpd_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/39001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.l0pht.com/advisories/lpd_advisory","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1221","sourceIdentifier":"cve@mitre.org","published":"2000-01-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by modifying the DNS for the attacking IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D8211154-6685-4FF0-B3ED-43A5E5763A10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"F299301C-6BFC-436C-9CFD-2E291D3702AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:i386:*:*:*:*:*","matchCriteriaId":"363AB7DB-A8BA-4D58-97C4-1DF1F0F43E07"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2000-002.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2000/lpd_advisory.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20000109","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/30308","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.l0pht.com/advisories/lpd_advisory","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/927","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3840","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021104-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://rhn.redhat.com/errata/RHSA-2000-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2000/lpd_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20000109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/30308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.l0pht.com/advisories/lpd_advisory","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1222","sourceIdentifier":"cve@mitre.org","published":"2000-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.1.12","matchCriteriaId":"5221C66C-4BAC-475B-9D1F-2BD11030783C"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/17566","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6432","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/17566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1223","sourceIdentifier":"cve@mitre.org","published":"2000-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-soft:quikstore:*:*:*:*:*:*:*:*","matchCriteriaId":"97464CB1-6822-4CAF-A155-9CC35A19594E"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/671444","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/671444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2000-1224","sourceIdentifier":"cve@mitre.org","published":"2000-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) \"..\", (2) \"%2e..\", (3) \"%81\", (4) \"%82\", and others."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"22531253-3486-486A-905E-57067B2D18AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B2019C22-B81F-434F-9D41-77C85EF26C91"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97502269408279&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/146770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1986","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5568","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97502269408279&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/146770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1225","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5_b:*:*:*:*:*:*:*","matchCriteriaId":"7F754413-8327-4DB7-BEAC-BA6691813372"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2000-1226","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EB5D24B-44B7-4BA1-B988-BBB3342F0C3A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1227","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/63322","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/63322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1228","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2271","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2000-1229","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via \"..\" (dot dot) sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1230","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to \"boogieman\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/2274","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/2274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1231","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1232","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1233","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1234","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a \"spam proxy\" by setting the Mod and ForumName parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"740F974F-D679-472C-966A-3E4C334E3C0A"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"cve@mitre.org"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2272","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://hispahack.ccc.de/mi020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2000-1235","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.7","matchCriteriaId":"7487A9CD-A2A1-4AC7-B67F-131923DE2A0F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/155881","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5818.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2150","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/155881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/5818.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2000-1236","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.7","matchCriteriaId":"7487A9CD-A2A1-4AC7-B67F-131923DE2A0F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/155881","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5817.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2150","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/155881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/5817.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2000-1237","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgate:*:*:*:*:*:*:*:*","matchCriteriaId":"98DC976A-D0A2-419B-B83B-762A3ADE22BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/4793.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/4793.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1238","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product releases:\r\nBEA Systems Weblogic Server 5.1 SP 7\r\nBEA Systems WebLogic Express 5.1 SP 7","cveTags":[],"descriptions":[{"lang":"en","value":"BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD5D4AD-0BA3-42F7-852F-524488D74A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*","matchCriteriaId":"A8F69E7A-8BBB-4D20-AEE9-F37155AD5C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2B393A66-08A6-4EBA-B01E-BB6418423F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:express:*:*:*:*:*","matchCriteriaId":"0FAB4F19-EFE0-4860-B9E9-E3938A36AE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"99D0A3A8-1444-4DA4-AEF3-08578482574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:express:*:*:*:*:*","matchCriteriaId":"8B0B183B-95A3-463D-B76B-50640F554013"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"523836A4-0110-4CD3-A81E-988A02AEA68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:express:*:*:*:*:*","matchCriteriaId":"36A0EFDA-409E-44F0-9F8B-167A72D2361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"A705EB67-3961-445F-8023-F82C7618BE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:express:*:*:*:*:*","matchCriteriaId":"51A8AB95-FB23-4A7A-A6F5-EF442EAABD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"BD698DD8-5491-4A73-A527-8C9228992A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*","matchCriteriaId":"5F00947F-1804-41D5-8F2B-7E48C77B1306"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*","matchCriteriaId":"86C4679F-F13F-4A97-AE42-BC54BD0F149C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:express:*:*:*:*:*","matchCriteriaId":"114E5E3E-84B2-4DD3-98FC-2ABFFA41BAD4"}]}]}],"references":[{"url":"ftp://ftpna.bea.com/pub/releases/patches/SecurityBEA00-0600.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5089","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5588","source":"cve@mitre.org"},{"url":"ftp://ftpna.bea.com/pub/releases/patches/SecurityBEA00-0600.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1239","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A7E1F60-3BCC-4091-85DA-2FEE32C254DC"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21082896","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/17085","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3927","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21082896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/17085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1240","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path.  NOTE: the provenance of this information is unknown; the details are obtained from third party information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anyportal_php:anyportal_php:*:*:*:*:*:*:*:*","versionEndIncluding":"2000-04-18","matchCriteriaId":"4D3D44E1-63F2-4ED3-8B2C-0A94A8C10AD4"}]}]}],"references":[{"url":"http://www.osvdb.org/23983","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25441","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/23983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1241","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a \"grave security fault.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sips:sips:*:*:*:*:*:*:*:*","matchCriteriaId":"B030C0BB-26DD-4EA3-9444-B3FB271910A0"}]}]}],"references":[{"url":"http://sourceforge.net/forum/forum.php?forum_id=25971","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=25971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1242","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apc:powerchute:*:*:*:*:*:*:*:*","matchCriteriaId":"3536F866-E6B3-4F22-991B-36D30C54595E"}]}]}],"references":[{"url":"http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/30768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/30768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2000-1243","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dansie:shopping_cart:3.04:*:*:*:*:*:*:*","matchCriteriaId":"95132EF3-AC19-4B7E-B0BF-47DDEDA6330A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0066.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0071.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0086.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/470457/100/0/threaded","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-04/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/470457/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2000-1244","sourceIdentifier":"cve@mitre.org","published":"2000-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the \"From\" field, which allows remote attackers to bypass virus protection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculateit_agent_for_exchange:*:*:*:*:*:*:*:*","matchCriteriaId":"1ACD606A-0375-401D-870E-A7FA3D0D0860"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0158.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-0001","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EC3CBB92-6A11-4B5B-A910-B0287AB12846"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0257.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6183","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0257.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0002","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_script_host:5.1:*:*:*:*:*:*:*","matchCriteriaId":"D774C5CD-AD4A-42F9-B624-968A0C1DDE2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_script_host:5.5:*:*:*:*:*:*:*","matchCriteriaId":"CF47D9C0-6521-427A-A1EB-3BFA2BD37733"}]}]}],"references":[{"url":"http://www.guninski.com/chmtempmain.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7823","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2456","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5567","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920","source":"cve@mitre.org"},{"url":"http://www.guninski.com/chmtempmain.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0003","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the \"Web Client NTLM Authentication\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2199","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5920","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0004","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending \"%3F+.htr\" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the \"File Fragment Reading via .HTR\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97897954625305&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2313","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5903","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97897954625305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0005","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*","matchCriteriaId":"3E392539-ABF6-4B5C-AEC3-C54B51E0DB70"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a012301-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-002","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5996","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a012301-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5996","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0006","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to \"No Access\" and disable Winsock network connectivity to cause a denial of service, aka the \"Winsock Mutex\" vulnerability."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98075221915234&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6006","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=98075221915234&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0007","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netscreen:screen_os:1.73r:*:*:*:*:*:*:*","matchCriteriaId":"D49AEABB-6F58-476F-B821-C1483431F571"},{"vulnerable":true,"criteria":"cpe:2.3:o:netscreen:screen_os:2.1r6:*:*:*:*:*:*:*","matchCriteriaId":"8619A140-7224-45E5-B3DD-CD4FE17EF6C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netscreen:screen_os:2.5r1:*:*:*:*:*:*:*","matchCriteriaId":"2426A7E0-1A22-452B-9620-5ADAEC7BEA25"},{"vulnerable":true,"criteria":"cpe:2.3:o:netscreen:screen_os:2.10r3:*:*:*:*:*:*:*","matchCriteriaId":"F125EE39-6EC4-477A-8F77-79DE2C4EB9E6"}]}]}],"references":[{"url":"http://www.osvdb.org/1707","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/155149","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2176","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5908","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/155149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0008","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E61E2866-38F1-45C0-8B5D-A07CA430BDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2666FC-B03C-47A5-BA04-A08DC28C7C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5FE98699-E21E-4D1C-BD43-F7F62D9AE7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.3","matchCriteriaId":"223711C1-58BB-4755-8848-170CB3FF81E8"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-01.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2192","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5911","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0009","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2315A7CA-A4B9-4ED7-9AE6-3EDD8E71CDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A931FC25-3DB6-4FFA-8BA0-AD42BF1D0081"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A1ACF560-9785-4DAB-8116-48AD32B9FAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_server:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"043CC5CD-9D1B-4A79-811D-BC6BD5594CFC"}]}]}],"references":[{"url":"http://www.osvdb.org/1703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/154537","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/155124","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2173","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5899","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/154537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/155124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0010","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*","matchCriteriaId":"BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"BEED8045-CEA2-4EBE-A864-22D1B6103F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*","matchCriteriaId":"64C3DB3B-4C8E-4647-A61B-ECED4EB63439"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*","matchCriteriaId":"B3255FB4-D84E-487B-B53A-4EA01D6613A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p7:*:*:*:*:*:*","matchCriteriaId":"A2D4EDEB-E366-4F40-B896-7AF14540A14C"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-026","source":"cve@mitre.org"},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2302","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0011","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2307","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0012","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*","matchCriteriaId":"BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"BEED8045-CEA2-4EBE-A864-22D1B6103F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*","matchCriteriaId":"64C3DB3B-4C8E-4647-A61B-ECED4EB63439"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*","matchCriteriaId":"B3255FB4-D84E-487B-B53A-4EA01D6613A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p7:*:*:*:*:*:*","matchCriteriaId":"A2D4EDEB-E366-4F40-B896-7AF14540A14C"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-026","source":"cve@mitre.org"},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2321","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0013","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2309","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/047.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0014","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the \"Invalid RDP Data\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2326","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0015","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a \"WM_COPYDATA\" message to an invisible window that is running with the privileges of the WINLOGON process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a020501-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2341","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-007","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6062","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a020501-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0016","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"2DA4F4D4-444B-4CD8-A6E6-159303786DF8"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2348","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6076","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0017","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the \"Malformed PPTP Packet Stream\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"2DA4F4D4-444B-4CD8-A6E6-159303786DF8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2368","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-009","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0018","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/148411","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-049.shtml","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6136","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/148411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0019","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the \"show script,\" \"clear script,\" \"show archive,\" \"clear archive,\" \"show log,\" or \"clear log\" commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:arrowpoint:*:*:*:*:*:*:*:*","matchCriteriaId":"3778D7E6-2BF2-48CB-98FA-6A0081A18628"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"F0B6E5B4-B2BF-475E-971B-4F5D2C36847F"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a013101-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2001/a013101-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0020","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:arrowpoint:*:*:*:*:*:*:*:*","matchCriteriaId":"3778D7E6-2BF2-48CB-98FA-6A0081A18628"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"F0B6E5B4-B2BF-475E-971B-4F5D2C36847F"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a013101-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1757","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2331","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6031","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a013101-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0021","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D693081C-444A-433F-A7FA-C735C04A6BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEC8C26-ADB8-447B-8804-6BED1F0B5BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"24218B6F-648D-4DA3-A6CC-68BF6EE76B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"DECA80A1-7596-4F8C-8D2F-BD9C8F71BF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"83E25D1B-0304-41B5-8108-09C6BBB40076"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"7EA5782F-15E9-4958-A72A-EAC197BCFE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"61A7C198-91F3-44AF-908C-F8BBCFAE173D"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"5B34F7C0-7F95-4F9F-9CAB-6915C5CB60C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"67B952BA-C01F-4A7C-B7A7-84595FE38377"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"49824940-8621-4B21-B3D4-447D7A9C50D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"C4D009DF-DFF7-452A-A512-80F64046FC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"EA444B4D-3234-4DF5-ABCC-C604B7FCE347"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9272E38-8147-42FE-909A-77CF9A4F896C"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"827A30D3-ECDA-48BA-A6D8-33A88B1B4513"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"B8601A5B-2374-48CC-98F7-C4628D917E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"799E8144-CA29-4C3A-BFDE-6845DC9DD88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.25:*:*:*:*:*:*:*","matchCriteriaId":"C5F204AB-B70F-4BD4-8175-B8EFADED6596"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0057.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.endymion.com/products/mailman/history.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2063","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5649","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.endymion.com/products/mailman/history.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0022","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:simplestguest.cgi:2.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5876FF-1FA9-44CD-8459-77B50621A40D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5743","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0023","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:everythingform.cgi:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2BC91451-B220-4C16-B6D4-5E3EA7652CFD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2101","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5736","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0024","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:simplestmail.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1E5B57D3-FDEA-4614-A98D-6122A4D781B2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0136.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2102","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5739","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0136.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0025","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:ad.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4A6E8C0D-736A-4A39-A2FF-CA62802BD98B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0143.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2103","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5741","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0026","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D4987DF5-2103-4DE5-B9E9-EB5C4F45FC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:2.1:*:*:*:*:*:*:*","matchCriteriaId":"AB466A5D-5780-404E-A0D8-2067AAC7FB0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:2.2:*:*:*:*:*:*:*","matchCriteriaId":"23FD6CEB-50A7-4393-AD93-969ED061056A"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:2.3:*:*:*:*:*:*:*","matchCriteriaId":"ECC9D679-A382-4974-A108-01B0AA10E30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:2.4:*:*:*:*:*:*:*","matchCriteriaId":"14063113-5A73-4BC5-8237-8AF568C3B247"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0134.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000357","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-084.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-130.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5727","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0134.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-084.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0027","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the \"user\" command to change accounts, which allows authenticated attackers to gain privileges of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:*:*:*:*:*:*:*:*","matchCriteriaId":"1820DABA-99C8-4DE4-BAEB-B6243B9BC417"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5737","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0028","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of \" (quotation) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igor_khasilev:oops_proxy_server:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"54A3BBF8-DC08-42C7-B6A0-F2605EF3972E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2099","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5725","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0029","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igor_khasilev:oops_proxy_server:1.4.22:*:*:*:*:*:*:*","matchCriteriaId":"54A3BBF8-DC08-42C7-B6A0-F2605EF3972E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2099","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://zipper.paco.net/~igor/oops/ChangeLog","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6122","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://zipper.paco.net/~igor/oops/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0030","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartstuff:foolproof_security:3.9:*:*:*:*:*:*:*","matchCriteriaId":"FE9228B7-CB6D-4EC7-8BC2-DCFA0C6C7D71"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2089","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5758","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0031","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadvision:one-to-one_enterprise_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6E6C4359-53BA-4D2C-88DF-C1AFBEFB86C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0074.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5661","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0032","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_rescorla:ssldump:0.9b1:*:*:*:*:*:*:*","matchCriteriaId":"80148587-A3FB-4D0F-AB6D-F345D2067AF0"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/149917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2096","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5717","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/149917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0033","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"A04BDD12-4421-49FA-9322-25F00B0402F3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5738","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0034","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.0.3","matchCriteriaId":"F498513C-140F-4F50-B0F1-6843C4EFF7DF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5733","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0035","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"A04BDD12-4421-49FA-9322-25F00B0402F3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0511.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5734","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0511.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0036","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"A04BDD12-4421-49FA-9322-25F00B0402F3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-025.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5754","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0037","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keware_technologies:homeseer:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B9FD359C-B79E-43D8-AED5-BE0DF8F277D2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0082.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.keware.com/hsbetachanges.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2085","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5663","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.keware.com/hsbetachanges.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0038","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.0x:*:*:*:*:*:*:*","matchCriteriaId":"ABEA1DB4-AD42-495E-A71C-4D42BEC43448"},{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.1x:*:*:*:*:*:*:*","matchCriteriaId":"AD186EA8-2156-4D84-8EA5-8D7669EE1B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.2x:*:*:*:*:*:*:*","matchCriteriaId":"CE72FB55-7DA6-470C-A3CF-450061102D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:metaproducts:offline_explorer:1.3x:*:*:*:*:*:*:*","matchCriteriaId":"45D7682F-8F76-4805-B0FF-9EE26317382C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0078.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2084","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5728","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0039","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7A965D10-F783-423B-BD70-AB11725D0172"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0071.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2083","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5674","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0040","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apc:apcupsd:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"1D6E7E99-187C-4CAF-A5B7-BD10C39AD878"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0066.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-077.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2070","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5654","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/MDKSA-2000-077.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0041","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"851920E3-2DF8-4C74-84E0-E3950D2EA672"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"BFAF3474-E030-4AF5-8BE0-966191D15E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"C8EF024C-80B1-4332-ADDC-992C5F933562"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"2DFA6741-74AF-42E0-9A8A-D775BA9EA519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"6323C88E-C966-42FC-957F-EC244744A5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"C33774F9-D0E0-4BB7-AE78-9B746C5FA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"DD0EFEE7-3EA4-4639-8B53-F7192E7C18E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"1A980A98-77C0-44F6-98C6-7CC4FEEC799C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"9229B19E-B65E-4C23-8F35-7019050E24B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"8D8B8722-42A0-4CA6-8946-0D97BBABB30A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"587031FB-E0AF-4BD0-8809-8690D3814F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"CE163E0F-3F54-45B2-A101-6CA6FA548D2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"847EC2AD-F05D-47BC-841C-21F5ECF7E79B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9D31AB89-4194-4CE5-AD93-3058E77E7E63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"1EC01832-ADF1-4A74-95FE-0B3DDE3AAFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"28CB60F6-622C-41D7-AFA4-A2DCE4D02549"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"2055E432-9939-48F7-A4BE-1888CC7241C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E8F15DB3-6BC3-4F15-A164-3D1F2FBA718D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"63E4BD89-21FE-492B-85C3-9BEBDB01F8CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"CE27E478-63BF-4475-B89A-91CF2D9A6C49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"5754B0FA-30C6-4E12-9D6C-92F38CD3A9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C21CF907-707A-43CA-984C-310062705C63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C0AC3C74-262E-4A11-BCE8-58DE522E23AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(2\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"21A2D344-D0AD-4E0A-A5F3-C4323813FDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(3\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"46DC4972-7FA1-4320-83E6-607D139121EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(4\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"339DDB07-6C16-43B9-A880-77E2351B1C05"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"EBCB451E-8945-408C-94F5-36C43AA05C1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"A7D8D9AA-154C-46B2-96B8-AADA610056E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(6\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"E7F30211-BB7A-41D3-946F-655C028A3772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"01AE0EAB-F266-437A-B615-69536AF50B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EE529454-F5E6-4417-A5D7-B1A9BCD2B5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"85D0F005-80B3-41A2-8B7C-EA256C1634DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"FD50773D-8E63-45C7-A52D-D7B13F65327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B70FD634-E2D7-4E42-B140-44C5CB9294E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"364CCF12-AF9E-4661-9ECB-9AE0C00813D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"282793F1-296C-423A-9A2D-301DC3340664"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"020B669B-DE6B-4828-BB44-D99EE576B79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"4D406F1D-C33D-4BC2-BBA8-740A9E114523"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/catalyst-memleak-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/801","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2072","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5656","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/catalyst-memleak-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0042","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing \"%5c\" (encoded backslash) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/149210","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2060","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5659","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/149210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0043","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"31E5E600-6022-40FE-9464-D2363DF6B61C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0053.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=17604","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/1682","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2069","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5650","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=17604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/1682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0044","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lexmark:markvision:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D46387FB-D1FD-4DA8-A321-584C188A91BB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0064.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2075","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5651","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0045","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the \"Registry Permissions\" vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:terminal_server:*:*:*:*:*:*:*","matchCriteriaId":"22B1D814-7954-4E8B-B20C-410B53D9202A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2064","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5671","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A500","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0046","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the \"Registry Permissions\" vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2066","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5672","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A139","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0047","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the \"Registry Permissions\" vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:terminal_server:*:*:*:*:*:*:*","matchCriteriaId":"22B1D814-7954-4E8B-B20C-410B53D9202A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2065","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5673","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A140","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0048","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Configure Your Server\" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the \"Directory Service Restore Mode Password\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2133","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-099","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0049","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.1","matchCriteriaId":"F2B5CA87-E263-4A67-8E0E-316B72BC3A24"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0079.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2082","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5665","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0050","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:colten_edwards:bitchx:1.0c17:*:*:*:*:*:*:*","matchCriteriaId":"214803C6-63E1-4A17-B9EC-093F4C1475CE"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:78.bitchx.v1.1.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0081.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0086.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000364","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-079.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-126.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2087","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5701","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:78.bitchx.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-079.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0051","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:6.1:*:linux:*:*:*:*:*","matchCriteriaId":"9A8C84A1-718D-4F3A-A426-1FB51B46E132"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:6.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"CE2C1506-0AF0-40A6-8922-782AE4EAF5C2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/149222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2068","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5662","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/149222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0052","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:6.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"CE2C1506-0AF0-40A6-8922-782AE4EAF5C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"13FBD257-3F9A-4D23-96A9-ADC856A4FFB3"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/149207","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2067","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/149207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0053","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_madore:ftpd-bsd:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"69797605-EFF0-4CFA-8B45-6A93ABE4304A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/advisories/ftpd_replydirname.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2124","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5776","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/advisories/ftpd_replydirname.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0054","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as \"/..%20.\" to a CD command, a variant of a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0CB703F7-4806-4E3F-850E-ACC127892899"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0043.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97604119024280&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/464","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2052","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5639","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97604119024280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0055","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:broadband_operating_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8","matchCriteriaId":"95CD2EBD-9F55-4542-8D35-2D1CBAF22CF1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_6xx_routers:*:*:*:*:*:*:*:*","matchCriteriaId":"26813871-8977-459B-A885-DA7836FD8DE5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5627","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0056","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:broadband_operating_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"27EEDDD5-1EA4-47B0-A094-3098993937DB"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5628","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0057","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:broadband_operating_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"27EEDDD5-1EA4-47B0-A094-3098993937DB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_6xx_routers:*:*:*:*:*:*:*:*","matchCriteriaId":"26813871-8977-459B-A885-DA7836FD8DE5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5629","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0058","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a space character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:broadband_operating_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"27EEDDD5-1EA4-47B0-A094-3098993937DB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cisco_6xx_routers:*:*:*:*:*:*:*:*","matchCriteriaId":"26813871-8977-459B-A885-DA7836FD8DE5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/460","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5626","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0059","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97720205217707&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2127","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5789","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97720205217707&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0060","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.3:*:*:*:*:*:*:*","matchCriteriaId":"2E4A0103-713D-4E56-B32F-EB1649F26EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"7D009335-E83C-4B35-ADB0-CBD6B82C0EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.7:*:*:*:*:*:*:*","matchCriteriaId":"185B6AF8-18E7-4E6A-A7B9-60DFB17F33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:*:*:*:*:*:*:*","matchCriteriaId":"400FE849-D547-44DE-B06F-5B68E5B20E07"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0337.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000363","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-009","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-129.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/151719","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2128","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5807","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0337.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/151719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0061","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's address space."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6106","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0062","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which causes the kernel to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1698","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6082","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6107","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0063","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6108","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0064","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a \"\\r\\n\" string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"96A1816E-0E48-4879-86A4-22E7FCCAC598"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0315.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2134","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0315.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0065","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE CHOWN command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max-wilhelm_bruker:bftpd:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"B508E121-2F5C-4E67-9D07-D70680A9DE13"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0189.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5775","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0189.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0066","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:1.4:*:*:*:*:*:*:*","matchCriteriaId":"353F7AAC-6605-4A00-999F-7FD923BB68F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C5D9C51E-B9F3-4022-A3CF-F66B04099C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:1.6:*:*:*:*:*:*:*","matchCriteriaId":"94E079EA-D8A8-44EF-BD88-1CE0525676D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E521E9F0-2391-4DCD-9B3B-CFC3C6CC0441"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB6C6D8-087A-490B-AC34-75C248DE2FB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kevin_lindsay:secure_locate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1F91A3-26A2-4D62-B9A4-42AB2D23BAD4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0356.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000369","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001217a","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-085.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-128.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2004","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2001-February/000144.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5594","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-11/0356.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001217a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-085.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2001-February/000144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0067","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup information if their umasks are not securely set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:judd_montgomery:jpilot:*:*:*:*:*:*:*:*","matchCriteriaId":"AA0230FD-597A-4C98-857A-C96FD6B9CCE4"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&list=1&","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5762","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2000/MDKSA-2000-081.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/templates/archive.pike?mid=150957&end=2001-02-03&fromthread=1&start=2001-01-28&threads=0&list=1&","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0068","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_runtime_for_java:2.2.3:*:java:*:*:*:*:*","matchCriteriaId":"FC779484-CD37-485F-93B5-18890B641572"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0241.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5784","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0241.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0069","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"}]}]}],"references":[{"url":"http://www.debian.org/security/2000/20001225","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2151","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5809","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0070","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:upland_solutions:1st_up_mail_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D87ACEB8-1BDF-4674-B2B4-3605D271EB00"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0143.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2152","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5808","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0071","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E054978B-8466-4D12-B7DC-7E72CC57F0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F38F964B-C5D1-4177-BD31-7AB4083CC431"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DF7811A-B254-4829-AED2-C70BD5C82592"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"72ED862B-6278-41ED-9619-115E6552AFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"1869E888-E83C-4A62-AA84-F2C9F2AF12FB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001225b","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1699","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-131.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/152197","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2141","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5802","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001225b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-131.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/152197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0072","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E054978B-8466-4D12-B7DC-7E72CC57F0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F38F964B-C5D1-4177-BD31-7AB4083CC431"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DF7811A-B254-4829-AED2-C70BD5C82592"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"72ED862B-6278-41ED-9619-115E6552AFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.0.3b:*:*:*:*:*:*:*","matchCriteriaId":"1869E888-E83C-4A62-AA84-F2C9F2AF12FB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001225b","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1702","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-131.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/152197","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5803","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001225b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-131.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/152197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0073","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux, which may allow attackers to modify critical data in memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:nsa:security-enhanced_linux:slinux_2000-12-18:*:*:*:*:*:*:*","matchCriteriaId":"09C95F36-2701-4118-A415-1A1608CFA609"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/153188","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/153188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0074","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the board parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:technote_inc:technote:2000:*:*:*:*:*:*:*","matchCriteriaId":"3007AE59-67C9-4DB9-B0EA-E25AD0496E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:technote_inc:technote:2001:*:*:*:*:*:*:*","matchCriteriaId":"EA7B45B0-792C-45EE-AEAC-0B964EA10FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:technote_inc:technote:pro:*:*:*:*:*:*:*","matchCriteriaId":"25DB8F4E-FAAC-4EF6-A1C1-4D26774A6FA2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/153007","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2155","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/153007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0075","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:technote_inc:technote:2000:*:*:*:*:*:*:*","matchCriteriaId":"3007AE59-67C9-4DB9-B0EA-E25AD0496E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:technote_inc:technote:2001:*:*:*:*:*:*:*","matchCriteriaId":"EA7B45B0-792C-45EE-AEAC-0B964EA10FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:technote_inc:technote:pro:*:*:*:*:*:*:*","matchCriteriaId":"25DB8F4E-FAAC-4EF6-A1C1-4D26774A6FA2"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/153212","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2156","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/153212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0076","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:2.1.7b:*:*:*:*:*:*:*","matchCriteriaId":"85978DF4-7CAD-41B7-BB26-ED7D3A4143E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5819","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0077","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7DA2DE2C-CBE9-4D76-B2DF-070EB29EB7A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0180.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6123","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0078","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:cluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7DA2DE2C-CBE9-4D76-B2DF-070EB29EB7A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0180.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6437","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6125","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0079","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:support_tools_manager:a.22.00:*:*:*:*:*:*:*","matchCriteriaId":"A07B7E18-AD50-49D4-81AC-3BFF06B30818"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0174.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0080","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol mismatch error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4000:*:*:*:*:*:*:*:*","matchCriteriaId":"105544F7-F57E-4B22-921C-E5EEA82B5CC4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"38E8BD58-5E55-4F07-B115-3BE78D7B2AD6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000:*:*:*:*:*:*:*:*","matchCriteriaId":"4B75201F-F007-4612-A3F0-ABC75C730F94"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/catalyst-ssh-protocolmismatch-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5760","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/catalyst-ssh-protocolmismatch-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0081","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:ncipher:*:*:*:*:*:*:*:*","matchCriteriaId":"BB30E6FF-FBB6-490D-BD73-C19A60D68246"}]}]}],"references":[{"url":"http://active.ncipher.com/updates/advisory.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4849","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5999","source":"cve@mitre.org"},{"url":"http://active.ncipher.com/updates/advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0082","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0271.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0083","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the \"Severed Windows Media Server Connection\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D073958F-0428-4E15-97B0-8EDAD0E80632"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3DDE73-E623-45A3-AA49-17BAFB89A2CC"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ281256","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-097","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5785","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ281256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0084","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"A97AE50A-9A73-4F75-A461-F0347AAEFB44"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0498.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0027.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gtk.org/setuid.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/2165","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0498.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gtk.org/setuid.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/2165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0085","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0083.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2170","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5793","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0086","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:subscribe_me_lite:1.0:*:*:*:*:*:*:*","matchCriteriaId":"66DC9406-5DE9-458C-BBF1-D30F2C1F7684"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgi_script_center:subscribe_me_lite:2.0:*:*:*:*:*:*:*","matchCriteriaId":"40571E79-263F-41C4-A5E8-AB5EDC66A281"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0160.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2108","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5735","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0160.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0087","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_glickman:itetris:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7320202A-C3DF-4CC3-9CEF-DA1956F0BE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_glickman:itetris:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"0247BEDD-289E-4A78-9464-67CD94FD4C68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0295.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2139","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5795","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0088","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jason_hines:phpweblog:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"A1688D63-EC3D-42EF-B2C7-3CD18D54CA2D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0025.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2047","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5625","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0089","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the \"File Upload via Form\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5615","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0090","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to execute arbitrary ActiveX controls, aka the \"Browser Print Template\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2046","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5614","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0091","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the \"Scriptlet Rendering\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.osvdb.org/7820","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6085","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0092","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the \"Frame Domain Verification\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.osvdb.org/7817","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6086","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0093","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"973B0545-D595-4A82-A147-0AB28FE32E13"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-017.txt.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-017.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0094","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications such as telnetd and login, allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"973B0545-D595-4A82-A147-0AB28FE32E13"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:25.kerberosIV.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-017.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5734","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:25.kerberosIV.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-017.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0095","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0313.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5788","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0096","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the \"Malformed Web Form Submission\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-100","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5823","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0097","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infinite:infinite_interchange:3.61:*:*:*:*:*:*:*","matchCriteriaId":"6A162633-04F9-445D-8AB3-89B85D9011F6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/152403","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2140","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5798","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/152403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0098","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a \"..\"  string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:*:sp2:*:*:*:*:*:*","versionEndIncluding":"4.5.2","matchCriteriaId":"E27911BD-A0AE-46F4-BF7D-842E466715FB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0331.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/2138","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5782","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0331.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/2138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0099","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_stanback:bsguest.cgi:*:*:*:*:*:*:*:*","matchCriteriaId":"65C00C06-CBB4-468D-BF3B-9FD9770B4542"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.stanback.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5796","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.stanback.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0100","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_stanback:bslist.cgi:*:*:*:*:*:*:*:*","matchCriteriaId":"B74ACE91-BFFC-4C68-B9D5-97D1F564FF82"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.stanback.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5797","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.stanback.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0101","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.0","matchCriteriaId":"BD813A12-E14E-46EB-9E25-C7B858EFBB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHBA-2000-106.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-December/000027.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7455","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHBA-2000-106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2000-December/000027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0102","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"\"Multiple Users\" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"4C56F007-5F8E-4BDD-A803-C907BCC0AF55"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5830","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0103","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coffeecup_software:coffeecup_direct_ftp:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0B97F08E-DF60-4F20-B770-CA5B3673DF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:coffeecup_software:coffeecup_free_ftp:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3003A2B3-31B0-4492-BB29-D1A489583561"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2107","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0104","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MDaemon Pro 3.5.1 and earlier allows local users to bypass the \"lock server\" security setting by pressing the Cancel button at the password prompt, then pressing the enter key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8B02DB57-1B98-43AF-B400-73019A747C5D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/151156","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5763","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/151156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0105","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the \"sys\" group."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0079.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5773","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2000-q4/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0106","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the \"swait\" state is used by a server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.04","matchCriteriaId":"9CE0A0F9-BB08-48CA-A10B-FD1EA4D7FC9B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0009.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5904","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0107","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, which causes the process to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:backup:4.5:*:*:*:*:*:*:*","matchCriteriaId":"955B3F17-3613-4850-A422-E44ED2D99783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97958921407182&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2204","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97958921407182&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0108","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97957961212852","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-020","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-136.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5940","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97957961212852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0109","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0226.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0272.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2207","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5945","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0110","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iomega:jazip:0.32.2:*:*:*:*:*:*:*","matchCriteriaId":"5E44AC9B-215D-47CE-80CE-45A1DCDAC564"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0228.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2001/dsa-017","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5942","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2001/dsa-017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0111","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sam_lantinga:splitvt:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"437BB5DB-880F-4BA0-AF30-553789E57518"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97958269320974&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-014","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2210","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5948","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97958269320974&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0112","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sam_lantinga:splitvt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.4","matchCriteriaId":"1F8001B5-864C-4B99-9BDA-5A0B3C8277E8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97958269320974&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-014","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2210","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97958269320974&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0113","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FB24FDB-BE4F-4B28-8ECE-B1494082F76C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2211","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0114","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FB24FDB-BE4F-4B28-8ECE-B1494082F76C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2211","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0115","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97934312727101&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97957435729702&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/200&type=0&nav=sec.sba","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2193","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5928","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97934312727101&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97957435729702&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/200&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0116","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-006.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2188","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5917","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-006.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0117","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"13EBB2F7-712E-4CB1-B4B4-5F0851F3D37E"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2000-70-028-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/579928","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-008.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-116.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2191","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5914","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2000-70-028-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/579928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-008.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-116.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0118","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-005.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2195","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5925","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-005.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0119","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-004.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2194","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5924","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-004.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0120","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-007.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2196","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5927","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-007.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0121","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:storagesoft:imagecast_ic3:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B23F7EF1-3D5A-481F-BBD3-35BF9B82BE88"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0071.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5901","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0122","sourceIdentifier":"cve@mitre.org","published":"2001-03-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a \"bad request\" error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.12.2:*:*:*:*:*:*:*","matchCriteriaId":"B60329EF-4E6E-4BAA-AD34-D79588BD5FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.52:*:*:*:*:*:*:*","matchCriteriaId":"22E4D825-7C9F-40DA-B2FE-128EDC1CB480"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0079.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0061.html","source":"cve@mitre.org"},{"url":"http://www-4.ibm.com/software/webservers/security.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2175","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5900","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-4.ibm.com/software/webservers/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0123","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extropia:bbs_forum.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"31EAC9BF-A3B3-4615-AE6B-FFF27E6AE82E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97905792214999&w=2","source":"cve@mitre.org"},{"url":"http://www.extropia.com/hacks/bbs_security.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3546","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2177","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5906","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97905792214999&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.extropia.com/hacks/bbs_security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0124","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97908386502156&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2179","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5913","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97908386502156&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0125","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:exmh:exmh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"B9AE88C1-653D-4CD3-AB78-038E7CB60F09"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-01/0543.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97846489313059&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97958594330100&w=2","source":"cve@mitre.org"},{"url":"http://www.beedub.com/exmh/symlink.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-022","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-015.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5829","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-01/0543.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97846489313059&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97958594330100&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.beedub.com/exmh/symlink.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-015.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0126","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97906670012796&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98027700625521&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5905","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97906670012796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98027700625521&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0127","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long DefineSound tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oliver_debon:flash:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.9","matchCriteriaId":"26F5ABC9-6663-4959-B0D1-E35895D919C0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0236.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/451096","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/451096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0128","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:linux_powertools:6.1:*:*:*:*:*:*:*","matchCriteriaId":"BAEE3A85-0A4C-4763-A141-AC27ECFDC2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:linux_powertools:6.2:*:*:*:*:*:*:*","matchCriteriaId":"A5AE3BF4-237D-4D84-9753-512A642141A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:linux_powertools:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C50F9824-A12E-488E-A735-14696E11F847"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"0C7B8C8F-0A2D-4C55-9648-DA2B583EBA44"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:06.zope.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2000/20001219","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6284","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-127.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5777","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:06.zope.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2000/20001219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-083.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5777","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0129","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyproxy:tinyproxy:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2","matchCriteriaId":"12076082-682E-4279-96F5-796F7B3C974F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinyproxy:tinyproxy:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"FD9A14C0-8F94-4153-9953-9EFF7C9C4B1E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97975486527750&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-018","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2217","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5954","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97975486527750&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0130","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_client:5.04:*:*:*:*:*:*:*","matchCriteriaId":"7C19E729-727B-4116-AB11-F506BA53E5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_client:5.05:*:*:*:*:*:*:*","matchCriteriaId":"F6B2613D-1382-4056-9D18-AE18271FE3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:5.04:*:*:*:*:*:*:*","matchCriteriaId":"19A4EE5B-F172-47D6-972D-1F68A7C8FCD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:5.05:*:*:*:*:*:*:*","matchCriteriaId":"F07D366F-F9F4-4CC1-B1F0-752197D694B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:5.06:*:*:*:*:*:*:*","matchCriteriaId":"C4481BBC-59E9-44B1-B4CC-A280C9E05E43"}]}]}],"references":[{"url":"http://service1.symantec.com/sarc/sarc.nsf/info/html/Lotus.Domino.Denial.of.Service.Malformed.HTML.Email.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6207","source":"cve@mitre.org"},{"url":"http://service1.symantec.com/sarc/sarc.nsf/info/html/Lotus.Domino.Denial.of.Service.Malformed.HTML.Email.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0131","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"9B14C68E-17AE-4C3D-8BF5-F42CBBE83B44"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-021","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/2182","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5926","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/2182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0132","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"3781FF05-D4C9-4349-9DA9-6D696FDC52F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC14336-CD53-44F7-B271-3C98C016295B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0133","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"3781FF05-D4C9-4349-9DA9-6D696FDC52F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC14336-CD53-44F7-B271-3C98C016295B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0134","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:armada_insight_manager:4.20:*:*:*:*:*:*:*","matchCriteriaId":"63798667-EB89-4623-BF65-A0A2628EC8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:armada_insight_manager:4.20j:*:*:*:*:*:*:*","matchCriteriaId":"6D05E39C-83E7-41E2-AC50-AA4828AC9E0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7A11C13C-CFB2-4581-9BFD-900C0561951C"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.1:*:*:*:*:*:*:*","matchCriteriaId":"087246B0-FD45-443D-8D4B-84A3A9B641F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:foundation_agents:1.0:*:*:*:*:*:*:*","matchCriteriaId":"91B1A554-4B35-4F7E-9124-0057FC6524E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:foundation_agents:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8B841A7C-B8F9-4339-98FF-1F27D0483AA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:foundation_agents:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6A9BCAAD-0DC4-42E1-B8AB-4E65674F0CF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:foundation_agents:4.90:*:*:*:*:*:*:*","matchCriteriaId":"98E1C77A-23CD-440C-9127-563D824D041E"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:4.37e:*:*:*:*:*:*:*","matchCriteriaId":"11CE4F2C-6586-403A-9B60-6433D983C8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_desktop_web_agent:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AD82EECB-786F-4616-897A-EDE5A9CC8453"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_lc:1.3c:*:*:*:*:*:*:*","matchCriteriaId":"EDD3A86B-228E-4934-BAE5-63DC4A466522"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_lc:1.50a:*:*:*:*:*:*:*","matchCriteriaId":"96A1E444-C45A-4B04-A845-125332D1B67D"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:1.0:*:*:*:*:*:*:*","matchCriteriaId":"091FB40A-03CD-4CDF-961D-A6D0AECDE6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*","matchCriteriaId":"803B702A-3D4D-4438-A182-B181BEA00270"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:intelligent_cluster_administrator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B434EC96-751A-4696-A0C3-B0EA66AE15A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:intelligent_cluster_administrator:2.1:*:*:*:*:*:*:*","matchCriteriaId":"7172182F-D845-4F0A-A662-1DC30B9A6223"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:management_agents:4.30j:*:*:*:*:*:*:*","matchCriteriaId":"9E2D8216-85A8-4005-92A1-371EDF1D8EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:management_agents:4.35j:*:*:*:*:*:*:*","matchCriteriaId":"1639BBC5-FF6F-44B5-BC4E-3730AD9A0D99"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:management_agents:4.36e:*:*:*:*:*:*:*","matchCriteriaId":"83D2DD0D-2063-4299-980E-CEA6D11CB9B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:management_agents:4.36j:*:*:*:*:*:*:*","matchCriteriaId":"02E35578-B551-4A7B-84E3-21F948FEEB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:open_san_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"120BBD71-A8E9-40D8-88FF-2C0FBC3E8E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:sanworks_resource_monitor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"452385FD-BD83-4709-858E-DC79A66B9260"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:storage_allocation_reporter:1.0:*:*:*:*:*:*:*","matchCriteriaId":"21E57135-DE2E-48B5-A30C-46C2B1933CEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:survey_utility:2.17:*:*:*:*:*:*:*","matchCriteriaId":"7464B89B-472E-48FF-8B33-BED47D2FCF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:survey_utility:2.18:*:*:*:*:*:*:*","matchCriteriaId":"C0498F6A-C80A-44AC-A937-D1EA19C18ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:survey_utility:2.33:*:*:*:*:*:*:*","matchCriteriaId":"CED3495F-FD78-48D6-ADB6-EF42F9A30E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:system_healthcheck:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E033ADB3-60B3-4BD2-8B97-1114787C677C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"8237F390-43DB-4B07-9CD7-C3F804710497"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"24E73BB1-2FE1-44B0-AF41-8F26D4E8A428"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"703BA12A-E5A9-4152-9914-2840AC09205E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97967435023835&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www5.compaq.com/products/servers/management/agentsecurity.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=97967435023835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www5.compaq.com/products/servers/management/agentsecurity.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-0135","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrascripts:ultraboard:2.11:*:*:*:*:*:*:*","matchCriteriaId":"7B0388F4-40E9-4783-84C9-75D2C81BCDBF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97933458505857&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=97933458505857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0136","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server has been improperly installed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.2.0:rc2:*:*:*:*:*:*","matchCriteriaId":"1C874862-2902-4927-8BE4-D90CCBBDE1CD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"C74C8F2C-92F4-4A9F-BF5A-8B5DF1A50DC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0122.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0132.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2001/dsa-029","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/152206","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5801","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0132.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2001/dsa-029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/152206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0137","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97958100816503&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2203","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5937","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97958100816503&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0138","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-016","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-001.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2189","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5915","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-001.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0139","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_desktop:2.3:*:*:*:*:*:*:*","matchCriteriaId":"39CEEC92-B7FE-4E41-9966-DDA9EDF943C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BE526D3-4CD8-423C-81FA-65B92F862A5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-001.0.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-010.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2190","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5916","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-001.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-010.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0140","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-002.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2183","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5922","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-002.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0141","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gert_doering:mgetty:1.1.22:*:*:*:*:*:*:*","matchCriteriaId":"ABA3E6FC-DF8C-4B3C-8B50-CE9949AB6908"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-002.0.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2001/dsa-011","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-009.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-050.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2187","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5918","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-002.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2001/dsa-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-009.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0142","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy:2.3_stable4:*:*:*:*:*:*:*","matchCriteriaId":"05BE866B-EBCC-4847-98E9-C89288748B79"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"13EBB2F7-712E-4CB1-B4B4-5F0851F3D37E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0212.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-019","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-003.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2184","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5921","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-003.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0143","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-011.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5923","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916374410647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-011.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0144","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B6E307F1-C765-409C-835C-133026A5179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98168366406903&w=2","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_ssh1crc.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-35.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/503","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/795","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2347","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6083","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98168366406903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razor.bindview.com/publish/advisories/adv_ssh1crc.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-35.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0145","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a022301-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a022301-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0146","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially formatted URL's."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/796584","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2440","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2441","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-014","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6171","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6172","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/796584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0147","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records."},{"lang":"es","value":"El desbordamiento del búfer en el complemento del visor de eventos de Windows 2000 permite a los atacantes ejecutar comandos arbitrarios a través de un campo malformado que se maneja incorrectamente durante la visualización detallada de los registros de eventos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-013","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0148","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the \"Frame Domain Verification\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6227","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0149","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=96999020527583&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1718","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5293","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=96999020527583&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0150","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"}]}]}],"references":[{"url":"http://www.osvdb.org/7816","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2463","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6230","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/7816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0151","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6205","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A90","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A90","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0152","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:plus:*:*:*:*:*:*:*:*","matchCriteriaId":"A5DFA8A2-C8B8-438E-9908-C5DAA038F745"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-019","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0153","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:6.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"6E335F67-3944-4AE1-A029-82AA7949292B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:6.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"5167480D-01B7-4E58-A2FE-6684FA582130"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_vbtsql.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-018","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_vbtsql.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0154","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly."},{"lang":"es","value":"Funcionalidad HTML en Internet Explorer 5.5 y anteriores, que permite al atacante la ejecución de un archivo adjunto. Se consigue gracias al envío de cabeceras MIME inválidas para el adjunto que le permiten disfrazarse como un tipo de archivo no ejecutable. \r\n\r\nEl correo electrónico vía HTML  se representa en páginas web que el explorador es capaz de interpretar. Cuando el correo contiene ficheros adjuntos el Explorador también es capaz de abrir la aplicación asociada a los ficheros binarios adjuntos cuyo tipo (extensión de archivo) está definido en las cabeceras MIME. \r\n\r\nSin embargo, existe un defecto en el tipo de tratamiento que es especificado para ciertos tipos MIME sin identificar. Si un atacante crea un correo HTML conteniendo un  fichero adjunto ejecutable y le sustituye la información de cabecera MIME por otra, que contiene un tipo de archivo MIME reconocido, provocaría  la ejecución automática del adjunto.\r\n\r\nUn atacante podría usar esta vulnerabilidad en cualquiera de estos dos escenarios.\r\n\r\nEl atacante podíra generar un correo electrónico HTML infectado sobre un sitio web ý despues intentar convencer a otro usuario para que los visite. El fichero adjunto sería ejecutado automáticamente simplemente por visualizar la página que muestra la lista de mensajes.\r\n\r\nEn el otro supuesto, el atacante conseguiría su objetivo enviándo directamente el correo HTML a la dirección del ususario que desea infectar.\r\n\r\nEn ambos supuestos la ejecución del adjunto está limitada a los privilegios de sistema que tenga establecidos el ususario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98596775905044&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1001197","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-06.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-066.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7806","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2524","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-020","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6306","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A141","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98596775905044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1001197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-066.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0155","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:vshell:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"3CED05C7-51DC-4B8E-A1E8-60A28C4DE48C"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a021601-1.txt","source":"cve@mitre.org"},{"url":"http://www.vandyke.com/products/vshell/security102.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a021601-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vandyke.com/products/vshell/security102.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0156","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:vshell:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"71CB845B-49F8-4263-9C0D-EEBF40CAE8D2"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a021601-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2402","source":"cve@mitre.org"},{"url":"http://www.vandyke.com/products/vshell/security102.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6148","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a021601-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vandyke.com/products/vshell/security102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0157","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:palm:palm_os:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6BFF3AC0-8825-484D-92D7-FC4068947B31"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a030101-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6196","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a030101-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0160","sourceIdentifier":"cve@mitre.org","published":"2001-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol (WEP) which allows remote attackers to quickly compile information that will let them decrypt messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:wavelan:*:*:*:*:*:*:*:*","matchCriteriaId":"781443B2-E898-41F2-AF94-0D689CB3151C"},{"vulnerable":true,"criteria":"cpe:2.3:h:orinoco:orinoco_wavelan:*:*:*:*:*:*:*:*","matchCriteriaId":"85543BCB-989D-483D-B5C1-666393DBCEA7"}]}]}],"references":[{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0161","sourceIdentifier":"cve@mitre.org","published":"2001-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet:340-series:*:*:*:*:*:*:*","matchCriteriaId":"337CAB56-CB4D-4187-B847-3E12FB9CEE2B"}]}]}],"references":[{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0162","sourceIdentifier":"cve@mitre.org","published":"2001-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_embedded_compact:3.0.9348:*:*:*:*:*:*:*","matchCriteriaId":"EFB3E6BE-C974-4E83-9467-F871B71A052C"}]}]}],"references":[{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0163","sourceIdentifier":"cve@mitre.org","published":"2001-01-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap340:*:*:*:*:*:*:*:*","matchCriteriaId":"9DBDCD08-D3E9-4E72-BC5E-A9A9453D32A8"}]}]}],"references":[{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cs.jhu.edu/~seny/pubs/wince802.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0164","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.12","matchCriteriaId":"4FB58A05-9B80-4B7F-BCF4-BD1180E604DF"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a030701-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6233","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a030701-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0165","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long \"arg0\" (process name) argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0517.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2322","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6039","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0517.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0166","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:shockwave_flash_plugin:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"41FEB7DE-8C6F-4958-81A8-ABA14DD71DBA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0491.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5826","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0491.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0167","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3r7","matchCriteriaId":"F76F3181-CF78-4784-AF8A-BBC1FB25CBE5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98088315825366&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2305","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6025","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98088315825366&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0168","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3r7","matchCriteriaId":"F76F3181-CF78-4784-AF8A-BBC1FB25CBE5"}]}]}],"references":[{"url":"http://marc.info/?l=vnc-list&m=98080763005455&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/598581","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2306","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6026","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vnc-list&m=98080763005455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/598581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0169","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:*","matchCriteriaId":"89F65C9D-BD68-4A86-BFDC-E7CE76F13948"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"13EBB2F7-712E-4CB1-B4B4-5F0851F3D37E"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.5","matchCriteriaId":"A94B142D-DA33-41BF-9398-C7ABB94C30DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"CCEBB085-ECEE-4E18-951B-FC15C0646047"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/turbolinux/2001-q1/0004.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-007.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-039","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-012.php3?dis=7.2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_001_glibc_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/157650","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2223","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5971","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/turbolinux/2001-q1/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-007.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-012.php3?dis=7.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_001_glibc_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/157650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0170","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:ecommerce:*:*:*:*:*:*:*","matchCriteriaId":"FB63DADC-A9AE-4FBA-BCCA-9714646DBD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:graficas:*:*:*:*:*:*:*","matchCriteriaId":"99E6E71D-100E-45FA-B90A-C2F7C37E458C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"618111F3-6608-47F0-AB0D-21547E342871"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0186.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2181","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5907","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0171","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whitsoft:slimserve:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2E743791-B155-490A-A080-10F03CF48E35"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0505.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2318","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6028","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0505.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0172","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_reiser:reiserfs:3.5.28:*:*:*:*:*:*:*","matchCriteriaId":"B7AEA7E8-939F-47FB-AA66-E3AC930C798D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0127.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2180","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5910","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0173","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D8A4E85-62E4-45A1-9CDF-19BDA48AA789"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:98:*:*:*:*:*:*:*","matchCriteriaId":"B0D014B0-0AEB-45F4-B784-D1B954947440"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:98pe:*:*:*:*:*:*:*","matchCriteriaId":"1C4B7219-5F51-4CE0-8211-E353D34A1DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:2000.0lepx:*:*:*:*:*:*:*","matchCriteriaId":"AB90CBE5-2708-450B-9D2C-92A6B5C747C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:2000.0px:*:*:*:*:*:*:*","matchCriteriaId":"F11B98E9-33F4-4102-8757-CAB99A1DF6B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:2000lepx:*:*:*:*:*:*:*","matchCriteriaId":"73603DD4-8C24-4B98-BB21-29A9BEB32545"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:2000px:*:*:*:*:*:*:*","matchCriteriaId":"E34A5124-77A8-41FE-858E-33F242552A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:4.0:*:*:*:*:*:*:*","matchCriteriaId":"36AA0A49-292B-4289-ABAE-7F95F0D672F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F24BE36F-2006-4F80-8C6B-F404F933967C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:4.3:*:*:*:*:*:*:*","matchCriteriaId":"34C5C0EB-2FEA-436B-97E8-4F4DB8B6E38F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F7684FF3-5F76-42C1-8402-24C1E38658B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B0493F2-D3B4-44A4-B74A-04B60F943446"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F8BD02A9-908C-40FC-8A22-32BD0332F50C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"36C9B664-396F-4FD6-8A85-D41039631058"},{"vulnerable":true,"criteria":"cpe:2.3:a:qdecoder:qdecoder:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FB2881CD-3B6E-4036-81A3-B6F7F6A4AFCE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2329","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6033","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0174","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large \"To\" address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_buster_2001:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"85AAA118-63B6-43C0-8B6F-A198B0C5D767"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0500.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6138","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6034","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0500.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0175","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:fasttrack_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"917DA856-C64B-44CF-BD06-0ECB52B4CEE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98021351718874&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98035833331446&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5985","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98021351718874&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98035833331446&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0176","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:voyant_technologies:sonata:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8C357C56-7D02-444A-A70C-C859EC761B89"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0278.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2125","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5787","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0278.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5787","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0177","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmaster:conferenceroom:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"6804A977-6CE9-4E6E-B636-F4E028B247FF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/155388","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2178","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5909","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/155388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0178","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-005.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-018.php3?dis=7.2","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_002_kdesu_txt.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5995","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-005.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-018.php3?dis=7.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_002_kdesu_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0179","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a \".\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?ID=19546&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6008","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?ID=19546&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0180","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the \"email\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lars_ellingsen:guestserver:*:*:*:*:*:*:*:*","versionEndIncluding":"4.12","matchCriteriaId":"EEB548B4-5907-4B86-9944-C9EFB715285C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6027","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0181","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_desktop:2.3:*:*:*:*:*:*:*","matchCriteriaId":"39CEEC92-B7FE-4E41-9966-DDA9EDF943C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D11E0075-50CD-4A16-9A89-56DEF5263BCF"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-003.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2215","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5953","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-003.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0182","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0298.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1733","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2238","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5966","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0183","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/l-029.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1743","source":"cve@mitre.org"},{"url":"http://www.security-express.com/archives/bugtraq/2001-01/0424.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2293","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5998","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/l-029.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-express.com/archives/bugtraq/2001-01/0424.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0184","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeye_digital_security:iris:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EEEA14BE-9F19-48F2-9683-40FB7B8DF449"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0343.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0352.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2278","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5981","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0343.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0352.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0185","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netopia:r9100_router:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"2392B4A3-1C0E-4426-87ED-BA15C63EBE4C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/157952","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2287","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/157952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0186","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_java_web_server:free_java_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"093B27B5-088A-467A-926D-C8580F6AC3DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0061.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0187","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 2.1 ships with wu-ftp version 2.6.2 which is not vulnerable to this issue.","lastModified":"2006-09-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"28E5257A-F5ED-482C-9A0B-3B576513E7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta9:*:academ:*:*:*:*:*","matchCriteriaId":"1DF420E7-4BA8-45A4-B75E-8EEC10DDBD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:academ:*:*:*:*:*","matchCriteriaId":"C63ACBE3-5BB2-483E-A5FE-87698E98354A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*","matchCriteriaId":"B39D46C4-B153-4301-AE9C-57FB6BA64CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*","matchCriteriaId":"E55582DD-DEF7-4BF8-950C-E7E58BD29DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:*:*:*:*:*:*:*","matchCriteriaId":"FF9B9132-19A1-4242-A129-E5A49F466EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:*:*:*:*:*:*:*","matchCriteriaId":"4B9E32F3-06CF-482D-8313-3D098CDE8B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:*:*:*:*:*:*:*","matchCriteriaId":"0A096214-84AD-44F5-BBEF-F9F17B9B0C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*","matchCriteriaId":"4989799F-143A-45E5-A30C-9E3203649770"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:*:*:*:*:*:*:*","matchCriteriaId":"1E3D0CC6-D1A0-4784-BE93-319C7EE59134"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:*:*:*:*:*:*:*","matchCriteriaId":"4FA32489-F098-43D2-80B7-89CFE0BE9A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:*:*:*:*:*:*:*","matchCriteriaId":"91C6388E-464B-4562-BC7B-7B4A66387B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:*:*:*:*:*:*:*","matchCriteriaId":"923B5711-853D-4A77-8FB3-D5C3D449518D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:*:*:*:*:*:*:*","matchCriteriaId":"9BB1B136-F90E-426B-8010-F2D059E89DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:*:*:*:*:*:*:*","matchCriteriaId":"CD9EFCD7-2A13-420E-B6A0-C1248B2E6E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:*:*:*:*:*:*:*","matchCriteriaId":"573486C8-0349-4BC9-AD7D-3FBF93DDB6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:*:*:*:*:*:*:*","matchCriteriaId":"CAD81A30-9C35-4EEA-B6FE-A4AC76893AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"6AFFA39F-9072-4F19-A695-F383EA61D55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0A5D6359-4E6D-4563-8251-F1719D45E20E"}]}]}],"references":[{"url":"ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_strings.patch","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000443","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-016","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2296","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6020","source":"cve@mitre.org"},{"url":"ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_strings.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0188","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goodtech:ftp_server_95_98:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"24DFAA5A-749D-41A1-A7A2-8DAB6C3912EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:goodtech:ftp_server_nt_2000:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AE48C752-EC71-4668-884B-77A7B83AD5D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0350.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2270","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5984","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0350.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0189","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intranet-server:localweb2000:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B04A5822-BED5-44F4-B5EF-C0645ADFB336"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0346.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2268","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5982","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0346.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0190","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8","matchCriteriaId":"7A54F49F-56E3-47AD-B5D6-8BDB7DA97655"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97983943716311&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98028642319440&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6224","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97983943716311&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98028642319440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0191","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andynorman:gnuserv:*:*:*:*:*:*:*:*","versionEndExcluding":"3.12","matchCriteriaId":"C4790A32-AE7A-4A2B-840B-FD0367FBCD4B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnu:xemacs:-:*:*:*:*:*:*:*","matchCriteriaId":"DAB8DC9D-6378-4650-90B2-A80982681EB8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0030.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-019.php3","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-010.html","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-011.html","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6056","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-019.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0192","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davide_libenzi:xmail:*:*:*:*:*:*:*:*","versionEndIncluding":"0.66","matchCriteriaId":"ED4BBE54-4516-4FA0-9691-F30D95CB491D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0047.html","source":"cve@mitre.org"},{"url":"http://xmailserver.org/XMail-Readme.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xmailserver.org/XMail-Readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0193","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98096782126481&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-028","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2327","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6059","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98096782126481&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0194","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"2F12B7F7-A3B7-4081-88F2-0B6A204313F8"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-020.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6064","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6043","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-020.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0195","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-281"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-015","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5994","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2001/dsa-015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0196","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1753","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2324","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6052","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0197","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.8_beta2","matchCriteriaId":"E42B2D17-6E9B-4E2E-8329-C5A30C171414"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9C35E7B3-C898-4127-9188-65E691148EEF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0348.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000374","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-004.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2264","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5978","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0348.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0198","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:4.1.2:*:*:ja:*:windows:*:*","matchCriteriaId":"45BEC535-480A-4360-814B-5A5E87FDEFF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98096678523370&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/20605","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2328","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6040","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98096678523370&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.exploit-db.com/exploits/20605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0199","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guido_frassetto:sedum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"50D7E687-AA55-4DF5-BE2E-AC2BF344EBF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/651994","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/14797","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2335","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6063","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/651994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/14797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0200","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heat-on_software:hsweb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"78A06921-AF2B-4C30-98DF-D835EB243AFA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0052.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2336","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0201","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:umut_gokbayrak:postaci:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A7B11EA9-AD1D-4FF7-AFD5-1A37CC58F8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:umut_gokbayrak:postaci:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E077290B-4C52-4CD8-8A6B-6FA2D617544F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0287.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2230","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5972","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0287.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0202","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:informs:picserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"22AB8690-D51F-4D1C-B411-2E6AFEFA2693"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0073.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2339","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0203","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FC095492-FB4C-4E5A-AECC-968A72DC226F"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D40436FD-27BA-4F22-8574-47E2C2FF9E9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8F859BDA-95EE-4E90-A836-302DF216AAB5"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.3:*:*:*:*:*:*:*","matchCriteriaId":"EAD7701A-99CC-4B78-9E30-47F5041C22E9"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.4:*:*:*:*:*:*:*","matchCriteriaId":"AFBFC600-5B46-4254-885E-6A6657DA9987"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:4.5:*:*:*:*:*:*:*","matchCriteriaId":"8335934B-5CFC-4AF5-BD7D-10329694FF08"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0342.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2284","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5979","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0342.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0204","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:*:*:*:*:*:*:*:*","matchCriteriaId":"A99278AC-4913-4B9F-849A-41960B81720A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/162965","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2369","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/162965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0205","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting \"...\" into the requested pathname, a modified .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"817E4138-D68E-47A8-AD73-3BC27201999F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98148759123258&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98168216003867&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2343","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98148759123258&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98168216003867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0206","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft_lite:serverworx:3.00:*:*:*:*:*:*:*","matchCriteriaId":"262C1397-8E6C-4D29-91D5-B25F5A63E62D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0137.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2346","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0207","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pierre_beyssac:bing:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"E760B56E-07B1-4560-94E4-1BB06EEF8696"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0330.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2279","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6036","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0330.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0208","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microfocus:cobol:4.1:*:*:*:*:*:*:*","matchCriteriaId":"964A7ED5-6A3F-4621-9D55-356F8ED8163B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2359","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0209","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long description."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shoutcast:dnas:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8BC773BE-47AE-44FB-87C0-0CDA09EF6EFF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0305.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5965","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0305.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0210","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carey_internet_service:commerce.cgi:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"76AC96BB-AFE0-42B8-8338-31F33C707755"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/162259","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2361","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/162259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0211","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silverplatter:webspirs:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C933B2B7-E441-4FD1-B5C9-26E5C03CF5D4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0217.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2362","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0217.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2001-0212","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:his:auktion:1.62:*:*:*:*:*:*:*","matchCriteriaId":"6F0A3CCF-5F77-41E4-AF39-4F9759706A1C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0218.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2367","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0213","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:planet_intra:planet_intra:2.5:*:*:*:*:*:*:*","matchCriteriaId":"5A10EF6B-816D-4A9F-AD08-C4349F41E280"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0421.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6002","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0421.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0214","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:way:way-board:cgi:*:*:*:*:*:*:*","matchCriteriaId":"AF71C043-F999-4FD3-A7E7-570A6A242F12"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0212.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2370","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0215","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_hamilton:roads:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E1152CE0-6E4A-40D1-BB4C-49C471191E01"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0213.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.roads.lut.ac.uk/lists/open-roads/2001/02/0001.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2371","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6097","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0213.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.roads.lut.ac.uk/lists/open-roads/2001/02/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0216","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mnscu_pals:webpals:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43DFBB91-309C-4FE5-985D-36CC25FA11E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2372","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6102","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0217","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mnscu_pals:webpals:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43DFBB91-309C-4FE5-985D-36CC25FA11E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2372","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6102","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0218","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_stover:mars_nwe:0.99_pl19:*:*:*:*:*:*:*","matchCriteriaId":"527589FF-8098-4A97-ACB3-0CFBBEBF9E5A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0456.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0081.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6019","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0456.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0219","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.11","matchCriteriaId":"F42BC6B3-EA80-4D15-B7BB-38E12615D03C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0016.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6991","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7029","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2239","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5957","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0220","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ja-elvis:ja-elvis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.4_1","matchCriteriaId":"21B7BA5F-8702-4B03-A368-ED6E2AF9A87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ko-helvis:ko-helvis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8h2_1","matchCriteriaId":"DB3D9E2C-2C22-4508-A231-8E6F8D432189"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0082.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0221","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freebsd:ja-xklock:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"7873619A-9826-4A5E-B43E-94E52B3CC722"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0079.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6073","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0222","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.83:*:*:*:*:*:*:*","matchCriteriaId":"DFD94AA9-CABA-4FC8-8367-D5D9D8B4F623"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-004.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-016.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6011","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-004.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-016.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0223","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spawar.navy.mil:wwwwais.25.c:*:*:*:*:*:*:*:*","matchCriteriaId":"1D58E262-7564-4A8F-A34F-D59D0FB77806"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97984174724339&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5980","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97984174724339&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0224","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brightstation:muscat_empower:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A529E0C5-D2A0-4E66-8C55-BFD309319315"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0216.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2374","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6093","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0216.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0225","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenzo:infobot:0.44.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E8194470-3F23-4D45-951A-491E4194A8E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0127.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0226","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:biblioscape:biblioweb_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"27F9A91B-F953-4785-8572-9D10A15C317C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0227","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:biblioscape:biblioweb_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"27F9A91B-F953-4785-8572-9D10A15C317C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0228","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:v.2.0:*:*:*:*:*:*:*","matchCriteriaId":"11B80CEB-9463-4262-AE5F-DCED56F87863"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:v.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4171B57B-2DD1-494E-BE62-338905BAD8D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"cve@mitre.org"},{"url":"http://osvdb.org/81099","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/81099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0229","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:chilisoft:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"7CD6126C-3DF1-4366-A2EE-0498D8A21669"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0112.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0112.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0230","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4_1","matchCriteriaId":"17D8A3E5-264C-4D79-8B40-BD5502024D95"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0083.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6081","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6077","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-02/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0231","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the \"t\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibrow:news_desk:1.2:*:*:*:*:*:*:*","matchCriteriaId":"95409F71-C92A-4AEA-997A-1C95299227CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/496064","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5898","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/496064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0232","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibrow:news_desk:1.2:*:*:*:*:*:*:*","matchCriteriaId":"95409F71-C92A-4AEA-997A-1C95299227CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0233","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.6","matchCriteriaId":"39485A91-7E65-4756-90F5-0F7C89D5C37C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:14.micq.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0307.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0395.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-012","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-005.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5962","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:14.micq.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0395.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0234","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:newsdaemon:0.21b:*:*:*:*:*:*:*","matchCriteriaId":"C12E1623-2295-4AF5-A273-ED1F63BFCD72"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=60570","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6010","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=60570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0235","sourceIdentifier":"cve@mitre.org","published":"2001-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:09.crontab.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-024","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6225","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:09.crontab.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0236","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long \"indication\" event."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98462536724454&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/207","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-05.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-065.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2417","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6245","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98462536724454&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-065.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0237","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data."},{"lang":"es","value":"La pérdida de memoria en el controlador de dominio Microsoft 2000 permite a los atacantes remotos provocar una denegación de servicio al conectarse repetidamente al servicio Kerberos y luego desconectarse sin enviar ningún dato."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-079.shtml","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98942093221908&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2707","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6506","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-079.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98942093221908&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0238","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-074.shtml","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6405","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-074.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0239","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"80744BD9-85A9-4E33-8C35-59C8C112AC62"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-073.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/176912","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/177160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/179986","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2600","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6383","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-073.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/176912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/177160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/179986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6383","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0240","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*","matchCriteriaId":"645B78F8-9AD7-4707-9CAD-5DC79475D971"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"E28225AE-DBBA-44B0-AA1E-B210E6802953"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*","matchCriteriaId":"3B3A5E8E-CCE2-49AF-BAEB-549E3C67430B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2001:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"F5CFFFAE-0B84-4A08-B061-6C652FA81497"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2753","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6571","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0241","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0."},{"lang":"es","value":"Buffer overflow en la extensión ISAPI de Internet Printing en Windows 2000 permite a los atacantes remotos obtener privilegios de root a través de una larga solicitud de impresión que se pasa a la extensión a través de IIS 5.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98874912915948&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-10.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2674","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6485","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1068","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98874912915948&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0242","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the \".ASX Buffer Overrun\" vulnerability as discussed in MS:MS00-090."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.3:*:*:*:*:*:*:*","matchCriteriaId":"D5341552-9A9B-4F79-906B-E58E302CCE7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/187528","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/181419","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/183906","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2677","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2686","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5574","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/187528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/181419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/183906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0243","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2765","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6584","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0244","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2709","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6517","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0245","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the \"Malformed Hit-Highlighting\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:indexing_service:*:*:*:*:*:*:*:*","matchCriteriaId":"E8D01793-B14A-4A3E-868F-8F9C74AB7482"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6518","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0246","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the \"Frame Domain Verification\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0247","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8C0C82-749E-4837-88F8-FB56A753B094"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AD672FA-918D-48CB-BC03-4E412AF0DCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B363A4-BB7A-48A2-AE6B-BD2DDD46E7CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010802-01-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0466.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/048.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2548","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6332","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010802-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/048.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0248","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/048.asp","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2552","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6332","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cert.org/advisories/CA-2001-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/048.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0249","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndIncluding":"6.5.20","matchCriteriaId":"24278E6E-AC94-4083-8838-41BF30D7D5F6"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-07.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/048.asp","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2550","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6332","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cert.org/advisories/CA-2001-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/048.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0250","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9DD208FC-AC17-45DF-9A5F-D8CDA6DB3A7F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0396.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2285","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5997","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0251","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0422.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2294","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6003","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0422.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0252","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many \"/../\" (dot dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_enterprise_server:4.1sp5:*:*:*:*:*:*:*","matchCriteriaId":"BE7F44EC-A16C-4CC8-80D7-BD9A306F68D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98035833331446&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/157641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2282","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5983","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98035833331446&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/157641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0253","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iweb_systems:hyperseek:2000:*:*:*:*:*:*:*","matchCriteriaId":"7157726F-5EAD-457D-88D2-B0F899424489"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0463.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/146704","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2314","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6012","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/146704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0254","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the \"pwd\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:ftp\\+\\+_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"21961F5E-AAD0-4B63-9B15-8E176FBC305D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98021181215325&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98021181215325&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0255","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the \"ls\" command and including the drive letter name (e.g. C:) in the requested pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:fastream_ftp\\+\\+_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D5093320-5730-4092-A162-8801C0C6CBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:fastream_ftp_server:2.0beta_11:*:*:*:*:*:*:*","matchCriteriaId":"D8785792-FB4B-4682-90AD-CA5C27F7A95D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98021181215325&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2267","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5977","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98021181215325&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0256","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:ftp\\+\\+_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"21961F5E-AAD0-4B63-9B15-8E176FBC305D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98021181215325&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2261","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5976","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98021181215325&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0257","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as \"Host:\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-data_international:easycom_safecom_print_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BF5B0C43-BE77-4564-A23A-C4B750178F36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5988","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0258","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large number of connections that send null characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-data_international:easycom_safecom_print_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BF5B0C43-BE77-4564-A23A-C4B750178F36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5989","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0259","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0262.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2222","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ssh.com/products/ssh/patches/secureRPCvulnerability.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5963","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ssh.com/products/ssh/patches/secureRPCvulnerability.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0260","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long \"RCPT TO\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.5","matchCriteriaId":"7A686E83-6DAE-4B64-BB4A-2B5E49EF26A5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0360.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3321","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2283","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5993","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0360.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0261","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97992179925715&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98027311214976&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5973","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97992179925715&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98027311214976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0262","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:smartdownload:1.3:*:*:*:*:*:*:*","matchCriteriaId":"34886FF8-B2F7-4BC3-AF29-EEE2F44948A0"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a041301-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2001/a041301-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0263","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the \"show relative paths\" option is not enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gene6:g6_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A93EE9-255E-499A-ABED-E9E94409AB39"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a040301-1.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2537","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6330","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a040301-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0264","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gene6:g6_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A93EE9-255E-499A-ABED-E9E94409AB39"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a040301-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2534","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2001/a040301-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0265","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.3","matchCriteriaId":"40F4AE19-648A-497E-9BC2-001F7E7A4983"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:5:*:*:*:*:*:*:*","matchCriteriaId":"C28DDBDB-02B1-484A-99CB-6AFE6395C3B2"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a040901-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2556","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6643","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a040901-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0266","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.00","matchCriteriaId":"59AD3EDE-3ABD-4686-98CB-42BB56345AE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0069.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6033","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0267","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:5.5:*:*:*:*:*:*:*","matchCriteriaId":"85A265C6-10F3-430A-BD67-D3DAA9460CC7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0050.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6226","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0268","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"EB651DC9-E4F0-440F-A339-CFA576CED78C"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"CECB5D3D-E070-4C56-9677-E55B1CDBBCDC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0353.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/netbsd/2001-q1/0093.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/358960","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html#userldt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6141","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2739","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6222","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0353.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/netbsd/2001-q1/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/358960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html#userldt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0269","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0344.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6440","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0270","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marconi:forethought:6.2:*:*:*:*:*:*:*","matchCriteriaId":"CFA00783-291B-4AEA-BAF5-B6D6E655C329"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:marconi:asx-1000:*:*:*:*:*:*:*:*","matchCriteriaId":"E7502938-B18B-4BC0-8E2B-582220AB9759"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0349.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2400","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0271","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailnews.cgi:mailnews.cgi:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"0C956CAA-8B47-416F-A879-9627A1F394CC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0347.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2391","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0347.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0272","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3.org:sendtemp.pl:*:*:*:*:*:*:*:*","matchCriteriaId":"FBAB6394-DB57-45A2-886B-4DFB106E2542"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0259.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0259.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0273","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:holger_lamm:pgp4pine:1.75.6:*:*:*:*:*:*:*","matchCriteriaId":"58962F87-645C-4EC1-A367-41F47BA83C85"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/566640","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2405","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6135","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/566640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0274","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kicq:kicq:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3BC501C9-7B96-44AF-AB25-CFC9289F16C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0276.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0536.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6112","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0276.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0536.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0275","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moby:netsuite_web_server:1.02:*:*:*:*:*:*:*","matchCriteriaId":"AA2DCCC0-5AAF-47E6-92EB-D6937E77F4C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0346.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0346.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0276","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7718A5FF-58F1-4086-8EF8-E67F5D48EB79"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98263019502565&w=2","source":"cve@mitre.org"},{"url":"http://www.badblue.com/p010219.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2390","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6130","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98263019502565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.badblue.com/p010219.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0277","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7718A5FF-58F1-4086-8EF8-E67F5D48EB79"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98263019502565&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2392","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98263019502565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0278","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"26F3DB5E-4C6A-48BE-8358-2379F1955ABD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0050.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6223","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0279","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0414.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0427.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0437.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000381","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-031","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-024.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-018.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-019.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0414.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0427.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-024.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-019.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0280","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur:*:*:*:*:*:*:*:*","matchCriteriaId":"224384EF-AD10-4BE7-9A43-0A8E6A79F133"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0413.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6149","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0413.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0281","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0282","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guido_frassetto:sedum:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D0E7077F-3D50-4792-97AB-F3CD7546A0D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0419.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0419.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0283","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sun_ftp:build_9:*:*:*:*:*:*:*","matchCriteriaId":"21DDBF2D-6875-4079-903A-48CEF5CFBA21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0284","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"CECB5D3D-E070-4C56-9677-E55B1CDBBCDC"}]}]}],"references":[{"url":"http://www.openbsd.org/errata.html#ipsec_ah","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6026","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata.html#ipsec_ah","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0285","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a1webserver:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"40816D08-9278-47C1-9C75-EE5B97BBCCC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0286","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a1webserver:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"40816D08-9278-47C1-9C75-EE5B97BBCCC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0287","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4523ABC6-E963-4C6A-8F3F-8A443053291F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0528.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seer.support.veritas.com/docs/234326.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6025","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0528.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seer.support.veritas.com/docs/234326.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0288","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.1","matchCriteriaId":"894D4548-112B-466D-9D16-0D125A078A1E"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ios-tcp-isn-random-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/ios-tcp-isn-random-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0289","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*","matchCriteriaId":"9894A324-ABBD-4FF4-8A51-D73381F40814"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-041","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-024.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-024.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0290","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"5160E4FB-191C-4BB4-8D9D-DA1A3B33D77E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0031.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0291","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0003.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0292","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C17255B-64E1-4DFF-8C21-8BB1D78A5256"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0293","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datawizard:ftpxq:2.0.93:*:*:*:*:*:*:*","matchCriteriaId":"4A1490C4-7B75-4697-B72B-B7B18340445E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0508.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2426","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0508.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0294","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.85:*:*:*:*:*:*:*","matchCriteriaId":"BE989197-8D9D-4E3D-8B54-0D41E37E44DA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0511.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0511.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0295","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a \"dir *./../..\" command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jarle_aase:war_ftpd:1.67b04:*:*:*:*:*:*:*","matchCriteriaId":"A57C422E-E72C-4CE9-8AF9-369868F2A7FD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98390925726814&w=2","source":"cve@mitre.org"},{"url":"http://support.jgaa.com/?cmd=ShowArticle&ID=31","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/874","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2444","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98390925726814&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.jgaa.com/?cmd=ShowArticle&ID=31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0296","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd_pro:3.00:*:*:*:*:*:*:*","matchCriteriaId":"DDC8126E-BAE0-458A-AB7A-6384C914D5A3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0531.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0531.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0297","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dattaraj_rao:simple_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00CCD167-80A5-4B18-A1BC-56DBF1A353EB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/165523","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2415","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/165523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0298","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sapio_design_ltd:webreflex:1.55:*:*:*:*:*:*:*","matchCriteriaId":"83F9364A-2ADE-43D4-BC4A-9136C6A2138D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/165671","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2425","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/165671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0299","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute arbitrary commands, via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:ip440_firewall_vpn_appliance:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F02EBC94-E015-466C-A204-D10F03090DC5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97535202912588&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97603879517777&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6020","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2054","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5640","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97535202912588&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97603879517777&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0300","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:2.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8CAB0DC0-670E-4C95-B663-6CC739986F04"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/610904","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5804","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/610904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0301","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:*:*:*:*:*:*:*:*","versionEndIncluding":"4.15","matchCriteriaId":"7E389874-9F1A-4A62-A951-F91A8213DFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:*:*:*:*:*:*:*:*","versionEndIncluding":"4.90_beta2","matchCriteriaId":"CD6F5F4B-8AA7-4245-946F-4657CA965955"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0264.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/linux/redhat/2001-q1/0056.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.analog.cx/security2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-033","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1762","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2377","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6105","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/linux/redhat/2001-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.analog.cx/security2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0302","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi3:pi3web:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"50775359-8D25-4F67-8171-AF60A48EA122"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2381","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0303","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi3:pi3web:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"50775359-8D25-4F67-8171-AF60A48EA122"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2381","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0304","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a \"\\..\" (dot dot) in a URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"150FA89A-58BB-4A74-A1F4-B1BCFA03A98D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98229372610440&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2384","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98229372610440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0305","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thinking_arts:es.one:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CC3AEAF6-97DC-45F3-B41C-6801C8CF430F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0324.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2385","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0324.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0306","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itafrica:webactive:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2DDF8C55-A416-4D20-86A0-F86875E60C12"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0332.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2386","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0332.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0307","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bajie:java_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.79","matchCriteriaId":"ECE0F7F6-64F1-4765-B09D-BA7590FEC4F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0308","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bajie:java_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.79","matchCriteriaId":"ECE0F7F6-64F1-4765-B09D-BA7590FEC4F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2388","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.geocities.com/gzhangx/websrv/docs/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0309","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2001-006.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6380","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0310","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle when the temporary file already exists, which causes sort to crash and possibly impacts security-sensitive scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:13.sort.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3960","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6038","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:13.sort.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0311","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:omniback_ii:a.03.50:*:*:*:*:*:*:*","matchCriteriaId":"A3EAB230-1F2C-40C3-8BE6-EC286A8D07B0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11","matchCriteriaId":"7296EF1A-CE74-49CB-BAFF-E307842ED4D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0022.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0023.html","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0102-142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6434","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0102-142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0312","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_plugin:*:*:*:*:*:*:*:*","matchCriteriaId":"B7A23360-2F0F-411B-B6C6-05DD82587593"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0446.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-01/0446.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0313","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed, which causes the server to continuously send pings (echo requests) to the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:borderware:firewall_server:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8A81808E-7B90-4946-8E40-84FA776D0A27"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98053139231392&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6004","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98053139231392&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0314","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9D519F65-37D1-42D9-9078-F4DF4651D5E4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98053366805491&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6009","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98053366805491&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0315","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7","matchCriteriaId":"EBF0340E-86E7-473F-BB34-711F7BE99DE8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98053777917287&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6013","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98053777917287&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0316","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6017","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-013.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2364","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6079","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0317","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-013.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6080","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0318","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EE12C338-EE8E-4E28-8E18-9C4FCC9D063D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0117.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97916525715657&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-029","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6433","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97916525715657&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6433","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0319","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE86316D-9345-4DAF-895C-C5CA3CE57DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"68CE1451-5A6F-462C-AF6E-8B89992F4D3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"32F0400D-F53F-4A9D-AEAC-3C6CE82C874A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1:*:start:*:*:*:*:*","matchCriteriaId":"2311CABF-10C8-425E-86A9-019C76005330"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.1:*:pro:*:*:*:*:*","matchCriteriaId":"2B208B30-F707-4D89-AD78-B90B11AB3C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.1:*:start:*:*:*:*:*","matchCriteriaId":"3446F9E1-2B08-4CBF-89BD-E3877734CC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.2:*:pro:*:*:*:*:*","matchCriteriaId":"F7A986BA-889F-49B1-92B6-D0E0F87CC994"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.2:*:start:*:*:*:*:*","matchCriteriaId":"D7E959F6-8E57-4C15-B692-4E59DA4112E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.2:*:pro:*:*:*:*:*","matchCriteriaId":"30945828-4F47-484B-82C0-37C64D4DB5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.2:*:start:*:*:*:*:*","matchCriteriaId":"A8D8BD49-ECD4-4781-808C-D3DBDF54F734"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce_hosting_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"19361055-8688-4620-937F-310B2BC06080"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce_hosting_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F96A57EA-67E5-4C0C-8FF6-8AEDA18927B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce_hosting_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5E63E2D8-EBDD-4016-85B3-188FCF9820BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:3.1.2:*:service_provider:*:*:*:*:*","matchCriteriaId":"0CE7944E-ECA2-4F41-9D35-B669D3CAD32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:3.2:*:service_provider:*:*:*:*:*","matchCriteriaId":"E6B0527C-C252-4809-BE7A-A77366917D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:4.1:*:marketplace:*:*:*:*:*","matchCriteriaId":"5F7ACC91-1BC3-4662-BD05-8862502F9EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:4.1:*:pro:*:*:*:*:*","matchCriteriaId":"D846B2D0-57C4-470B-A9D4-853981C8CE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:4.1:*:start:*:*:*:*:*","matchCriteriaId":"B21A547F-4F44-4754-9710-6A5250DF5581"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:4.1.1:*:pro:*:*:*:*:*","matchCriteriaId":"4E9DD4CF-053E-4851-B0F1-A53D0FF9A98D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:4.1.1:*:start:*:*:*:*:*","matchCriteriaId":"FE660579-2A20-4E0D-BB15-4B41918D46E0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0072.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-4.ibm.com/software/webservers/commerce/netcomletter.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2350","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6067","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-4.ibm.com/software/webservers/commerce/netcomletter.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0320","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CC2EF54E-96A3-49E7-B61D-338552787101"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EC3CBB92-6A11-4B5B-A910-B0287AB12846"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0425.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0425.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0321","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0214.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6512","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0214.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0322","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97958685100219&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2202","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5938","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97958685100219&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0323","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing \"ICMP Fragmentation needed but Don't Fragment (DF) set\" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=97958349623450&w=2","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5975","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97958349623450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0324","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2001-q1/0060.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2340","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2001-q1/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0325","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtp:5.60:*:*:*:*:*:*:*","matchCriteriaId":"C3B1909F-8D56-4CE9-8BA9-BE9D6185D433"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0031.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0326","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:release_1.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9828D52-C006-4276-8ED2-94C17B6D5D0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7_r3:*:*:*:*:*:*:*","matchCriteriaId":"C5ECD4E2-7228-4E78-A3B7-C22D931BE572"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0255.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5706","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6438","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0255.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0327","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1_enterprise","matchCriteriaId":"4EA86318-1CCC-4CD0-9C5E-1BD68AA2AA00"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a041601-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/276767","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5704","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a041601-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/276767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0328","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030201-01-P","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8044","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/57","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-09.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2682","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1033181","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4922","source":"cve@mitre.org"},{"url":"https://support.f5.com/csp/article/K19063943?utm_source=f5support&amp%3Butm_medium=RSS","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030201-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/57","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K19063943?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0329","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a043001-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mozilla.org/projects/bugzilla/security2_12.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/1199","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a043001-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mozilla.org/projects/bugzilla/security2_12.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/1199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0330","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a043001-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2671","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6489","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a043001-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0331","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.8","matchCriteriaId":"CB3A6F8C-C6BC-4E3A-9E63-66CBD8A1B9E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010501-01-P","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/258632","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1822","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2714","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise76.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6502","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010501-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/258632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise76.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0332","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and GetObject, aka a variant of the \"Frame Domain Verification\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98609031517525&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98609031517525&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0333","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and \"\\\" characters twice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"96766204-6363-43B2-A96D-F5C53EED5E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98992056521300&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-12.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2708","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6534","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98992056521300&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0334","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"96766204-6363-43B2-A96D-F5C53EED5E3A"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6535","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0335","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"96766204-6363-43B2-A96D-F5C53EED5E3A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2719","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6545","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0336","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"96766204-6363-43B2-A96D-F5C53EED5E3A"}]}]}],"references":[{"url":"http://www.osvdb.org/5693","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6858","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0337","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"96766204-6363-43B2-A96D-F5C53EED5E3A"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0338","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the \"Server certificate validation vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-087.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2735","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6555","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-087.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0339","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the \"Web page spoofing vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"7BDFCFCB-6E90-4F29-9852-A3099DF05843"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-087.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5694","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2737","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6556","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1096","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-087.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0340","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-091.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6652","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ciac.org/ciac/bulletins/l-091.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0341","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll."},{"lang":"es","value":"El desbordamiento de búfer en el subcomponente Microsoft Visual Studio RAD Support de FrontPage Server Extensions permite a los atacantes remotos ejecutar comandos arbitrarios a través de una solicitud de registro larga (URL) a fp30reg.dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage_server_extensions:2000:*:*:*:*:*:*:*","matchCriteriaId":"30681E33-8D2B-46A6-ABFE-490B2F686304"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99348216322147&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2906","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-035","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6730","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99348216322147&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0344","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:gold:*:*:*:*:*:*","matchCriteriaId":"0288AFA1-CA4F-4DA0-9C22-6F2237B984DF"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-095.shtml","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6684","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-095.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0345","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2843","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6667","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0346","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6668","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0347","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-092.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5686","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2847","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6665","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-092.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0348","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_mstelnet.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-092.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2838","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6666","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_mstelnet.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-092.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0349","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/587587","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2849","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6664","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/587587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0350","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6664","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0351","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-092.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2846","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6669","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-092.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0352","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or (2) ap128bWepKeyValue in the ap128bWEPKeyTable in the Symbol MIB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3crwe747a:*:*:*:*:*:*:*:*","matchCriteriaId":"886B94C2-8983-45D0-B0A5-6A587CB4BDCC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symbol:41x1_access_point:*:*:*:*:*:*:*:*","matchCriteriaId":"1832662A-5851-472E-8B34-641543B524AE"}]}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6232","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0353","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a \"transfer job\" routine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-15.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2894","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise80.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6718","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise80.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0354","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thenet:checkbo:1.56:*:*:*:*:*:*:*","matchCriteriaId":"88ACDDB3-18E6-44DD-9DC7-4686071925B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/178061","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/178061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0355","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98185226715517&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98185226715517&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0357","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"B371351D-D4D5-4F4A-82F2-76D22D581068"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98433523520344&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6242","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98433523520344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0358","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2) a long exec command, or (3) long input in a configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sierra:half-life:*:*:*:*:*:*:*:*","versionEndIncluding":"1573","matchCriteriaId":"CC779D0E-34D7-4B0B-A989-6FD20008A028"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:*:*:*:*:*:*:*:*","versionEndIncluding":"1573","matchCriteriaId":"C7E78665-6DC1-4AC3-B899-C7BB80CB805D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6218","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6221","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0359","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sierra:half-life:*:*:*:*:*:*:*:*","versionEndIncluding":"1573","matchCriteriaId":"CC779D0E-34D7-4B0B-A989-6FD20008A028"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1573","matchCriteriaId":"643A7D75-EFF6-4DD5-9BF4-B1D0A6430B80"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6220","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0360","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the helpon parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.7b","matchCriteriaId":"A4021946-6405-4C07-A5B1-7097474E1030"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0124.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2471","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6216","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0124.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0361","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a \"Bleichenbacher attack\" on PKCS#1 version 1.5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.31","matchCriteriaId":"0FA12144-E18D-4B08-A287-84AF8D061E2E"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:24.ssh.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98158450021686&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-047.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-023","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-027","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-086","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/adv004_ssh.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2344","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6082","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:24.ssh.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98158450021686&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-047.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/adv004_ssh.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0364","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.4:*:*:*:*:*:*:*","matchCriteriaId":"894266AB-9AE6-4CF5-9B0D-14158B124588"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98467799732241&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2477","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6241","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98467799732241&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0365","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1","matchCriteriaId":"B81272A3-87BE-4053-A580-8F318B3A9EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80460E6D-6093-44C3-91C7-BD75B3AE4351"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98503741910995&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2490","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6262","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98503741910995&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0366","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_r_3_web_application_server_demo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"895E8C7B-3CE3-40D3-8899-C0F357C76C6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saposcol:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"C30821CF-2649-4CA2-995E-E2E026637BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saposcol:1.1:*:linux:*:*:*:*:*","matchCriteriaId":"96C8AD96-0585-49AF-8A61-4346EFADD758"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saposcol:1.2:*:linux:*:*:*:*:*","matchCriteriaId":"0D683E15-9A21-4507-B0E8-0B280899A2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:saposcol:1.3:*:linux:*:*:*:*:*","matchCriteriaId":"FB78CC7C-52FC-43C8-B88C-CD54FC9036B1"}]}]}],"references":[{"url":"ftp://ftp.sap.com/pub/linuxlab/saptools/README.saposcol","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/180498","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2662","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6487","source":"cve@mitre.org"},{"url":"ftp://ftp.sap.com/pub/linuxlab/saptools/README.saposcol","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/180498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0367","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2000.0b_build3278:*:*:*:*:*:*:*","matchCriteriaId":"9C1E49E4-1BB4-40BF-AB6F-829ACAEDC581"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98847544303438&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2664","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98847544303438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0368","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_peers:bearshare:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.2","matchCriteriaId":"BA1FE78E-B9CC-4E54-9080-73CEB1BF798B"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_peers:bearshare:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8E249911-043E-4762-B234-630A0DCC67DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_peers:bearshare:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AB7039A5-F23D-4335-B394-4241BFC41AFA"}]}]}],"references":[{"url":"http://www.osvdb.org/1810","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/180644","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2672","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6481","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/180644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0369","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:mu02:*:*:*:*:*:*:*","matchCriteriaId":"7DA294BD-ECC7-40E5-8586-CBF5D1654295"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:unix:r4.20mu06:*:*:*:*:*:*:*","matchCriteriaId":"343A8D28-05A3-4E73-80D0-A85D4F6E6982"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98511407131984&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6258","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98511407131984&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0370","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_a._gumienny:fcheck:*:*:*:*:*:*:*:*","versionEndIncluding":"2.57.59","matchCriteriaId":"02E5B884-CC75-4B50-B187-B38E206C7000"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98521301510554&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6256","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98521301510554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0371","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user processes before it is zeroed out, which allows a local user to access otherwise restricted information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"9C2055FF-F77D-408F-AD0C-D7C963636293"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-03/0403.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5682","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6268","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-03/0403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0372","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akopia:akopia_interchange:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.3","matchCriteriaId":"C314052D-549E-43EE-9E66-C60A4489602D"},{"vulnerable":true,"criteria":"cpe:2.3:a:akopia:akopia_interchange:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"68B23D6D-5667-49BF-9906-2A91AD5CA61A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2499","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6273","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0373","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5683","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2501","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6275","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0374","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:web-enabled_management:*:*:*:*:*:*:*:*","matchCriteriaId":"0FF0D445-1573-4611-89AB-EC3124159535"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q1/0779.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.compaq.com/products/servers/management/mgtsw-advisory.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6264","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q1/0779.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.compaq.com/products/servers/management/mgtsw-advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0375","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*","matchCriteriaId":"F6EE5C14-F556-48A5-BB3F-5465DC823B85"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*","matchCriteriaId":"32E437F4-1B19-4B57-9EAD-3AC04717E389"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98658271707833&w=2","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/pixfirewall-authen-flood-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2551","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6353","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98658271707833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/pixfirewall-authen-flood-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0376","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys.  This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:soho2:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A485A7FC-31BD-45CA-985B-EECAB42B8029"},{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:tele2:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"554C10AE-F85E-47A7-BACC-AF144F218AAA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6304","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0377","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infradig:inframail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.97a","matchCriteriaId":"C25828E6-3AC7-48FA-8E8A-DC542ED3B304"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0428.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5685","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6297","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0378","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8","matchCriteriaId":"CECB5D3D-E070-4C56-9677-E55B1CDBBCDC"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5680","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6586","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0379","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0101.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249224","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5681","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6282","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0380","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:crosscom_olicom:xlt-f:*:*:*:*:*:*:*:*","matchCriteriaId":"C85F0FFD-855E-4428-B08E-BE9EA30BC094"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0381","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:openpgp:*:*:*:*:*:*:*:*","matchCriteriaId":"68596858-75C1-4E14-BDEB-179BE38AFB79"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-017.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0252.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0311.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/11966","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-063.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2673","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6558","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-017.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0311.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/11966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0382","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates CCC\\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:ccc_harvest:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1A9356E1-CF3E-4BA2-B472-720D927671C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2001-q2/0001.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2001-q2/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0383","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"71422E07-4FC3-4F67-9B29-9CC1553B9E0D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://phpnuke.org/download.php?dcategory=Fixes","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2544","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6342","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://phpnuke.org/download.php?dcategory=Fixes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0384","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:reliant_unix:*:*:*:*:*:*:*:*","versionEndIncluding":"5.45","matchCriteriaId":"8C00C95B-BB45-4B44-8C82-C83425EFC46F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/176709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2606","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/176709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0385","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"08178800-0020-4052-AFA8-BC21B10AF491"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0281.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"cve@mitre.org"},{"url":"http://osvdb.org/81099","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6664","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2607","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6400","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0281.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/81099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0386","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"56095EE9-AAF4-4BB5-9077-DC2DCFFCF7C7"}]}]}],"references":[{"url":"http://www.osvdb.org/3781","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/177156","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2608","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6395","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/177156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0387","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl0:*:*:*:*:*:*:*","matchCriteriaId":"A6BD3731-AF01-442F-9DC1-D59BD0BBC43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"142CD462-2316-4769-9DCB-95B51C41C857"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"6BFD839F-0BCE-44FE-8CA0-A95C81CECEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"C767786A-5DA1-494A-9B59-C48E6415E4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"38E60F7E-F609-4B93-A130-B247EEAC1BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"185B1820-E196-4D4C-8085-30CDC1A15B16"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Apr/0005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-041.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5679","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/175963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2574","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6377","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Apr/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-041.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/175963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0388","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"time server daemon timed allows remote attackers to cause a denial of service via malformed packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"1A059A03-D039-4FDC-A4E5-548A5D828A4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:28.timed.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-034.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_007_nkitserv.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6228","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:28.timed.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-034.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_007_nkitserv.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0389","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"768F751F-0878-4DD0-AC2F-14F4170A2323"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6453897-CA51-4143-B58D-689E0B69CE34"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/176100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2587","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/176100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0390","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE86316D-9345-4DAF-895C-C5CA3CE57DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"68CE1451-5A6F-462C-AF6E-8B89992F4D3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1:*:*:*:*:*:*:*","matchCriteriaId":"1A1F31DC-EDC7-400A-9AD1-2EBC5AA809AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9FE5EFB2-A795-4BAC-8583-DBA13C788E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"768F751F-0878-4DD0-AC2F-14F4170A2323"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce_hosting_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"19361055-8688-4620-937F-310B2BC06080"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.commerce_hosting_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F96A57EA-67E5-4C0C-8FF6-8AEDA18927B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:5.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B6453897-CA51-4143-B58D-689E0B69CE34"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/176100","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2588","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/176100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0391","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.4d7:*:windows:*:*:*:*:*","matchCriteriaId":"1D0EC8E9-20BC-4547-B341-9C5CB4A79CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5d4:*:windows:*:*:*:*:*","matchCriteriaId":"210EDBD3-9B2A-478A-A2DF-71D3C53866E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0277.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0392","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long string to the server port (2407), which causes the server to crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:navision:financials_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.60","matchCriteriaId":"BF8B4FD9-E67F-4823-809F-A70B33AC971E"},{"vulnerable":true,"criteria":"cpe:2.3:a:navision:financials_server:2.50:*:*:*:*:*:*:*","matchCriteriaId":"19CB78B9-C739-469E-A2BE-2DBB6CDB9D1B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98633100728473&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2539","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98633100728473&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0393","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:navision:financials_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"64E81A9F-0EBD-40DC-83CF-C9B85C4A763F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98637870623514&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637870623514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0394","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_pro:3.0.37:*:*:*:*:*:*:*","matchCriteriaId":"7BBC0944-9014-4403-98C3-35FF2B83AD50"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0425.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6295","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0425.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0395","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lightwavemo:consoleserver_3200_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"154E7000-4A6E-422F-BD39-39CCD1528126"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lightwavemo:consoleserver_3200:-:*:*:*:*:*:*:*","matchCriteriaId":"D570E489-5590-4407-ADFF-58AA53C565AD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2578","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0396","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lightwave:consoleserver:3200:*:*:*:*:*:*:*","matchCriteriaId":"FC62A9CE-B599-4DD0-B805-9B37E4F3D42F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2578","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0397","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silent_runner:silent_runner_collector_src:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"022107D2-0472-4C9C-A214-1665B0F9309C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0454.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0454.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0398","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT!  to misrepresent the attachment's type with a different icon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.0_build1336:*:*:*:*:*:*:*","matchCriteriaId":"084EE003-1E56-4B65-AB28-358741FE468A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.0_build1349:*:*:*:*:*:*:*","matchCriteriaId":"B94CB19A-DDB1-402F-A5B6-3CDFA8639C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"26E41CE9-3727-429F-8652-ED0CEF74B2D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.011:*:*:*:*:*:*:*","matchCriteriaId":"33822378-5851-4BBA-9A98-E5D8909B27C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.14:*:*:*:*:*:*:*","matchCriteriaId":"3B3AFB54-5BDE-4EDE-A777-6B05B44E3CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.15:*:*:*:*:*:*:*","matchCriteriaId":"CC04F4BA-DFA9-4FB6-A3BF-97FFD5BC031A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.015:*:*:*:*:*:*:*","matchCriteriaId":"36F2568E-1E61-4749-ADE1-1B0DCBE87B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.17:*:*:*:*:*:*:*","matchCriteriaId":"4FCFE1BA-D605-4B77-B571-F435FE7405B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.18:*:*:*:*:*:*:*","matchCriteriaId":"D3296E29-B191-4EE1-9EDF-5C0AE69BDA33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.19:*:*:*:*:*:*:*","matchCriteriaId":"9D52FF50-4D7F-44F3-80FD-4BFAC9AC5685"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.21:*:*:*:*:*:*:*","matchCriteriaId":"181A3410-54D6-485C-AC28-06E48A825C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.22:*:*:*:*:*:*:*","matchCriteriaId":"F05D5559-15FC-47F5-87D5-4D0E814342CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.028:*:*:*:*:*:*:*","matchCriteriaId":"544BED98-3945-48DB-928A-1A0CE3F990C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.029:*:*:*:*:*:*:*","matchCriteriaId":"85A90D9E-05D4-44BE-B7FD-57602C2307FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.31:*:*:*:*:*:*:*","matchCriteriaId":"05DDA935-C05D-46AF-B3DD-A5529C0128C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.031:*:*:*:*:*:*:*","matchCriteriaId":"3E144DEE-5213-4DDE-9930-EA516C80D7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.32:*:*:*:*:*:*:*","matchCriteriaId":"3399FFA7-E303-40F5-BDFA-90EADD19C208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.032:*:*:*:*:*:*:*","matchCriteriaId":"E5C5850E-09D0-46EF-A613-F1B103CD9499"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.33:*:*:*:*:*:*:*","matchCriteriaId":"85C2B9B2-DD49-490E-86B7-135326260160"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.34:*:*:*:*:*:*:*","matchCriteriaId":"86B231CC-E436-457D-8D8D-4D1971D3FD05"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.035:*:*:*:*:*:*:*","matchCriteriaId":"E7023CE9-3DB4-4738-AF06-6F2B989668C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.35:*:*:*:*:*:*:*","matchCriteriaId":"D5F47E42-6739-4602-B25C-9CACFA977F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.036:*:*:*:*:*:*:*","matchCriteriaId":"43B5423C-60AE-41BE-944A-CD3902F0A17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.36:*:*:*:*:*:*:*","matchCriteriaId":"5604D485-A03E-4210-98B5-D39D28E6F293"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.037:*:*:*:*:*:*:*","matchCriteriaId":"9F3743A1-1975-435C-9ACD-A2290780D8F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.39:*:*:*:*:*:*:*","matchCriteriaId":"BA40F4C2-9D62-469E-876A-DC5D86DDBD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.039:*:*:*:*:*:*:*","matchCriteriaId":"F59D78DA-8C12-49C3-B917-D63B79904212"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.041:*:*:*:*:*:*:*","matchCriteriaId":"90E7D893-E296-4EBA-AE60-C538830FBC34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.41:*:*:*:*:*:*:*","matchCriteriaId":"8F9FF964-0F8C-4BC7-9A9B-5FC278A4B87C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.42:*:*:*:*:*:*:*","matchCriteriaId":"D638165C-8FF9-4F43-82EA-E5B0DCCB6979"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.42f:*:*:*:*:*:*:*","matchCriteriaId":"696EAFFC-E15B-4712-BAE5-BFB0CC8EF5FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.043:*:*:*:*:*:*:*","matchCriteriaId":"CC11BF56-636B-49CD-9530-5DA80F1C55B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.43:*:*:*:*:*:*:*","matchCriteriaId":"BB625E0E-5BC7-4D28-BC4B-D4BE50DDA7BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.44:*:*:*:*:*:*:*","matchCriteriaId":"1CB4C5BA-0EDD-48C7-9846-BEE538EE9F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.45:*:*:*:*:*:*:*","matchCriteriaId":"57FA3866-D2B1-4304-9830-F1F9D3F6D6E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.46:*:*:*:*:*:*:*","matchCriteriaId":"CD1C920F-3073-430A-9BBF-B7C678C74304"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.47:*:*:*:*:*:*:*","matchCriteriaId":"F1770FB0-8197-41A9-BBD6-895EA6CEFC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.48:*:*:*:*:*:*:*","matchCriteriaId":"61073DA3-6237-4EC2-8322-7F0A92390404"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.49:*:*:*:*:*:*:*","matchCriteriaId":"097487F8-5267-4C64-A0E7-E586633C4BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.101:*:*:*:*:*:*:*","matchCriteriaId":"06C3CD97-73DD-4273-BB6E-0071B3118997"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2530","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0399","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B2019C22-B81F-434F-9D41-77C85EF26C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:1.3:*:*:*:*:*:*:*","matchCriteriaId":"919D7892-0BFD-49C3-B882-9D6956B39059"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98633597813833&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2533","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98633597813833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0400","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters (\"`\") in the email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_tourtillott:nph-maillist:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F4618E2A-A483-453B-BB7A-A8111A8230A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_tourtillott:nph-maillist:3.5:*:*:*:*:*:*:*","matchCriteriaId":"5C1FC50B-6FB0-49D3-ACFB-AF1D49468140"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/175506","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2563","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/175506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0401","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9","matchCriteriaId":"7B1F21FE-C4F7-4760-B565-32D4D679BC93"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0394.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2475","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6284","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0394.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0402","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.16","matchCriteriaId":"16BB8130-BE94-44C4-B816-24ED25FA3EE7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"1A059A03-D039-4FDC-A4E5-548A5D828A4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98679734015538&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6331","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98679734015538&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0403","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6267","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0404","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:javaserver_web_dev_kit:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B524CC6-D1DE-4CCE-8D3D-3F9244BC96AA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98583089425166&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98583089425166&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0405","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-052.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-084.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2602","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6390","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0406","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.7","matchCriteriaId":"433B7E7E-FD46-4544-A742-F27F697962FC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-048","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/670568","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2617","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/670568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0407","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"3.23.36","matchCriteriaId":"AA98B50C-8BC5-464F-8280-3D0BB3139C16"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2522","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6617","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0408","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.7:*:*:*:*:*:*:*","matchCriteriaId":"826F3339-8674-4A84-8EAC-17C884BBF723"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98593106111968&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_012_vim.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-008.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2510","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6259","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98593106111968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_012_vim.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0409","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.7:*:*:*:*:*:*:*","matchCriteriaId":"826F3339-8674-4A84-8EAC-17C884BBF723"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_012_vim.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6628","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_012_vim.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0410","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long \"From\" header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_buster_2001:8.02:*:*:*:*:*:*:*","matchCriteriaId":"B621B982-2558-4F2E-96E7-0CAB394596E3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98593642520755&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98593642520755&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0411","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:reliant_unix:5.44:*:*:*:*:*:*:*","matchCriteriaId":"B43A1024-5844-4FAB-8D9E-913B05311B90"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98658209505849&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98658209505849&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0412","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11050:*:*:*:*:*:*:*:*","matchCriteriaId":"B327940A-8884-4B45-8981-D1F19A318DCA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11150:*:*:*:*:*:*:*:*","matchCriteriaId":"E3D01950-FFD4-4491-9C95-59AE911722F9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11800:*:*:*:*:*:*:*:*","matchCriteriaId":"3B4A3675-9561-434E-A2C0-AF56CBD30560"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1784","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6322","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0413","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which causes the router to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:bintec:x1000:*:*:*:*:*:*:*:*","matchCriteriaId":"1FD931A4-953D-4AD4-AF86-830B9F02EA45"},{"vulnerable":true,"criteria":"cpe:2.3:h:bintec:x1200:*:*:*:*:*:*:*:*","matchCriteriaId":"AE3F253B-9D50-4857-9CA8-5D5A3F8BFEB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:bintec:x4000:5.1.6_patch_10:*:*:*:*:*:*:*","matchCriteriaId":"C98B5B96-2172-4955-A0B9-2882C0D9579C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0145.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98644414226344&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98659862317070&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98697054804197&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6323","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0145.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98644414226344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98659862317070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98697054804197&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0414","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.99k","matchCriteriaId":"CF199B85-897C-4943-B398-D13DB02B325A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99:*:*:*:*:*:*:*","matchCriteriaId":"D012BE75-E487-4000-B333-1D469B57F101"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99a:*:*:*:*:*:*:*","matchCriteriaId":"FDB1B651-5676-44FC-B6D0-8737D908D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99b:*:*:*:*:*:*:*","matchCriteriaId":"40663322-8C12-4046-AFBD-745CB3EBFE92"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99c:*:*:*:*:*:*:*","matchCriteriaId":"D9181AB6-F355-4D10-8403-9DF274355737"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99d:*:*:*:*:*:*:*","matchCriteriaId":"9719DE80-2794-47B8-848F-983242E531D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99e:*:*:*:*:*:*:*","matchCriteriaId":"7ADE19A4-7B59-4C84-9066-6C3AA5FA8304"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99f:*:*:*:*:*:*:*","matchCriteriaId":"970FAF36-C8D0-430C-9483-4C67F9DB690A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99g:*:*:*:*:*:*:*","matchCriteriaId":"287ED1AD-81BC-4A40-9A6B-29FE1CBA515A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99h:*:*:*:*:*:*:*","matchCriteriaId":"EF3ABACC-D6C7-4A39-90AD-FA5813F0FBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99i:*:*:*:*:*:*:*","matchCriteriaId":"5B2F052D-C68E-4AA8-B9B3-DD242E4F82EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:ntpd:4.0.99j:*:*:*:*:*:*:*","matchCriteriaId":"824B45DF-C2A6-4B6F-9595-9E408081D6EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:xntp3:5.93:*:*:*:*:*:*:*","matchCriteriaId":"6237A767-1E7E-42E8-BDA3-72BB63E89BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:xntp3:5.93a:*:*:*:*:*:*:*","matchCriteriaId":"5D8545F7-2471-49D5-9F8C-2ADACD361083"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:xntp3:5.93b:*:*:*:*:*:*:*","matchCriteriaId":"5F53ED01-2593-4726-8A51-AD65E06C7C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:xntp3:5.93c:*:*:*:*:*:*:*","matchCriteriaId":"45D83E60-8264-42D1-A2C0-A08A507F4242"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:xntp3:5.93d:*:*:*:*:*:*:*","matchCriteriaId":"FE2B6651-A5F4-4A31-BCC4-9EBB0F491E40"},{"vulnerable":true,"criteria":"cpe:2.3:a:dave_mills:xntp3:5.93e:*:*:*:*:*:*:*","matchCriteriaId":"8BD50BB0-8FBC-4699-A1C0-411F8C9B7B48"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:31.ntpd.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2001-004.txt.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/sse073.ltr","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/SSE/sse074.ltr","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0127.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0225.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0314.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000392","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Apr/0000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98642418618512&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98654963328381&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98659782815613&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98679815917014&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98683952401753&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684202610470&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684532921941&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-013.0.txt","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-036.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/805","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2540","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6321","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3831","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2001/dsa-045","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:31.ntpd.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2001-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/SSE/sse073.ltr","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/SSE/sse074.ltr","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Apr/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98642418618512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98654963328381&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98659782815613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98679815917014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98683952401753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684202610470&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684532921941&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-013.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-036.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2001/dsa-045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0415","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redi:rediplus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9368BA95-CA4D-4D85-82D6-FEA0B7FC2CC0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0275.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2495","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6276","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0275.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6276","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0416","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:sgml-tools:1.0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"8AAE68C9-1A01-4457-912C-4250139A676F"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000390","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98477491130367&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-038","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-030.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_016_sgmltool_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-027.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2506","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2683","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6201","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98477491130367&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-030.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_016_sgmltool_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0417","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"45E4C7CB-044F-47C6-AB40-9D3542CB6326"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"2B904DCE-D59F-45C7-A814-DE42CF02792D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0078.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-025.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-025.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0418","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncm:ncm_content_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"FE3036E9-F8E7-4885-8D22-40B92FB80B3F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0223.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2584","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0419","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0C0B5D7D-0F8C-4AA4-B0C4-895F17F124E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98692227816141&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2569","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98692227816141&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0420","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:way_to_the_web:talkback:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8FFEB41D-8D45-460B-9CB5-E5CF639B75E5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0128.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0128.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0421","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9","matchCriteriaId":"7B1F21FE-C4F7-4760-B565-32D4D679BC93"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/177200","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2601","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/177200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0422","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0158.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2561","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6343","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A555","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0423","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerability than CAN-2002-0093."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0217.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2581","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6369","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0217.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0424","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C003C029-AF0D-4A81-BB76-162CFAEE2953"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl1:*:*:*:*:*:*:*","matchCriteriaId":"2EE380D1-55D7-48CC-BF42-71CB1DF7AE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl2:*:*:*:*:*:*:*","matchCriteriaId":"18915FDD-2978-46B5-B8F0-A96F6D31729B"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl3:*:*:*:*:*:*:*","matchCriteriaId":"27D4BDF1-88D7-460D-88CB-043A93D8BB6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl4:*:*:*:*:*:*:*","matchCriteriaId":"5345E8C1-FAFF-4630-8206-C120698A9A47"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl6:*:*:*:*:*:*:*","matchCriteriaId":"938F7CF1-EE42-49FA-B2C8-06EF6916580A"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl7:*:*:*:*:*:*:*","matchCriteriaId":"CBB77607-2392-4268-B76B-90AD8A8D5DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl8:*:*:*:*:*:*:*","matchCriteriaId":"81BDABAC-C602-4AD7-A1B6-E71D3276D7FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.0pl9:*:*:*:*:*:*:*","matchCriteriaId":"458E695D-5AF8-48EC-ACA8-C96AE655E420"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1:*:*:*:*:*:*:*","matchCriteriaId":"33E6CB6B-4DA7-4652-B008-5429198888F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test1:*:*:*:*:*:*:*","matchCriteriaId":"12A4FDBF-0E87-439C-A6F6-AF55009714A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test2:*:*:*:*:*:*:*","matchCriteriaId":"E7B539BB-5A06-4D02-BEBF-9808842930F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test3:*:*:*:*:*:*:*","matchCriteriaId":"9C128ACA-693A-4ADE-BB0A-636E3C4ACB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test4:*:*:*:*:*:*:*","matchCriteriaId":"7F5130AE-A6E7-4FB9-8E05-22BFF782A9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test5:*:*:*:*:*:*:*","matchCriteriaId":"E21C41C3-47B8-4489-8B6C-A45E18A80F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test6:*:*:*:*:*:*:*","matchCriteriaId":"0C7E4F3D-4DD8-4716-81F8-6E77C93B609A"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.1test7:*:*:*:*:*:*:*","matchCriteriaId":"A548C63F-39CD-4BFB-B55C-52FC5F0165B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D678184D-3A09-44D8-9019-C77D8662C383"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.2test1:*:*:*:*:*:*:*","matchCriteriaId":"1E7702CB-8862-458A-BABC-3F9F8FF85DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.3:*:*:*:*:*:*:*","matchCriteriaId":"78654BAA-CFA9-43B4-BFA8-84DFFDBA2BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.21:*:*:*:*:*:*:*","matchCriteriaId":"5D59FA70-FE73-458E-B269-6985C136783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.21test1:*:*:*:*:*:*:*","matchCriteriaId":"D79A2E80-46DC-41AD-964B-1B9C25EDFB70"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.22:*:*:*:*:*:*:*","matchCriteriaId":"38505D60-E48E-493F-8573-A1184169EA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.23:*:*:*:*:*:*:*","matchCriteriaId":"538560BE-C6DD-4C80-B0B4-FF1995D74FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:bubblemon:1.31:*:*:*:*:*:*:*","matchCriteriaId":"A8C39DD2-84C4-4CBD-9E90-08FB0003E544"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98744422105430&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2609","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98744422105430&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0425","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to verify login information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:0.77:*:*:*:*:*:*:*","matchCriteriaId":"CEF57436-6A31-4FC6-ACEB-80964D4CB644"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:0.78b:*:*:*:*:*:*:*","matchCriteriaId":"05F8CC7D-06BF-4066-B81E-E90938CC63B0"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/163942","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2393","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/163942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0426","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0427","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:vpn_3000_concentrator:*:*:*:*:*:*:*:*","matchCriteriaId":"24BE2649-D823-486B-8F6C-4B8128EC2795"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:vpn_3005_concentrator:*:*:*:*:*:*:*:*","matchCriteriaId":"E098419B-1B9E-4191-9C72-65CE43E38F3B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:vpn_3015_concentrator:*:*:*:*:*:*:*:*","matchCriteriaId":"0A512328-2FD0-4B1D-9327-A13A0BCE9C0D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:vpn_3030_concentator:*:*:*:*:*:*:*:*","matchCriteriaId":"6548F964-B8EE-4B39-87CF-99743D41C42C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:vpn_3060_concentrator:*:*:*:*:*:*:*:*","matchCriteriaId":"E08810E6-33B6-45FF-91C7-EED10DC023EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:vpn_3080_concentrator:*:*:*:*:*:*:*:*","matchCriteriaId":"2BD1A1AC-980F-428E-8BAF-0FC821014868"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-telnet-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5643","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6298","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-telnet-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0428","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-ipoptions-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1786","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2573","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6360","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-ipoptions-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0429","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network storm and a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"04E2E594-8B82-476B-96A6-C713FE1FA06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D105C909-39B4-4B35-9D6E-3BC78491759F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"C762F4B3-4F3D-4EE8-A914-1900AE4AA1C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"B4C5BA8E-2A45-4952-AEE4-94CBE8B4B855"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"C95B56F4-CDD1-4102-BB33-C66D3CDAC6C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"AA37670F-3FF4-476E-AA4A-7F98229C6EB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4A7AFDED-7F44-438D-9FFD-270856A41275"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-072.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cat5k-8021x-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2604","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6379","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-072.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cat5k-8021x-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0430","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.4","matchCriteriaId":"E6DA9BBC-21A5-4B1D-8459-4929369B82EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://www.osvdb.org/5642","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6388","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2001/dsa-046","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2001/dsa-046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0431","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in iPlanet Web Server Enterprise Edition 4.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.x_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"CBC5013D-A086-4A7A-B433-6526983E638C"}]}]}],"references":[{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html","source":"cve@mitre.org"},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html","source":"cve@mitre.org"},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0432","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC14336-CD53-44F7-B271-3C98C016295B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0218.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2579","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0433","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:micheal_lamont:savant_webserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"27BBC528-CF19-44F3-8DE8-AD1D2C7EF88C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98655083231635&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98655083231635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0434","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:presario:*:*:*:*:*:*:*:*","matchCriteriaId":"F6EE74D7-F1AF-4E84-AC9E-8B17A44A03FF"}]}]}],"references":[{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0716-01.shtml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6355","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0716-01.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0435","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the \"Cache passphrase while logged on\" option and capturing the passphrases of other share holders as they authenticate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A50605E3-3955-44C8-883C-B5D7598FF8C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98691775527457&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98691775527457&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0436","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2D5C5D80-B6E6-44DC-B9D4-CE6DBC6CAA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3EA26ADB-8D94-4C9E-97BB-24AE9FD47984"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54FA798C-D639-4E2A-9D8E-300E93A097ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CA418C3B-B98C-4A8E-92E9-7280A9D61B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:5.0:*:*:*:*:*:*:*","matchCriteriaId":"391D155A-F680-4D9E-AD43-7D6A26EF5557"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5FF2D08-2062-41E8-988F-40A2B6F95ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum_2000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"99889032-ADA3-45AE-A98C-0DC256E32571"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.dcscripts.com/FAQ/sec_2001_03_31.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/3862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2611","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6392","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.dcscripts.com/FAQ/sec_2001_03_31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/3862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0437","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2D5C5D80-B6E6-44DC-B9D4-CE6DBC6CAA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3EA26ADB-8D94-4C9E-97BB-24AE9FD47984"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"54FA798C-D639-4E2A-9D8E-300E93A097ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CA418C3B-B98C-4A8E-92E9-7280A9D61B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:5.0:*:*:*:*:*:*:*","matchCriteriaId":"391D155A-F680-4D9E-AD43-7D6A26EF5557"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5FF2D08-2062-41E8-988F-40A2B6F95ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum_2000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"99889032-ADA3-45AE-A98C-0DC256E32571"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dcscripts.com/FAQ/sec_2001_03_31.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2611","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6393","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dcscripts.com/FAQ/sec_2001_03_31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0438","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_mac:initial:*:*:*:*:*:*:*","matchCriteriaId":"E497267A-3BE9-4CFB-8A8B-81EAE6651007"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0337.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0337.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0439","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"1C6FC4D2-53F1-448A-82E0-CA189099FF84"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5641","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-022.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-023.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6261","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0440","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"1C6FC4D2-53F1-448A-82E0-CA189099FF84"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"48F068BE-F5B3-4E43-8E6A-24AB4D2DEDF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.0es:*:*:*:*:*:*:*","matchCriteriaId":"6529EC98-7CF7-47A1-95BB-2F34066FE95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FFDAB801-AAA0-4B3B-B488-52E7BA8650C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"612AC3B1-8E55-437F-9600-67EA1A8BAD48"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:ecommerce:*:*:*:*:*:*:*","matchCriteriaId":"FB63DADC-A9AE-4FBA-BCCA-9714646DBD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:prg_graficos:*:*:*:*:*:*:*","matchCriteriaId":"41830323-33C3-42C5-BC23-3196CC900452"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5601","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-022.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-023.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6645","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0441","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"2424DDDB-8C74-42F8-B131-791AD8CEFF63"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0610.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000383","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98471253131191&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-040","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-028.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-028.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2493","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6213","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-04/0610.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98471253131191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-028.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-028.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6213","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0442","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:mercury_nlm:1.45:*:*:*:*:*:*:*","matchCriteriaId":"E2A5D227-5A44-42DE-BAC1-B5E6133287F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:mercury_nlm:1.46:*:*:*:*:*:*:*","matchCriteriaId":"A40B5122-4B47-4DE9-8124-69DFF5A49E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:mercury_nlm:1.47:*:*:*:*:*:*:*","matchCriteriaId":"80F491EB-7304-485A-929E-B741E930534F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0378.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/179217","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6444.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2641","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/179217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6444.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0443","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (1) a long username, or (2) a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_net:5.0:*:*:*:*:*:*:*","matchCriteriaId":"79213ABB-0E34-46F4-801C-FC43EF63AD2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_term_plus:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CF02D3FE-DED2-44C4-9192-FDABB8D7DAE0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0227.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0444","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco CBOS 2.3.0.053 sends output of the \"sh nat\" (aka \"show nat\") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.053:*:*:*:*:*:*:*","matchCriteriaId":"E6DD1729-97A2-4BE6-8DB0-5A1D7CC4285D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FB7AF093-B5E2-4C4F-997B-5ECB5192A524"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0380.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/1796","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2635","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6453","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0380.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/1796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0446","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CAE8EB5-A00C-4904-B0AE-7BC1892DAA74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98583082225053&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98583082225053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0447","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing \"%2e\" (dot dot) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2000a_2000.0.1.34:*:*:*:*:*:*:*","matchCriteriaId":"C0AA33D9-4759-4BEF-A88A-CD4758B072ED"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/171418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/171418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0448","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"2000a_1.0.34","matchCriteriaId":"E53C0964-AC6C-4EC6-BD60-9BEE37FB560D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/171418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/171418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0449","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FDE7DCD6-90B3-4259-9BE6-B9F7A30A64AF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/166211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6191","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/166211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0450","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"65B0D05E-9274-43C9-8827-FCEDEBE9CAE8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0533.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ftp-broker.com/cgibin/Pageexe.exe?H=4143&P=0&C=0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6189","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6190","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0533.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ftp-broker.com/cgibin/Pageexe.exe?H=4143&P=0&C=0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0451","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_admin_authenticated cookie value to 1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sentraweb:indexu:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8F4046FE-4B2C-464D-AAD2-7306EF9FF7BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentraweb:indexu:1.1:*:*:*:*:*:*:*","matchCriteriaId":"425B9163-A03B-4599-9473-8A46D096FBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sentraweb:indexu:2.0beta:*:*:*:*:*:*:*","matchCriteriaId":"9C976F15-EA19-4ABE-B359-026ADD3E795C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/167172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6202","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/167172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0452","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a \"CD *\" command followed by an ls command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.49_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC2914B2-66BA-456B-A039-13550948AAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.50_beta:*:*:*:*:*:*:*","matchCriteriaId":"CA12E02C-481A-46E8-A387-9CAB38D2B647"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.51_beta:*:*:*:*:*:*:*","matchCriteriaId":"F41C12F2-F82B-4FE3-9665-DFC14A2F1E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.52_beta:*:*:*:*:*:*:*","matchCriteriaId":"06A8BEDC-85D8-4BC4-B657-F1BF37491B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.60_beta:*:*:*:*:*:*:*","matchCriteriaId":"3401FB78-3633-4705-B79F-5AD5344437D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.61_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C160CE-CAD0-41B8-B2E2-6D450340C8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.62_beta:*:*:*:*:*:*:*","matchCriteriaId":"EB1A6D1E-718C-4495-92C6-CC81FE74D059"}]}]}],"references":[{"url":"http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/180506","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2676","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/180506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0453","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.49_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC2914B2-66BA-456B-A039-13550948AAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.50_beta:*:*:*:*:*:*:*","matchCriteriaId":"CA12E02C-481A-46E8-A387-9CAB38D2B647"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.51_beta:*:*:*:*:*:*:*","matchCriteriaId":"F41C12F2-F82B-4FE3-9665-DFC14A2F1E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.52_beta:*:*:*:*:*:*:*","matchCriteriaId":"06A8BEDC-85D8-4BC4-B657-F1BF37491B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.60_beta:*:*:*:*:*:*:*","matchCriteriaId":"3401FB78-3633-4705-B79F-5AD5344437D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.61_beta:*:*:*:*:*:*:*","matchCriteriaId":"02C160CE-CAD0-41B8-B2E2-6D450340C8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:brs:webweaver:0.62_beta:*:*:*:*:*:*:*","matchCriteriaId":"EB1A6D1E-718C-4495-92C6-CC81FE74D059"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0519.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2675","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0519.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0454","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (modified dot dot) in the HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whitsoft:slimserve:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1a","matchCriteriaId":"9671106E-BE27-456C-94B4-C08C68AA4802"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0532.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6186","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0532.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0455","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:aironet_340:*:*:*:*:*:*:*:*","versionEndIncluding":"8.55","matchCriteriaId":"C809CB22-EE1E-4771-8D98-1474F432042C"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/Aironet340-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5597","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6200","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/Aironet340-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0456","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"postinst installation script for Proftpd in Debian 2.2 does not properly change the \"run as uid/gid root\" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-032","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6208","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0457","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-035","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5631","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6211","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0458","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"DAEFD4F6-73A1-4011-ABAE-5C5E86CB535A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"CB4D88BA-5427-4A46-942C-C93679C9D808"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-034","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-027.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_008_eperl.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2464","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6198","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-027.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_008_eperl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0459","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, or (3) -f option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:afterstep.org:afterstep:*:*:*:*:*:*:*:*","matchCriteriaId":"47FCC028-D331-44A5-900F-9FF76071E80C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_malda:ascdc:0.3:*:*:*:*:*:*:*","matchCriteriaId":"4ED4C00B-DEBC-4E21-B90F-988C781D9925"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98408897106411&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6204","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98408897106411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0460","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:baltimore_technologies:websweeper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"ACA513AF-DAEF-4487-8042-FC24FC7A1323"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/167406","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6214","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/167406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0461","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denis_howe:foldoc:*:*:*:*:*:*:*:*","matchCriteriaId":"393D2F69-9B58-4E7F-94AE-024E49E61ED2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0109.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://wombat.doc.ic.ac.uk/foldoc/index.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5591","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6217","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wombat.doc.ic.ac.uk/foldoc/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0462","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"23403C58-6B9E-431A-A855-87F31AFE8CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D837823B-EF12-4672-9D11-F4790D22686D"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B7F886F6-044A-4CF8-9286-B93F15008FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"FC10848B-126E-4B3D-BCEA-11D7FB1CFB34"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8855D4B4-C139-448A-936C-7937DFE91FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.1:*:*:*:*:*:*:*","matchCriteriaId":"24CBCEBA-3B81-4E9D-AE18-8B9A63AD5260"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.2:*:*:*:*:*:*:*","matchCriteriaId":"2839E926-6E45-49D3-8782-2CB6146582E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_christensen:perl_web_server:0.3:*:*:*:*:*:*:*","matchCriteriaId":"3B9E01E4-D4F7-4801-9F65-235F988227A0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0426.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2648","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6451","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0426.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0463","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (dot dot) in the p0 parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C009F261-6B9F-4B64-BE7B-85EC77B80829"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.4:*:*:*:*:*:*:*","matchCriteriaId":"2E5FF66A-D8B0-4A27-9981-1D4F409BFDB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.5:*:*:*:*:*:*:*","matchCriteriaId":"12F18B59-48D0-4ABB-A62E-ACB47A6B689A"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.6:*:*:*:*:*:*:*","matchCriteriaId":"814D9461-2D66-48B3-B9E6-AA61A1C05D9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.7:*:*:*:*:*:*:*","matchCriteriaId":"342A2EB6-8A6A-4C5D-A39A-C6EE930029B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.9:*:*:*:*:*:*:*","matchCriteriaId":"1B167AA3-B307-41D4-B8C9-EF690E3246ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.9a:*:*:*:*:*:*:*","matchCriteriaId":"B0410C42-F44D-4D03-983E-D3871F038768"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.9b:*:*:*:*:*:*:*","matchCriteriaId":"8FE26684-265C-467A-B553-2A6BDC5A9AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.9c:*:*:*:*:*:*:*","matchCriteriaId":"4BF775BD-E23F-47C3-B37A-DDA39B2132E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.9d:*:*:*:*:*:*:*","matchCriteriaId":"243806A7-924B-4CDB-BB5D-81BAA96E984E"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.9e:*:*:*:*:*:*:*","matchCriteriaId":"F568B484-6047-4209-ABB9-026E3D7661B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.13:*:*:*:*:*:*:*","matchCriteriaId":"133A50F8-E554-4A91-92B0-BC15B82FFF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.18:*:*:*:*:*:*:*","matchCriteriaId":"6F27DAA5-ADBA-4EAB-8FE3-0D655A7078F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.80:*:*:*:*:*:*:*","matchCriteriaId":"5449F646-02D5-40E9-A417-CD9E7D32DA06"},{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:perlcal:2.95:*:*:*:*:*:*:*","matchCriteriaId":"00CC8BAE-6595-4014-9947-105548724EE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0506.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.perlcal.com/calendar/docs/bugs.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2663","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6480","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0506.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.perlcal.com/calendar/docs/bugs.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0464","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crosswind:cyberscheduler:2.1:*:*:*:*:*:*:*","matchCriteriaId":"1A127F05-BB0B-4673-BAA5-23E971F6B577"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98761402029302&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2628","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98761402029302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0465","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intuit:turbo_tax:*:*:*:*:*:*:*:*","matchCriteriaId":"5C18415D-C5E2-4844-AE41-701F2C543516"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98653594732053&w=2","source":"cve@mitre.org"},{"url":"http://www.turbotax.com/atr/update/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6622","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653594732053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbotax.com/atr/update/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0466","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microburst:ustorekeeper_online_shopping_system:1.61:*:*:*:*:*:*:*","matchCriteriaId":"0783B903-6B6F-4872-937D-2482DD9DF93A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98633176230748&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98633176230748&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0467","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \\... (modified dot dot) in an HTTP URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robtex:viking_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7","matchCriteriaId":"8519E5CA-BF3C-4B6A-B7CD-EEA41E8EDE3E"}]}]}],"references":[{"url":"http://www.robtex.com/files/viking/beta/chglog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/178935","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2643","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6450","source":"cve@mitre.org"},{"url":"http://www.robtex.com/files/viking/beta/chglog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/178935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0468","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FTPFS allows local users to gain root privileges via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ftpfs:ftpfs:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"79AE5570-4DB0-4070-8D81-E9426680CC47"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0163.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6234","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0469","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2","matchCriteriaId":"9C2055FF-F77D-408F-AD0C-D7C963636293"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2001-03/0163.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2473","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6229","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/freebsd/2001-03/0163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0470","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0160.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0181.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6239","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0160.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0471","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.30","matchCriteriaId":"1D7E8D03-737F-4751-9663-39F86F23B21F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/160648","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2345","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/160648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0472","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:high_availability_cluster_multiprocessing:1.0:*:*:*:*:*:*:*","matchCriteriaId":"07C70867-8330-42CF-A11B-4169AED6B8BB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0243.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6250","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0473","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5","matchCriteriaId":"922D20A2-43EB-45FE-B01C-CBFBE66FA435"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"C74C8F2C-92F4-4A9F-BF5A-8B5DF1A50DC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0246.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000385","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98473109630421&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-031.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5615","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-029.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6235","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98473109630421&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-031.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0474","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_paul:mesa:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3-14","matchCriteriaId":"0207569D-FAAE-4628-A42B-E16BC2852F7E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-029.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6231","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-029.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0475","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"CF3D55F5-58F7-41DE-A863-4AD95C0CBDF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0_beta_2","matchCriteriaId":"4232E1ED-B973-4DED-B94A-5F22CC3AC5A4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2474","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6237","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0476","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swsoft:aspseek:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"25FF5D85-86A2-4815-9340-D270F7FEF3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:swsoft:aspseek:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FFF90A40-1D92-43A8-8B66-D99380C6713D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.aspseek.org/changes.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2492","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6248","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.aspseek.org/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0477","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in WebCalendar 0.9.26 allows remote command execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AE2EABBA-AE17-44B6-9789-6E24D794A3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"25AD3E54-46F8-4DE0-86CE-D5D3FF079787"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"3857C666-0421-4EC8-80F4-2A62D44A1DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"9C4AA766-E1FC-4AEA-A2C6-9998A395F978"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"83918F72-9289-4C14-AC44-46A848DD0487"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"EAC57185-15AA-414B-9779-AF89170B9E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"C7E93824-0B9A-4B6C-A60B-78942160DF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*","matchCriteriaId":"C7D31CCF-3D1C-472F-B940-758A607111BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E2B148A-C41F-44C7-A044-002F25FA06C8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0392.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0392.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0478","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.0","matchCriteriaId":"BC697214-63D7-4833-A3ED-F9FB9E3E4CE4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2642","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0479","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6B268F49-4F3A-4D05-8079-05EB75E1AE8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phppgadmin:phppgadmin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0F2CCA02-7AE3-4CF8-A514-ABCC16CDF435"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.greatbridge.org/project/phppgadmin/cvs/checkout.php/phpPgAdmin/ChangeLog?r=1.13","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/2640","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.greatbridge.org/project/phppgadmin/cvs/checkout.php/phpPgAdmin/ChangeLog?r=1.13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/2640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0480","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alex_linde:alexs_ftp_server:0.7:*:*:*:*:*:*:*","matchCriteriaId":"38A57C6C-A816-4434-9F98-ACBC2074438C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0523.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2668","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0523.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0481","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-043.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5612","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6494","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-043.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0482","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argus_systems:pitbull_lx:*:*:*:*:*:*:*:*","matchCriteriaId":"62F7996F-F979-471F-916F-5BA70BE42F08"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0475.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6623","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0475.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0483","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2678E925-06BD-4C3F-8223-93E070B4035E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0359.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/171953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2517","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0359.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/171953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0484","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tek:phaserlink:850:*:*:*:*:*:*:*","matchCriteriaId":"6F9BCBB3-744B-4118-95ED-EC1583A62FF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0482.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6482","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0482.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0485","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010701-01-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0475.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0502.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8571","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2656","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6473","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010701-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0475.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0502.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0486","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6","matchCriteriaId":"16B6A15B-E4C0-42FA-ADE3-FF2326287392"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0020.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98779821207867&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98865027328391&w=2","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2959062.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2623","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6429","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98779821207867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98865027328391&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2959062.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2623","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0487","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:aix_snmp:*:*:*:*:*:*:*:*","matchCriteriaId":"08C63C08-FCB0-4012-A340-8E00BD301103"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6996.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5611","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6996.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0488","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:*","matchCriteriaId":"CE98EAD2-838F-42A2-BC90-F739A6639D47"}]}]}],"references":[{"url":"http://www.osvdb.org/2188","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2646","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0104-149","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6447","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0104-149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0489","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gftp:gftp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.7","matchCriteriaId":"DCEF3C63-C6F6-437D-AE2C-034C6A17BBE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/redhat/2001-q2/0043.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0231.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-057","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1805","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2657","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6478","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/redhat/2001-q2/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0490","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.6x:*:*:*:*:*:*:*","matchCriteriaId":"C5E3DB21-0E4F-409E-A60B-CBFFD71BBB1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.7x:*:*:*:*:*:*:*","matchCriteriaId":"73F7F13A-D45B-4AA9-9CD3-D4E285791E37"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0491","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:team_johnlong:raidenftpd:2.1_build_947:*:*:*:*:*:*:*","matchCriteriaId":"C995E1DF-49D2-45DC-B7CD-7B985C83A5C8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0465.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6455","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0465.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0492","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcruiser_software:netcruiser_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.2.8","matchCriteriaId":"7762D185-49D6-4F0C-8D3B-84F3967B4DD1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0427.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6468","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0427.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0493","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:2.03:*:*:*:*:*:*:*","matchCriteriaId":"0011C1E5-B99E-41F7-B0A3-6B577955393E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0428.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://home.lanck.net/mf/srv/index.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6446","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://home.lanck.net/mf/srv/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0494","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.06","matchCriteriaId":"D1BC8BC2-D87C-49D8-AB9F-E6E23D87FBE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0433.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6445","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0433.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0495","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datawizard:webxq:2.1.204:*:*:*:*:*:*:*","matchCriteriaId":"0F8E4E26-C3AD-4831-BA1C-AC6C116E1844"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0490.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1799","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2660","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6466","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0490.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0496","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*","matchCriteriaId":"02362C25-B373-4FB1-AF4A-2AFC7F7D4387"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-046.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-059.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6856","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-046.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0497","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2.4","matchCriteriaId":"EF10C094-5F02-4490-8DF8-DD777D18B3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0","versionEndIncluding":"9.1.2","matchCriteriaId":"4EC30039-F6D1-48A7-A419-8A6EC896C67A"}]}]}],"references":[{"url":"http://www.osvdb.org/5609","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://xforce.iss.net/alerts/advise78.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6694","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/5609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://xforce.iss.net/alerts/advise78.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0498","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.7","matchCriteriaId":"9459AC46-5095-4EEF-BD8B-4BBA3A5CE7B4"}]}]}],"references":[{"url":"http://www.nai.com/research/covert/advisories/049.asp","source":"cve@mitre.org"},{"url":"http://www.nai.com/research/covert/advisories/049.asp","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0499","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.7","matchCriteriaId":"9459AC46-5095-4EEF-BD8B-4BBA3A5CE7B4"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-16.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/620495","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/050.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2941","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6758","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/620495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nai.com/research/covert/advisories/050.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0500","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:indexing_service:*:*:windows_2000:*:*:*:*:*","matchCriteriaId":"3091F662-8B47-4AB6-B82B-9E644ED7DC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:beta:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"45149241-EFAC-49A8-B9B8-42983B7547B7"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-13.html","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-098.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6705.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/191873","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2880","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-033","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A197","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-098.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6705.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/191873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0501","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:*:*:*:*:*:*:*:*","versionEndIncluding":"2002","matchCriteriaId":"379E92A7-225D-4941-A349-582E9AD7D050"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*","matchCriteriaId":"645B78F8-9AD7-4707-9CAD-5DC79475D971"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*","matchCriteriaId":"FAC7BEA9-AA9B-4FFA-BC09-DD41F7E3EAC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*","matchCriteriaId":"682961C4-A208-403F-8C3B-1E08F0414EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*","matchCriteriaId":"E56F9283-7EE3-4F50-AFB6-09CDC06A5121"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:98:*:mac:*:*:*:*:*","matchCriteriaId":"9906CF1D-CCBB-4A23-A519-C22364043C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"FEE7CC21-A458-49BB-B437-D5DF09339D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*","matchCriteriaId":"8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr2:*:*:*:*:*:*","matchCriteriaId":"9F1BF285-B35A-483E-8834-57589C3BA574"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2001:*:mac:*:*:*:*:*","matchCriteriaId":"2B8E130D-ADE4-49DA-9362-3433CCC5B05C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99325144322224&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2876","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-034","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6732","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99325144322224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0502","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-101.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2929","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6745","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-101.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0503","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the \"NetMeeting Desktop Sharing\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:3.01:*:*:*:*:*:*:*","matchCriteriaId":"251998AE-7E0D-443F-8006-F5FCF688DA36"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/5368.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5608","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5368.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0504","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-107.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435963","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2988","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6803","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-107.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/435963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0505","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:services:2.0:*:unix:*:*:*:*:*","matchCriteriaId":"3E008FC7-F531-42D9-A270-7C5656504481"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/581603","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/994851","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3089","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6883","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/581603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/994851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0506","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the \"SSI privilege elevation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99802093532233&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/242541","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3190","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6984","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99802093532233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/242541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0507","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the \"System file listing privilege elevation\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/205069","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5607","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6985","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A909","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A912","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/205069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0508","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/182579","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6982.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5606","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2690","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/182579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6982.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0509","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.0:-:*:*:*:*:*:*","matchCriteriaId":"D823C88E-8560-469B-8655-4755E0484F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:-:*:*:*:*:*:*","matchCriteriaId":"EFD9D0A0-5403-4C8F-8614-2F7F2703C454"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"1EBF27CA-A9DC-4539-ABE9-DC59D63572E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8EBF51EB-AE3F-48AA-8AA9-99884F91CC76"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:-:*:*:*:*:*:*","matchCriteriaId":"EAA6977C-182F-4537-9140-7F33AC027C39"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2001-0513","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:*:*:*:*:*:*:*:*","matchCriteriaId":"795F83D5-953C-4BBF-896F-DBDAB813BAE2"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/105259","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5600","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise81.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6717","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/105259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise81.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0514","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain access to the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:atmel:802.11b_vnet-b_access_point:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"DF7000C3-14FE-4E82-9960-8FE4A770E6FF"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap11:*:*:*:*:*:*:*:*","matchCriteriaId":"D39E9CF7-1547-41E0-8438-ED046310251A"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:me102:*:*:*:*:*:*:*:*","matchCriteriaId":"26E90454-BC75-4482-A7C1-6CE7A6F9D024"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2896","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise83.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6576","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise83.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0515","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:7.3:*:*:*:*:*:*:*","matchCriteriaId":"67EE7CCD-D1DC-43CF-862C-3183A5422720"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:*:*:*:*:*:*:*:*","versionEndIncluding":"8.1.7","matchCriteriaId":"9459AC46-5095-4EEF-BD8B-4BBA3A5CE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EC58370-C10D-4559-81C8-C67B64EE2502"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0516","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:*:*:*:*:*:*:*:*","matchCriteriaId":"DC8C65AE-EF3B-4B02-B260-B32FB674956D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:*:*:*:*:*:*:*:*","matchCriteriaId":"795F83D5-953C-4BBF-896F-DBDAB813BAE2"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0517","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EC58370-C10D-4559-81C8-C67B64EE2502"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5590","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6715","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0518","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:*:*:*:*:*:*:*:*","matchCriteriaId":"795F83D5-953C-4BBF-896F-DBDAB813BAE2"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/alerts.htm","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6716","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/alerts.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise82.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0519","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_knowledge_systems:esafe_gateway:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F78DAD18-4C9A-4368-966B-67A42D0205D8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0282.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6580","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0282.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0520","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_knowledge_systems:esafe_gateway:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC7A08F2-F8B7-4C87-AB72-3030AC33CEC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0284.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6580","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0521","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_knowledge_systems:esafe_gateway:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC7A08F2-F8B7-4C87-AB72-3030AC33CEC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0285.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6580","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0522","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E1DEE6D0-8097-4451-9699-F17FAE499578"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:7.2:*:*:*:*:*:*:*","matchCriteriaId":"42ED2FF0-A7B9-45B2-845E-320084C1747D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:8.0:*:*:*:*:*:*:*","matchCriteriaId":"949ABA95-B06C-4398-AC26-1EC0D916DA69"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/188218","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-061","source":"cve@mitre.org"},{"url":"http://www.gnupg.org/whatsnew.html#rn20010529","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/403051","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1845","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-073.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2797","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6642","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/188218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnupg.org/whatsnew.html#rn20010529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/403051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0523","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeye_digital_security:secureiis:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F7175B8F-63A8-4416-A340-FFE0C6087B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:eeye_digital_security:securells:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"8EB61E66-C3D8-4681-9ED3-7DAC619A0A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6563","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6564","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0524","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eeye_digital_security:securells:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"8EB61E66-C3D8-4681-9ED3-7DAC619A0A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6574","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0525","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0193.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0195.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2749","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6577","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0526","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0258.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6626","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0527","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5FF2D08-2062-41E8-988F-40A2B6F95ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum_2000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"99889032-ADA3-45AE-A98C-0DC256E32571"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0122.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.dcscripts.com/dcforum/dcfNews/167.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2728","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6538","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.dcscripts.com/dcforum/dcfNews/167.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0528","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11i:*:*:*:*:*:*:*","matchCriteriaId":"9835D257-9664-4FBC-889D-C3465BC2D7D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2694","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6501","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0529","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9","matchCriteriaId":"A7932C9E-46B0-4B88-BB07-C98741E98D6C"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-010.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0322.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/188737","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-023.0.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/655259","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata29.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1853","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2825","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6676","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-010.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0322.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/188737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-023.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/655259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata29.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0530","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:spearhead:netgap_200:*:*:*:*:*:*:*:*","versionEndIncluding":"78","matchCriteriaId":"3D7451FD-1379-4518-90FB-8B67B62EC7F1"},{"vulnerable":true,"criteria":"cpe:2.3:h:spearhead:netgap_300:*:*:*:*:*:*:*:*","versionEndIncluding":"78","matchCriteriaId":"A15263C2-13E7-4F5C-A452-490D80D13C22"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0256.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2798","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6625","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0533","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/advisories/85256A3400529A8685256A8D00804A37/%24file/oar271.txt","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-123.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5585","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6863","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/advisories/85256A3400529A8685256A8D00804A37/%24file/oar271.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-123.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0534","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6567647A-3EE9-42BE-A712-A3F7C9FD0801"},{"vulnerable":true,"criteria":"cpe:2.3:a:merit:radius:3.6b:*:*:*:*:*:*:*","matchCriteriaId":"DD672AEF-E3CB-4C9B-870D-DF8D67D4B8EF"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/898931","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2989","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/alerts.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/898931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/alerts.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0535","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the \"HTTP Host\" (CGI.Host) variable in (1) the \"Web Publish\" example script, and (2) the \"Email\" example script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion_server:4.x:*:*:*:*:*:*:*","matchCriteriaId":"078E31C5-CF25-4BAA-A249-438C50CA0F5F"}]}]}],"references":[{"url":"http://www.allaire.com/Handlers/index.cfm?ID=21700","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise92.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.allaire.com/Handlers/index.cfm?ID=21700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise92.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0537","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3aa:*:*:*:*:*:*:*","matchCriteriaId":"D8783C0A-990A-4B79-8BF9-64E425DA585E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3da:*:*:*:*:*:*:*","matchCriteriaId":"11B3630E-6ED6-4A8F-8FBC-AA68E81490F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3db:*:*:*:*:*:*:*","matchCriteriaId":"046D8679-38F8-4DC9-82A7-2562DE0495F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3ha:*:*:*:*:*:*:*","matchCriteriaId":"92509012-2DA2-4045-9AE4-4D8681F64D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3ma:*:*:*:*:*:*:*","matchCriteriaId":"1C993003-8B99-4CFF-8546-888E8C5D8FEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3na:*:*:*:*:*:*:*","matchCriteriaId":"80AEA6F5-907D-493F-AB07-971D13BC1CAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*","matchCriteriaId":"655BB9C1-BA90-452E-A9C8-9B1E15B99650"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3xa:*:*:*:*:*:*:*","matchCriteriaId":"0A747DB2-A031-470F-8EA5-F37FBE175D18"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"1423776F-1C73-4872-81F6-29C411B6E545"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"5EC5E6E9-E639-424B-963D-2760B2C38D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18g\\):*:*:*:*:*:*:*","matchCriteriaId":"77D178AF-15CB-4352-8193-741F8B49688A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)w5\\(20\\):*:*:*:*:*:*:*","matchCriteriaId":"4BC109F5-0907-4CDB-90BD-61788921DABC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*","matchCriteriaId":"23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*","matchCriteriaId":"DDBE69A0-85B1-423B-88FB-CDA80E9186EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*","matchCriteriaId":"E2606209-91BE-4BEB-A163-0D3873A033FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*","matchCriteriaId":"4D0082D5-CE3E-433A-84E9-1311C8B7899A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*","matchCriteriaId":"8A11AF3F-C82F-4431-9CF1-84FDAD388D04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-14.html","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-106.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/578","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2936","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6749","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-106.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/1601227034.20010702112207%40olympos.org","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/20010703011650.60515.qmail%40web14910.mail.yahoo.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/4.3.2.7.2.20010629095801.0c3e6a70%40brussels.cisco.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/Pine.LNX.3.96.1010702134611.22995B-100000%40Lib-Vai.lib.asu.edu","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0538","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*","versionEndIncluding":"2002","matchCriteriaId":"C8622164-C17A-469B-A306-97AEDAE37998"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99496431214078&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-113.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/131569","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3025","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6831","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99496431214078&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-113.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/131569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0540","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:terminal_server:*:*:*:*:*:*:*:*","matchCriteriaId":"40242161-D5AD-4314-AB95-E61292C49DF2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3099","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6912","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0541","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file."},{"lang":"es","value":"Desbordamiento de buffer en el Reproductor de Medios de Windows 7.1 y anteriores que permite a atacantes remotos ejecutar comandos arbitrarios mediante  un fichero malformado de Windows Media Station (.nsc)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"7.1","matchCriteriaId":"20E02B29-4180-41FB-A4C6-931D6E3FAE38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/187001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3105","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-042","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6907","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/187001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0542","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf.  NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879."},{"lang":"es","value":"Desbordamiento de buffer en MS SQL Server 7.0 y 2000 permite a atacantes con acceso al servidor SQL ejecutar código arbitrario por medio de las funciones 1) raiserror, (2) formatmessage, o (3) xp_sprintf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100891252317406&w=2","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a122001-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/700575","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3733","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7724","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100891252317406&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2001/a122001-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/700575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A83","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0543","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3183","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-043","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6977","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A334","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/3183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2001-0544","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3195","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6983","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0545","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5736","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6981","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-132.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0546","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"80744BD9-85A9-4E33-8C35-59C8C112AC62"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3196","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6989","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0547","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"80744BD9-85A9-4E33-8C35-59C8C112AC62"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3197","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0548","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99598918914068&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3081","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6879","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99598918914068&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0549","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate:1.5:*:*:*:*:*:*:*","matchCriteriaId":"D8151566-9F49-444C-86A4-1759DD39B8D7"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/814187","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.sarc.com/avcenter/security/Content/2001_07_20.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7013","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/814187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.sarc.com/avcenter/security/Content/2001_07_20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0550","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a \"~{\" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_madore:ftpd-bsd:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2D2E1B-DDF8-4AD5-B208-CDDA0658D267"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_madore:ftpd-bsd:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0F526A3B-219C-454A-9235-DDC22AB832D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"473E71DD-F779-4F93-838A-AD6768BB8DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5E9B738-E8DF-4FE7-B4A5-91DE46A9CF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7196CF2D-8CCC-454A-A2C1-6408A9D636C5"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-036-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100700363414799&w=2","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-33.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-087","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/886083","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-090.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-157.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/180823","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3581","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-162","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7611","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-036-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100700363414799&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-041.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-33.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/886083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-090.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/180823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0551","sourceIdentifier":"cve@mitre.org","published":"2001-05-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0044.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/860296","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5958","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/860296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0552","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.01:*:*:*:*:*:*:*","matchCriteriaId":"1218361D-6F62-4035-B0B2-9BEB19539A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_netview:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E33D4F9E-DAB5-4E56-BA08-1753CEE21E8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_netview:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7124CE71-64B9-4831-B5C9-F5BFAC15163B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99201278704545&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-24.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/952171","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2845","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99201278704545&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-24.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/952171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0553","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use \"NP\" in the password field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6142908B-4B59-4AB8-8D68-5203DF131D00"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/l-121.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/737451","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/586","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3078","source":"cve@mitre.org"},{"url":"http://www.ssh.com/products/ssh/exploit.cfm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6868","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/l-121.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/737451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ssh.com/products/ssh/exploit.cfm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0554","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC18A69-28AC-4DED-AA9D-B050709A9D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8C0C82-749E-4837-88F8-FB56A753B094"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AD672FA-918D-48CB-BC03-4E412AF0DCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B363A4-BB7A-48A2-AE6B-BD2DDD46E7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netkit:linux_netkit:0.10:*:*:*:*:*:*:*","matchCriteriaId":"5B3630EB-0966-49C2-9B59-368E5374A1C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netkit:linux_netkit:0.11:*:*:*:*:*:*:*","matchCriteriaId":"62B7A341-D568-45DD-B4D7-18892DD19819"},{"vulnerable":true,"criteria":"cpe:2.3:a:netkit:linux_netkit:0.12:*:*:*:*:*:*:*","matchCriteriaId":"65D5FAF4-4AE0-4657-B71A-3F3870E36192"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"63236405-1F33-43DD-ACF7-B6D9656E0987"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1:stable:*:*:*:*:*:*","matchCriteriaId":"F25E27BA-F884-456B-9600-A4A0B8877A6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF4F7002-A525-4A66-BE8B-E50ABBF144B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:current:*:*:*:*:*:*","matchCriteriaId":"FE799983-DF99-428E-B560-321680C85A75"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F1156954-25AD-45BE-AE49-9705ECD5BDA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8ED84E66-CFD9-4DF8-9679-13457D340D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*","matchCriteriaId":"A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*","matchCriteriaId":"0EB09993-B837-4352-B09D-3656F62638A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*","matchCriteriaId":"0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*","matchCriteriaId":"29EAA113-2404-4ABB-826B-3AA2AA858D02"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*","matchCriteriaId":"A442DE97-4485-4D95-B95D-58947585E455"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0014.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/advisories/3476","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/199496","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/199541","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/203000","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2001-21.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-131.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-070","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-075","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/809","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-099.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-100.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/197804","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3064","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6875","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.10/CSSA-2001-SCO.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0745U.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/advisories/3476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/199496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/199541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/203000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-030.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2001-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-131.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/catos-telrcv-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-068.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2001_029_nkitb_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-099.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/197804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0555","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..  (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:screaming_media:siteware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"889F8296-24F8-4366-B249-85FE57CD1F21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/795707","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/13887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2869","source":"cve@mitre.org"},{"url":"http://www01.screamingmedia.com/en/security/sms1001.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6689","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/795707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/13887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www01.screamingmedia.com/en/security/sms1001.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0556","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nedit:nedit:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.1","matchCriteriaId":"DB06B00B-6372-482D-AB3C-CAE574866B70"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-053","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nedit.org/archives/develop/2001-Feb/0391.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_014_nedit.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-061.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/180237","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2667","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nedit.org/archives/develop/2001-Feb/0391.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_014_nedit.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/180237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0557","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.46","matchCriteriaId":"CE0E8B71-59FF-4ED6-86DC-6E7B40CC86D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0j:*:*:*:*:*:*:*","matchCriteriaId":"E9CD99A7-5669-4738-89CE-7AB977A73382"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"90D06328-0D66-4319-8ADB-73A4C62ECD69"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/132099","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2703","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6513","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/132099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0558","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0b2:*:*:*:*:*:*:*","matchCriteriaId":"84729261-C3D8-48B6-9A87-F0E9EFC9E80A"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0beta1:*:*:*:*:*:*:*","matchCriteriaId":"3271021D-E535-4716-867F-9FF6D15ACC50"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1817","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2704","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6521","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0559","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_vixie:vixie_cron:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"567FA639-2A18-4440-8877-82006D3363AA"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-054","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/183029","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2687","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6508","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/183029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0560","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_vixie:vixie_cron:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1.56","matchCriteriaId":"C8E239A8-4048-4CB1-A1C7-5835F13E21F7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0197.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/linux/immunix/2001-q1/0066.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17048&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17261&apar=only","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-022.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5583","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-014.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6098","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0197.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/linux/immunix/2001-q1/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17048&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17261&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-022.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0561","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drummond_miles:a1stats:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"89E1D7D6-6E44-44A9-98C2-64C997DB282E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drummond_miles:a1stats:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E02D9531-47AD-4149-B6C9-7510D52FCFDF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/471691","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2705","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6503","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/471691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6503","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0562","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drummond_miles:a1stats:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"89E1D7D6-6E44-44A9-98C2-64C997DB282E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2705","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6505","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0563","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electrosoft:electrocomm:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"7C9B7810-C60F-456A-97BC-4AC5C57D0921"},{"vulnerable":true,"criteria":"cpe:2.3:a:electrosoft:electrocomm:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8A983DD2-28D9-481B-B856-6BC1598BAF24"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0049.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2706","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6514","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0564","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:ap9606:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"30E1C36C-ED53-48F3-9B0B-FB378614B451"}]}]}],"references":[{"url":"ftp://ftp.apcftp.com/hardware/webcard/firmware/sy/v310/install.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0436.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2430","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6199","source":"cve@mitre.org"},{"url":"ftp://ftp.apcftp.com/hardware/webcard/firmware/sy/v310/install.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0436.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0565","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:sparc:*:*:*:*:*","matchCriteriaId":"1352C8B6-2034-4F27-8738-742D7FAD41F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:sparc:*:*:*:*:*","matchCriteriaId":"258E6782-9672-427A-8C83-ECA6BC68C9DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:sparc:*:*:*:*:*","matchCriteriaId":"C67E67BE-A376-4034-B2DC-DC84E4F2B6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F830AE29-6AC0-4C78-A637-E69BA63FAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9","matchCriteriaId":"7B1F21FE-C4F7-4760-B565-32D4D679BC93"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0016.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/184210","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/446864","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8246","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/184210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/446864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0566","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP  is disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2900:xl:*:*:*:*:*:*:*","matchCriteriaId":"5C3745E0-4918-40AD-A219-111DC81CF766"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0040.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6515","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0567","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0DE69DAE-5A3C-4EA3-AB03-28E3E39DCF5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:7.2:*:*:*:*:*:*:*","matchCriteriaId":"2F8DC6A5-B5D5-4F03-A22E-6B90958AE858"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000407","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-049.php3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-065.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Hotfix_2001-05-01/security_alert","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6958","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-049.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Hotfix_2001-05-01/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0568","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1_b1","matchCriteriaId":"602119E0-1562-4175-AC81-BB057BE2C1BE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-043","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-021.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0569","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1_b1","matchCriteriaId":"602119E0-1562-4175-AC81-BB057BE2C1BE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-043","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-021.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0570","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minicom:minicom:*:*:*:*:*:*:*:*","versionEndIncluding":"1.83.1","matchCriteriaId":"BC7C368A-9FF1-47FB-BE45-4095564003BE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99014300904714&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-016.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-067.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/181922","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6498","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99014300904714&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-016.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/181922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0571","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elron:im_anti_virus:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"20FDD7B3-DE36-433A-8447-703311B5A65B"},{"vulnerable":true,"criteria":"cpe:2.3:a:elron:im_message_inspector:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"09978E39-6055-4DE2-B62C-2B35666043C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0382.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98538867727489&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98567864203963&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2519","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2520","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0382.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98538867727489&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98567864203963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0572","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9B72CFB3-39C7-469C-AA59-69F5B8993BF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0225.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/596827","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-033.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-033.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/596827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-033.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0573","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4:*:*:*:*:*:*:*","matchCriteriaId":"0BAE3D61-9D78-46D7-87EB-5A33ECF86F83"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q2/0000.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/123651","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5582","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7007","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2001-q2/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/123651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0574","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jason_rahaim:mp3mystic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"05196F57-0A70-437B-A6F8-48A5099F9619"},{"vulnerable":true,"criteria":"cpe:2.3:a:jason_rahaim:mp3mystic:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E54DEBCA-2088-4E42-8DB1-6390D9CEA6E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jason_rahaim:mp3mystic:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E9FC6080-FA32-4C66-ADDA-B47F6691C7EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jason_rahaim:mp3mystic:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"66A685A8-F8AB-464C-926C-9774944E06DD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0046.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://mp3mystic.com/mp3mystic/news.phtml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1815","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2699","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6504","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://mp3mystic.com/mp3mystic/news.phtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0575","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0404.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6290","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0404.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0576","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a  local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.6","matchCriteriaId":"ABD1AB95-FECC-4A2B-93EF-170CD5FEBE6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0407.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6292","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0407.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0577","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.6","matchCriteriaId":"ABD1AB95-FECC-4A2B-93EF-170CD5FEBE6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0410.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6289","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0410.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0578","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.6","matchCriteriaId":"ABD1AB95-FECC-4A2B-93EF-170CD5FEBE6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0416.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6293","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0416.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0579","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.6","matchCriteriaId":"ABD1AB95-FECC-4A2B-93EF-170CD5FEBE6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0421.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6291","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0421.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0580","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes_technologies:dsl_vdns:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C9D624B-8105-42EE-883F-4314E563980F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0050.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0581","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spytech:spynet_chat:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"382D2709-2C5A-43ED-A0FB-3EB7DC11BFEC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0051.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2701","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6509","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0582","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ben_spink:crushftp_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.6","matchCriteriaId":"7A8B74F3-CBE8-4806-A01C-60BCE069ABF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ben_spink:crushftp_ftp_server:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"17CE4517-A214-4786-A0C3-5C6858D0C644"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/110803","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6495","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/110803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0583","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.4:*:pro:*:*:*:*:*","matchCriteriaId":"0906EDEB-A59F-4DDD-8763-AFA9EC78F9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.4:*:standard:*:*:*:*:*","matchCriteriaId":"2CFEEA75-350C-47D6-A2D4-8714D1D4907A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0188.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp1.deerfield.com/pub/mdaemon/Archive/3.5.6/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6240","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp1.deerfield.com/pub/mdaemon/Archive/3.5.6/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0584","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"772A222C-606C-42B5-A523-9584FFB9E0BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0365.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2508","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6279","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0365.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0585","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gordano:ntmail:6.0.3c:*:*:*:*:*:*:*","matchCriteriaId":"9B2EE820-48EC-467E-AAE8-5423777CF1CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0248.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2494","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6249","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0586","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:scanmail_exchange:3.5:*:*:*:*:*:*:*","matchCriteriaId":"36CB114D-1598-4ED5-89E6-F39609CEADE8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2001-q1/0049.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5581","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6311","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2001-q1/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0587","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0418.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2583","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6302","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0588","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0417.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0417.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0589","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.64:*:*:*:*:*:*:*","matchCriteriaId":"74187E80-0EDA-4FE7-A113-FCB723AF08B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.66:*:*:*:*:*:*:*","matchCriteriaId":"0D6691BE-2591-495A-BB72-2DA9956944A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAD0131A-D07C-4B23-8CEC-E7CF659DB55E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D38841C-DF2D-41D8-BD15-EBBB9E9D83E0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0375.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1780","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2523","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6317","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0375.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0590","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"2509D996-9DB0-4710-86A1-4E60782D2E20"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0031.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5580","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6971","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0591","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:jsp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"0E00AF84-586F-4782-8F73-823DB1599BD2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0239.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2286","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5986","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0239.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0592","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10,000) of malformed ICMP or TCP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_ii:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6","matchCriteriaId":"8F0A0376-0DC8-47A8-8825-920598937A9F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0054.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6327","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0593","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anaconda_partners:clipper:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3","matchCriteriaId":"B1625041-DE10-47C4-94A0-E1C04870A855"}]}]}],"references":[{"url":"http://anacondapartners.com/cgi-local/apexec.pl?template=ap_releasenotestemplate.html&f1=ap_af_updates_menu&f2=ap_af_releasenotes_clip","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0395.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2512","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6286","source":"cve@mitre.org"},{"url":"http://anacondapartners.com/cgi-local/apexec.pl?template=ap_releasenotestemplate.html&f1=ap_af_updates_menu&f2=ap_af_releasenotes_clip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0395.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0594","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0140.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2558","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6359","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A65","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A65","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0595","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2605","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6365","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0596","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.77","matchCriteriaId":"5C0AFE54-CB3F-4EEE-9081-8D307FA6448D"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000393","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-014-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98685237415117&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-051","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5579","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-046.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2637","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6344","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-014-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98685237415117&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0597","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack.  This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zetetic_enterprises:strip:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5","matchCriteriaId":"1F276858-9B45-4DEE-8C00-08A5EDC33B54"},{"vulnerable":true,"criteria":"cpe:2.3:a:zetetic_enterprises:strip:0.3:*:*:*:*:*:*:*","matchCriteriaId":"75C0B4C4-67EA-455D-B60E-8C696F1B95F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zetetic_enterprises:strip:0.4:*:*:*:*:*:*:*","matchCriteriaId":"852AD6E7-AD9A-4744-A5F7-73C15F8F3467"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2567","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6362","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0598","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_ghost:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"6521D498-9FDA-4644-A8A1-D1E8C56A79EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2570","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6357","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0599","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_anywhere:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.3.2747","matchCriteriaId":"DA0F9208-190E-40A3-B744-77B5BDFEFFFF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2572","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6356","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6356","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0600","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7","matchCriteriaId":"7DFC401E-A9B4-4009-8FAE-0E74930810D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6347","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0601","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7","matchCriteriaId":"7DFC401E-A9B4-4009-8FAE-0E74930810D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6349","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0602","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7","matchCriteriaId":"7DFC401E-A9B4-4009-8FAE-0E74930810D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6348","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0603","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7","matchCriteriaId":"7DFC401E-A9B4-4009-8FAE-0E74930810D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6350","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0604","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7","matchCriteriaId":"7DFC401E-A9B4-4009-8FAE-0E74930810D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6351","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0605","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:headlight_software:mygetright:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0b","matchCriteriaId":"9D092EAE-EA7F-4AF0-AB74-F27A65A5D3CD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98321819112158&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98321819112158&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0606","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7179CB7C-CD63-421E-AD9E-0422020D7963"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"01D79D8B-71EC-41FB-B168-294A7553785F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0041.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6110","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0607","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.00","matchCriteriaId":"59AD3EDE-3ABD-4686-98CB-42BB56345AE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0080.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5621","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0608","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"292938A5-4937-4339-BEB0-32B7BC360E84"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0087.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/895496","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6951","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q1/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/895496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0609","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"1B8A7F9D-F2A9-4B7A-BDEA-CADC7A21421A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2576","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6364","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0610","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.x:*:*:*:*:*:*:*","matchCriteriaId":"F5E69E24-DC1F-4B98-A87E-05043C43616D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*","matchCriteriaId":"467A30EB-CB8F-4928-AC8F-F659084A9E2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"714C1439-AB8E-4A8B-A783-D60E9DDC38D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"62CAE5B0-4D46-4A93-A343-C8E9CB574C62"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6428","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0611","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:1.26.3:*:*:*:*:*:*:*","matchCriteriaId":"67D6EB04-364E-4F14-BD36-F37C20AD8047"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:1.26.4:*:*:*:*:*:*:*","matchCriteriaId":"66C682C8-B348-464D-86A3-A77108F08060"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:1.26.5:*:*:*:*:*:*:*","matchCriteriaId":"73A9814A-9419-4EE1-BA1A-AB39A4CF34BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5231BEFD-D8F2-4C7C-AEBE-38599B49AFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rimarts_inc.:becky_internet_mail:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"87642616-9651-4953-948B-B428F03492BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0089.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2723","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6531","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0612","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:remote_desktop_32:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"7739AC29-1F38-4F35-83CD-80C54636C3F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:remote_desktop_32:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"43F2E6A9-431F-4820-B448-A69F5D579F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:remote_desktop_32:3.0:*:*:*:*:*:*:*","matchCriteriaId":"63CFF90E-A6CE-43A3-AA6F-DE020BF46343"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0158.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6288","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2726","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6547","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0613","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8","matchCriteriaId":"A0A4024A-52B1-40DD-B6E3-449F5AA252DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0131.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6540","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0131.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0614","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carello:e-commerce:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.1","matchCriteriaId":"D63B9E60-87CA-4934-9E36-E0D0D7F4AFF2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98991352402073&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6532","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98991352402073&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0615","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:faust_informatics:freestyle_chat:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"355A130E-D4F1-45A5-82E6-DAA125A664AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2776","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6601","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0616","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:faust_informatics:freestyle_chat:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"355A130E-D4F1-45A5-82E6-DAA125A664AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2777","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6602","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0617","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alliedtelesyn:at-ar220e:1.08a:rc14:*:*:*:*:*:*","matchCriteriaId":"E0651624-D8AF-4B6C-8DDF-A859030A16FF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0125.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6560","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0125.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0618","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key.  Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:orinoco_rg-1000:*:*:*:*:*:*:*:*","matchCriteriaId":"7870BCA9-7FCC-42F2-BB9D-8369CF095F36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0020.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6328","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0619","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to.  The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:orinoco:*:*:*:*:*:*:*:*","matchCriteriaId":"E7F82FF7-7D32-45C7-AF0C-B12CDF6BDDBE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0015.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0620","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:calendar_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0p2","matchCriteriaId":"300C4617-700C-4244-AEA2-A29F670F7996"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0320.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6402","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0320.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0621","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*","matchCriteriaId":"98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-085.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-ftp-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2745","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6557","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-085.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-ftp-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0622","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*","matchCriteriaId":"98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1848","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2806","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6631","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0623","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendfile:sendfile:*:*:*:*:*:*:*:*","matchCriteriaId":"20CC809F-85E7-4C82-849B-D792BAB7ECBC"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-050","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-052","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6430","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0624","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:qnx:2.4:*:*:*:*:*:*:*","matchCriteriaId":"BC2EA795-4D3D-4440-9ED3-49B58192EA6B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0266.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6437","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0266.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0625","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAE9329-AA34-4F56-B4BE-B028F021173B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0245.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1843","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2778","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6607","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0626","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a \":\" character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:website_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.4","matchCriteriaId":"45087A49-4A10-4002-AD37-685516217D71"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0236.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2488","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3839","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-03/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0627","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74C1B49F-9EEF-4857-B444-840F91E2B40A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6236FA51-E996-4E84-A8CC-2635A814CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.17/CSSA-2001-SCO.17.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0220.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/747736","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2752","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6588","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.17/CSSA-2001-SCO.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/747736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0628","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q274/2/28.asp","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2760","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6614","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q274/2/28.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0629","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Event Correlation Service (ecsd) as included with OpenView Network Node  Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0226.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2761","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-158","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6582","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0630","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mimanet:source_viewer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B247A8F5-31E3-4826-9834-5C69C44795F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0231.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5565","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2762","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6583","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0631","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centrinity:centrinity_firstclass:5.50:*:*:*:*:*:*:*","matchCriteriaId":"6E9E15A7-A208-46D7-AE3F-97149A82817F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0376.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0440.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2423","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6192","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0440.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0632","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:chilisoft:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D5059195-3867-4327-ABF8-A688909B6048"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:chilisoft:3.6:*:*:*:*:*:*:*","matchCriteriaId":"EE8EF26C-893E-44DD-91CF-130A251FEC83"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0633","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:chilisoft:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"24E71DB1-2930-4CF8-988A-43373F8ADA18"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0634","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:chilisoft:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.2","matchCriteriaId":"24E71DB1-2930-4CF8-988A-43373F8ADA18"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2409","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6176","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0635","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://www.osvdb.org/5564","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-058.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6493","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0636","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2) execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2.0 and 2.0.1.  NOTE: It is highly likely that this candidate will be split into multiple candidates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raytheon:silentrunner:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F275D929-BF47-4392-A1B7-3B2F2B0838EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:raytheon:silentrunner:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2208DFD-3D7A-4AF0-8F12-A96F4AA4FF8C"}]}]}],"references":[{"url":"http://xforce.iss.net/alerts/advise91.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise91.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0641","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0087.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_019_man_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-069.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/190136","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2711","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6530","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_019_man_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-069.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/190136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0642","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:incredimail:incredimail:*:*:*:*:*:*:*:*","versionEndIncluding":"1400185","matchCriteriaId":"7D77CCBA-8863-4935-975C-ABA07DFC91FC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0078.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6529","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0643","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://vil.nai.com/vil/virusSummary.asp?virus_k=99048","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/clsidext.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7858","source":"cve@mitre.org"},{"url":"http://www.sarc.com/avcenter/venc/data/vbs.postcard%40mm.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/176909","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2612","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6426","source":"cve@mitre.org"},{"url":"http://vil.nai.com/vil/virusSummary.asp?virus_k=99048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/clsidext.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sarc.com/avcenter/venc/data/vbs.postcard%40mm.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/176909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0644","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the \"Rumpus User Database\" file in the prefs folder, which could allow attackers to gain privileges on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3_dev_3","matchCriteriaId":"8E75B8F5-4F68-43A1-918F-181E62CBD6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C027A457-9563-4B0A-95A4-5E093F34E582"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"62C882C1-0D9A-4686-9C92-E4E08F5C09D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F05D5A0E-147F-47A7-ABD2-34EF7300B68B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/184751","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2718","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6543","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/184751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0645","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the \"admin\" password, or (2) connect to a MySQL ODBC from the management tier using a blank password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axent:netprowler:3.5:*:*:*:*:*:*:*","matchCriteriaId":"08679162-CF38-48FA-9BF9-BD8A9EA3C848"},{"vulnerable":true,"criteria":"cpe:2.3:a:axent:netprowler:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"89A48889-AC3B-45B5-9DCE-24A0372A872D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0097.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0098.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/508387","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6537","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6539","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/508387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0646","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of a specific length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C027A457-9563-4B0A-95A4-5E093F34E582"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F05D5A0E-147F-47A7-ABD2-34EF7300B68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:2.0.3dev:*:*:*:*:*:*:*","matchCriteriaId":"31D21F83-E562-47EB-8B4A-E0993A52CF12"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/184751","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2716","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/184751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0647","sourceIdentifier":"cve@mitre.org","published":"2001-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orange_software:orange_web_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"59488ECB-385F-4B28-AAE2-9CF099F06627"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/165658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2432","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/165658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0648","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (..) attack on the file module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/184215","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2702","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6522","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/184215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0649","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:personal_web_sharing:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"BA86F3B2-2A28-4F99-A36B-FF7C3219EC2C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/184548","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6536","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/184548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0650","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.0","matchCriteriaId":"F080333A-87D9-44F4-B966-8B7CA5C5C792"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-082.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ios-bgp-attr-corruption-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/106392","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1830","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2733","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6566","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-082.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/ios-bgp-attr-corruption-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/106392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0652","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9","matchCriteriaId":"7B1F21FE-C4F7-4760-B565-32D4D679BC93"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99745571104126&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3160","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6967","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A131","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99745571104126&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0653","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA859AF-4E4E-4077-8E98-523E617A1DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*","matchCriteriaId":"A9791650-C367-43B6-A0F4-5BB56CE10778"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*","matchCriteriaId":"8340DDA8-77DD-4AEB-B267-F86F64A851B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*","matchCriteriaId":"07DCBBEE-1DF0-40FE-B755-1FC35CF16788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*","matchCriteriaId":"581626E7-47B5-4819-B34F-B6DFD07A12F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*","matchCriteriaId":"BD99394C-5408-4A01-8D4E-417FFFFDE9C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*","matchCriteriaId":"AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*","matchCriteriaId":"97D641EF-0B69-45A1-B85E-3C9C93AB9D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*","matchCriteriaId":"8972211B-6A5B-4095-9CBB-CEF4C23C9C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*","matchCriteriaId":"8F81A2AD-90A0-4B97-86A3-92690A0FCA71"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99841063100516&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-106.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-133.shtml","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3163","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sendmail.org/8.11.html","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7016","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99841063100516&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-032.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-133.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-075.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_028_sendmail_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sendmail.org/8.11.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0658","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"80744BD9-85A9-4E33-8C35-59C8C112AC62"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3198","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0659","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/209385","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3215","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7008","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/209385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0660","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:*:sp4:*:*:*:*:*:*","versionEndIncluding":"5.5","matchCriteriaId":"F65F51C5-FEE4-4719-9880-F491E80D33AE"}]}]}],"references":[{"url":"http://support.microsoft.com/support/kb/articles/Q307/1/95.ASP","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3301","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7089","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/Q307/1/95.ASP","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0662","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-142.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3313","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-048","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7105","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-142.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0663","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3445","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7302","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3445","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0664","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the \"Zone Spoofing vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100281551611595&w=2","source":"cve@mitre.org"},{"url":"http://morph3us.org/blog/?p=31","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1971","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3420","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7258","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100281551611595&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://morph3us.org/blog/?p=31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0665","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the \"HTTP Request Encoding vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:*:windows_server_2003_sp1:*:*:*:*:*:*","versionEndIncluding":"6","matchCriteriaId":"66815960-CEFF-477A-A147-963A112206CF"}]}]}],"references":[{"url":"http://www.osvdb.org/1972","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3421","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7259","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0666","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3368","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-049","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7168","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0667","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later executed, aka a new variant of the Telnet Invocation vulnerability as described in CVE-2001-0150."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"08E95837-2903-45FB-B42C-1263B60566A8"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-024.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/952611","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7260","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ciac.org/ciac/bulletins/m-024.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/952611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0668","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0047.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-30.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-134.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/966075","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3240","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise93.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6811","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-30.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-134.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/966075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise93.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0669","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard \"%u\" Unicode encoding of ASCII characters in the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:catalyst_6000_intrusion_detection_system_module:*:*:*:*:*:*:*:*","matchCriteriaId":"670E75BE-D3CB-4BA7-BF17-F4CEFBA668D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_intrusion_detection_system:*:*:*:*:*:*:*:*","matchCriteriaId":"77012AED-148F-422C-AB0C-DBD7BB1D3493"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:5.x:*:*:*:*:*:*:*","matchCriteriaId":"D0D349D6-057D-459C-861B-FF9BE193A3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:6.x:*:*:*:*:*:*:*","matchCriteriaId":"D1D78D55-2486-48C6-8766-D933328F585A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:5.5:*:*:*:*:*:*:*","matchCriteriaId":"AC67A95B-3CCF-469F-98C2-8D8C7B2E0F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.0:*:*:*:*:*:*:*","matchCriteriaId":"42507EA0-009C-466B-A4AD-F7C050682F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"12D3E0FE-0557-4B8F-A97B-1FBE6030C8CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:enterasys:dragon:4.x:*:*:*:*:*:*:*","matchCriteriaId":"2CE293CA-7874-4B54-8516-AF3469A3440D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99972950200602&w=2","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/548515","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3292","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise95.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99972950200602&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/548515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise95.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0670","sourceIdentifier":"cve@mitre.org","published":"2001-10-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:bsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"0D6D44A9-2509-4F6F-8BAA-47482FBBD62C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"80F6028A-5C2C-4AEF-A8CD-1FD638F89E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"68034187-4362-4B1D-A1C5-01E9CA659C42"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-018.txt.asc","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.20/CSSA-2001-SCO.20.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-2001-30.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/274043","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.com/errata28.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-147.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3252","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise94.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7046","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-018.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.20/CSSA-2001-SCO.20.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-2001-30.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/274043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.com/errata28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise94.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0671","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-30.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/388183","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/466239","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/722143","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2001-30.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/388183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/466239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/722143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2001-0674","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robtex:viking_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7_build381","matchCriteriaId":"3C29F34B-DFB1-45E9-9158-C8705387F64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:robtex:viking_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F8B4AEEA-2BC1-44D7-9F39-3762E831E915"},{"vulnerable":true,"criteria":"cpe:2.3:a:robtex:viking_server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D6F13B14-2BED-43AB-A0A6-18AD9F7AAE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:robtex:viking_server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A9806270-D26A-49BB-8806-F637F2395B9E"}]}]}],"references":[{"url":"http://www.robtex.com/viking/bugs.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/177231","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6394","source":"cve@mitre.org"},{"url":"http://www.robtex.com/viking/bugs.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/177231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0675","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return <CR> that is not followed by a line feed <LF>."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.51:*:*:*:*:*:*:*","matchCriteriaId":"B8152C47-5E4D-45C8-B8F7-DE99B0E8DB5C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0345.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0381.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0410.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2636","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6423","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0345.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0381.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0410.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0676","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a \"dot dot\" attack in the filename for an attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:*:*:*:*:*:*:*:*","versionEndIncluding":"1.48f","matchCriteriaId":"F2EF3C7E-8CEF-4D74-BB4B-8AFFFD187070"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/154359","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/154359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5871","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0677","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the \"Attachment Converted\" MIME header, which sends the file when the email is forwarded to the attacker by the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80460E6D-6093-44C3-91C7-BD75B3AE4351"}]}]}],"references":[{"url":"http://www.osvdb.org/3085","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/177369","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6431","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/177369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0678","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in reggo.dll file used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2 allows a local attacker to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.51:*:*:*:*:*:*:*","matchCriteriaId":"CDA017B0-A0D4-4B47-B980-57C6C103C7F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_webmanager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B1C33920-9BC7-41BC-BB66-723D0BAF2839"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/185383","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6575","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/185383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0679","sourceIdentifier":"cve@mitre.org","published":"1999-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7A9D4E2E-889B-4233-8887-9CF00A5023A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.23:*:*:*:*:*:*:*","matchCriteriaId":"CEB4744D-EE43-4C45-AFA1-31AF57F4DEDC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=94204166130782&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94208143007829&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=94216491202063&w=2","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9911&L=NTBUGTRAQ&P=R2331","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3465","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=94204166130782&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94208143007829&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=94216491202063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9911&L=NTBUGTRAQ&P=R2331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0680","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a \"dot dot\" attack in a LIST (ls) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:avt_term:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A28BD5EE-5EA9-465E-BB6A-F6194F51B54E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_net:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A6BD8F2F-DF98-4E71-BCBE-8210ABD81A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_net:5.0:*:*:*:*:*:*:*","matchCriteriaId":"79213ABB-0E34-46F4-801C-FC43EF63AD2D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/216555","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1794","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/176712","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2618","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6375","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/216555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/176712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0681","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ftpd in QPC QVT/Net 5.0 and QVT/Term 5.0 allows a remote attacker to cause a denial of service via a long (1) username or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_net:5.0:*:*:*:*:*:*:*","matchCriteriaId":"79213ABB-0E34-46F4-801C-FC43EF63AD2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qpc_software:qvt_term:5.0:*:*:*:*:*:*:*","matchCriteriaId":"817EB11B-1A53-4CB3-82A0-A5B5620E6078"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/176712","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6376","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/176712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0682","sourceIdentifier":"cve@mitre.org","published":"2001-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:zonealarm_pro:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6","matchCriteriaId":"E7A88CF5-AE19-431D-ACAE-0404BEB8B171"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:*:*:*:*:*:*:*:*","matchCriteriaId":"15B8B67A-6F75-4176-A6A5-E2F695F52C5F"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=97818917222992&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5821","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=ntbugtraq&m=97818917222992&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0683","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5K of data to TCP port 5238."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:collabra_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"1BDD3CCB-44B3-4D16-AB8A-940DC3231E24"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/165516","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6158","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/165516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0684","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service by sending seven or more characters to TCP port 5239."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:collabra_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"1BDD3CCB-44B3-4D16-AB8A-940DC3231E24"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/165516","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6159","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/165516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0685","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thibault_godouet:fcron:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B16E4A63-D9C4-4D5E-A919-7183DE2490C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:thibault_godouet:fcron:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33209027-8F78-454A-AB15-98B5B4807971"},{"vulnerable":true,"criteria":"cpe:2.3:a:thibault_godouet:fcron:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7FF27805-A01B-4CC1-81A8-BD3F171D56F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thibault_godouet:fcron:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F31E9E74-B495-4F3E-89FE-1EBE60C0486E"},{"vulnerable":true,"criteria":"cpe:2.3:a:thibault_godouet:fcron:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C06DA19-4B3D-4BC5-9B88-3D5346CC4513"}]}]}],"references":[{"url":"http://fcron.free.fr/CHANGES.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98339581702282&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2835","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7127","source":"cve@mitre.org"},{"url":"http://fcron.free.fr/CHANGES.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98339581702282&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0686","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:5.8:*:x86:*:*:*:*:*","matchCriteriaId":"198E6D8C-A640-4D9C-9660-EBBF2FADB67E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0000.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2819","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6638","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0687","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by (1) issuing a CD command (CD C:) followed by the LS command, (2) specifying arbitrary paths in the UNC format (\\\\computername\\sharename)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.5.0","matchCriteriaId":"3E156DE6-4505-4232-A88A-9C76A88DC305"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E92863B0-9FE6-474C-8D10-75040BCF91FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:4.7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"03999979-90F6-4853-8107-06B1D0571766"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F7E6C162-7EA0-4FA3-BD10-4B2D00628972"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"528DEDF2-BE05-40E6-A5D5-05CFDD364A16"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/190032","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2853","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6674","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/190032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0688","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD (\"CD . .\") command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:3.0_build_1:*:*:*:*:*:*:*","matchCriteriaId":"AA7672FB-3D77-43E7-9DA0-01DFF97FC76D"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E92863B0-9FE6-474C-8D10-75040BCF91FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:4.7.5.0:*:*:*:*:*:*:*","matchCriteriaId":"03999979-90F6-4853-8107-06B1D0571766"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F7E6C162-7EA0-4FA3-BD10-4B2D00628972"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"528DEDF2-BE05-40E6-A5D5-05CFDD364A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.7:*:*:*:*:*:*:*","matchCriteriaId":"B31406CE-6DFD-412F-A809-D828F4BAD2FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B190E2EC-CB66-445F-AF0B-DB075208E38B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/190032","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2851","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/190032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0689","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_control_system:1.8:*:*:*:*:*:*:*","matchCriteriaId":"CF7AE9DF-174A-497C-B1AC-E94CDEC8D9A9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0065.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0690","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*","versionEndIncluding":"3.22","matchCriteriaId":"A7E4A99A-FC71-4FC2-8F1D-DB29D35752BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"C74C8F2C-92F4-4A9F-BF5A-8B5DF1A50DC7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0041.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000402","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-058","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-078.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2828","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6671","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0691","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imapd:2000:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F57C-F759-4917-BD3D-6B2C77D2DCEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:imapd:2000c:*:*:*:*:*:*:*","matchCriteriaId":"B5815C33-6666-467A-BDD1-3F295277E337"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6269.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-094.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2856","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6269.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0692","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_2500:4.5:*:*:*:*:*:*:*","matchCriteriaId":"CB9AE868-8F1F-4CD9-89EB-9883C97CBCCB"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_2500:4.6:*:*:*:*:*:*:*","matchCriteriaId":"FE5F1FBD-3789-411A-B980-4FFCDF6D5422"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_4500:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9D51E8C8-DAD5-49F7-8E4B-872F0F8D597A"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox_4500:4.6:*:*:*:*:*:*:*","matchCriteriaId":"52C0479C-9CEE-470F-B8C5-28587D19F602"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99379787421319&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/189783","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2855","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6682","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99379787421319&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/189783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0693","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_enterprise_reporting_server:3.1c:*:*:*:*:*:*:*","matchCriteriaId":"1E877810-0229-45BA-8AC0-8EF3B370E2A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:webtrends_enterprise_reporting_server_nt:3.5:*:*:*:*:*:*:*","matchCriteriaId":"4BAB2814-493C-4625-B19B-2FF5DEE56983"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99166905208903&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2812","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6639","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99166905208903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0694","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.00_r5:*:*:*:*:*:*:*","matchCriteriaId":"3DCD39E7-17FB-43BE-B56E-306799FC2B13"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0454.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0454.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0695","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive (A:\\)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.00_r5:*:*:*:*:*:*:*","matchCriteriaId":"3DCD39E7-17FB-43BE-B56E-306799FC2B13"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/182054","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6496","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/182054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0696","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"BE4FD50F-DDFA-40AD-BFCC-F606CEF450F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"AC94C372-7536-4692-AEA7-B58B32E2A5F1"}]}]}],"references":[{"url":"http://netwinsite.com/surgeftp/manual/updates.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/191916","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2891","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6712","source":"cve@mitre.org"},{"url":"http://netwinsite.com/surgeftp/manual/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/191916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0697","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1h","matchCriteriaId":"AEFE3E77-6C42-4809-820C-A6853531D933"}]}]}],"references":[{"url":"http://netwinsite.com/surgeftp/manual/updates.htm","source":"cve@mitre.org"},{"url":"http://www.secadministrator.com/Articles/Index.cfm?ArticleID=20200","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/165816","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6168","source":"cve@mitre.org"},{"url":"http://netwinsite.com/surgeftp/manual/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secadministrator.com/Articles/Index.cfm?ArticleID=20200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/165816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6168","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0698","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"BE4FD50F-DDFA-40AD-BFCC-F606CEF450F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"AC94C372-7536-4692-AEA7-B58B32E2A5F1"}]}]}],"references":[{"url":"http://www.netwinsite.com/surgeftp/manual/updates.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/191916","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2892","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6711","source":"cve@mitre.org"},{"url":"http://www.netwinsite.com/surgeftp/manual/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/191916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0699","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2893","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6726","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0700","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.1","matchCriteriaId":"A9FEEBAC-66C1-4D16-BEFC-A1C8B7DC3618"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"32FAD060-16F4-42E7-91F4-0988EDA29C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9224E435-AB85-46A3-AEF1-CECC1E1AD3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"D76A441D-0F6B-48B6-A9C4-A2F4F54E5697"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"A3E05FDD-9F3C-4E3F-8676-87318F2F8F58"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"0C514206-9D69-435F-9B78-5E53B0CCEE85"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"4629B721-9309-45E5-9B40-DC11E07AB881"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"AB6F19B9-5F15-4FDD-92B9-EC2C762490C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.2:*:*:*:*:*:*:*","matchCriteriaId":"CED5811C-A1BE-4D8E-AA0A-5CB5DB48227A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000434","source":"cve@mitre.org"},{"url":"http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200106.month/537.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-064","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2895","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6725","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200106.month/537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/192371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0701","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sunvts:4.0:*:*:*:*:*:*:*","matchCriteriaId":"1A0A550E-4344-45BE-A2E7-D07ECE08D46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sunvts:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C310A2A4-77B6-410A-AAB5-5004A0466E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sunvts:4.2:*:*:*:*:*:*:*","matchCriteriaId":"AAA453CA-0BA5-49E7-9945-76C30D5B46E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sunvts:4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1D17C6A-7AA0-49E5-A76F-645A9F98181E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2898","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6736","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0702","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF703DF4-A895-4DB8-875C-6D00B8C88252"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"432EAEB9-FF31-4615-A4DF-D9E93B9DFF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.01:*:*:*:*:*:*:*","matchCriteriaId":"9F6054A8-8281-4818-999F-ACB2224CEC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0C6D135-503D-4169-895F-44D22EAAD9A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5848DB91-9D18-431A-BB3E-FACC226D8A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"AF945D2B-3873-43DA-AAA8-93CCA2739AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.22:*:*:*:*:*:*:*","matchCriteriaId":"7E466BF3-8F89-439A-807E-1ECA111EC890"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192655","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2901","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6728","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/192655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0703","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadia:arcadia_internet_store:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8926FDE-1AA8-4333-9BE7-DE4415C1C68E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2905","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0704","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory via a URL with a template argument for a file that does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadia:arcadia_internet_store:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8926FDE-1AA8-4333-9BE7-DE4415C1C68E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192651","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2904","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6738","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0705","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with \"dot dot\" sequences in the template argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arcadia:arcadia_internet_store:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8926FDE-1AA8-4333-9BE7-DE4415C1C68E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192651","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2902","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6737","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0706","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a large number of sub-folders."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C027A457-9563-4B0A-95A4-5E093F34E582"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F05D5A0E-147F-47A7-ABD2-34EF7300B68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"AFAA1F22-560B-4CA6-8FDC-47B5B967B3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxum_development_corporation:rumpus_ftp_server:2.0.3dev:*:*:*:*:*:*:*","matchCriteriaId":"31D21F83-E562-47EB-8B4A-E0993A52CF12"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/190932","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2864","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6699","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/190932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0707","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denicomp:rshd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.18","matchCriteriaId":"C9DB4DA8-19FA-495B-A129-B11DE6EBE9DA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/183911","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/183911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0708","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Denicomp REXECD 1.05 and earlier allows a remote attacker to cause a denial of service (crash) via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denicomp:rexecd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.05","matchCriteriaId":"FF5053B6-55AE-43E6-9656-DB810E3620F4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/183911","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/183911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0709","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"4B21A3CA-6F3B-4C27-A704-A9B8D9A60C15"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192802","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2909","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0710","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"80F6028A-5C2C-4AEF-A8CD-1FD638F89E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"EB651DC9-E4F0-440F-A339-CFA576CED78C"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:52.fragment.asc","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-006.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2799","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6636","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:52.fragment.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0711","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11:*:*:*:*:*:*:*","matchCriteriaId":"155F8A0D-EE85-4FB9-97FB-E410A9374310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ios-snmp-ilmi-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6169","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ios-snmp-ilmi-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0712","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/200109","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/200291","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3116","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/200109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/200291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0713","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.12.1","matchCriteriaId":"1BF8119A-B4E5-4490-B872-3322CE3FFA37"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_sm812.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7192.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3377","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm812.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7192.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0714","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR option, or (3) via the -qS option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.12.1","matchCriteriaId":"1BF8119A-B4E5-4490-B872-3322CE3FFA37"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm812.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm812.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0715","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:*:*:*:*:*:*:*:*","versionEndIncluding":"8.12.1","matchCriteriaId":"1BF8119A-B4E5-4490-B872-3322CE3FFA37"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm812.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm812.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0716","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:*:*:*:*:*:*:*:*","versionEndIncluding":"xp_server_service_pack_1","matchCriteriaId":"A8794079-B12B-442C-B41B-224546F080D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:1.8:sp3:*:*:*:*:*:*","matchCriteriaId":"D25BF1CA-5C34-41B0-AFF5-549171BECB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:xp_server:*:*:*:*:*:*:*","matchCriteriaId":"17A763CB-BFAF-4A62-A145-5EB81DCA36E8"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3440","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise99.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise99.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0717","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tooltalk:tooltalk_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"ED0536F8-C4AB-4EDF-8856-9A7633393DB0"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3584","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1002479","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/212","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-27.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-002.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3382","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise98.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7069","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1002479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-27.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-002.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise98.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0718","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*","versionEndIncluding":"2002","matchCriteriaId":"08B82B9A-5032-4211-8951-6A9F6F29DD14"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:*:*:*","versionEndIncluding":"2002","matchCriteriaId":"652D0655-E3DA-4604-8ACE-E43B326717EA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/218802","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-28.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/287067","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3402","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7223","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/218802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/287067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0719","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/202470","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6962.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5558","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3156","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-056","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A287","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/202470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6962.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0720","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.9:*:*:*:*:*:*:*","matchCriteriaId":"786BB737-EA99-4EC6-B742-0C35BF2453F9"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-013.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3471","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7336","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-013.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0721","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100467787323377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100528449024158&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-054","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100467787323377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100528449024158&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0722","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the \"First Cookie Handling Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100527618108521&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-016.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1982","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/221612","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3513","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7486","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100527618108521&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-016.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/221612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0723","sourceIdentifier":"cve@mitre.org","published":"2001-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the \"Second Cookie Handling Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3546","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0724","sourceIdentifier":"cve@mitre.org","published":"2001-11-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the \"Zone Spoofing Vulnerability variant\" of CVE-2001-0664."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.osvdb.org/5556","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8471","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0726","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"}]}]}],"references":[{"url":"http://www.osvdb.org/5557","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3650","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7663","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/5557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0727","sourceIdentifier":"cve@mitre.org","published":"2001-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the \"File Execution Vulnerability.\""},{"lang":"es","value":"Internet Explorer 6.0 permite a atacantes remotos la ejecución de código arbitrario mediante la modificación de los campos de cabecera 'Content-Disposition' y 'Content-Type' de modo que hace creer a Internet Explorer que es seguro abrir el  fichero sin pedir confirmación al usuario, también conocida como \"File Execution Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100835204509262&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100861273114437&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-36.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-027.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/443699","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3578","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7703","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A921","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100835204509262&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100861273114437&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/443699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0728","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:management_agents:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"4036CBCC-1E39-485F-BAF2-C62BFF23E7DE"}]}]}],"references":[{"url":"http://www.compaq.com/products/servers/management/mgtsw-advisory2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/275979","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3376","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7189","source":"cve@mitre.org"},{"url":"http://www.compaq.com/products/servers/management/mgtsw-advisory2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/275979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0729","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.22:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"}]}]}],"references":[{"url":"http://secunia.com/advisories/23794","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1017522","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/01-09-28#security","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/22083","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/01-09-28#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/22083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0730","sourceIdentifier":"cve@mitre.org","published":"2001-10-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.22:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000430","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/01-09-28#security","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1649.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-126.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-164.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7419","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/01-09-28#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1649.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0731","sourceIdentifier":"cve@mitre.org","published":"2001-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the \"M=D\" query string."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.22:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020301-01-P","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/01-10-05#security","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-126.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-164.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/20010709214744.A28765%40brasscannon.net","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3009","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8275","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020301-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/01-10-05#security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/20010709214744.A28765%40brasscannon.net","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0733","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.14","matchCriteriaId":"473F4845-AB3F-4120-BA45-B18E3CE3A790"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.0:*:*:*:*:*:*:*","matchCriteriaId":"17CD8EFB-0D55-4E6A-8670-569A46C8FEAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3396BE28-B4E5-44A0-85D4-EB7761938FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D69A7D12-1C56-414E-BDE8-EC7BF911268D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B30235AE-3FA3-4E4C-A472-88C3FB6BA0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7D5A87-ACF8-4F96-A3FA-43824EE921E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"92DFC2BC-20A0-43E1-811A-84AC757765D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"17F9521F-3EB1-484E-95E1-8DE94CBC965D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2:*:*:*:*:*:*:*","matchCriteriaId":"6929EB60-B8E1-46EE-A6C3-1113870E0010"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DBF83932-5764-4E96-B82F-4C516DF7C04F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2F8188B5-FF0E-4A5F-BDF7-B55ABD2ED8AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"6E9AD92A-36FA-45D1-9511-4A4702A57B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C92C1B2D-7294-4851-B56C-040697ED4F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"27C68020-0A8A-4024-A411-2E0C6897E409"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"97177077-1779-4FC8-AFBA-F8017B1D6516"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"DB0C283D-2311-4AC3-A6AA-5E0624DAE1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"04543544-0550-4B78-9D4F-8A78FCA0B17B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"4D087909-F3DF-4493-A4B6-CDE5A3218FC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"4A5C2823-50A7-4605-827F-8C23CCDBB689"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0484C322-C5F5-494E-A362-361807A3ADF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"DAEFD4F6-73A1-4011-ABAE-5C5E86CB535A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ralf_s._engelschall:eperl:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"CB4D88BA-5427-4A46-942C-C93679C9D808"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/192711","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0734","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:sh3:*:*:*:*:*","matchCriteriaId":"393738E7-93E1-4A37-817B-C023A9BD1DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:sh3:*:*:*:*:*","matchCriteriaId":"52F2B17F-A169-402C-AA05-0DE5D805BAD6"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-008.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2810","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6637","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0735","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA9E8C3B-C2D0-4242-AC80-6EB1A4ABBBCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3C6DB288-F853-4014-A3E7-751EBE34536E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infodrom:cfingerd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0F6785-806D-467A-B4B4-5E7B268A5EA9"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-066","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192844","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2914","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6744","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/192844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0736","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:*:*:*:*:*:*:*:*","versionEndIncluding":"4.33","matchCriteriaId":"12627ECC-CFED-4893-8C1C-5CC454A982E1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79A6E38E-9BC6-4CD7-ABC6-754C9DB07DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98749102621604&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99106787825229&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-042.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6367","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98749102621604&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99106787825229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0737","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:cordless_freedom:*:*:*:*:*:*:*:*","matchCriteriaId":"CF74A508-5370-4D83-901F-C78F6B8308A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:cordless_freedom_navigator:*:*:*:*:*:*:*:*","matchCriteriaId":"DA1555B1-70BB-4A13-AE07-8D131EA552A9"},{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:cordless_freedom_pro:*:*:*:*:*:*:*:*","matchCriteriaId":"6DCC0091-06B2-4D9D-9239-A40F6612686A"},{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:cordless_itouch_keyboard:*:*:*:*:*:*:*:*","matchCriteriaId":"8EE6D6C5-3672-4F90-86FB-9A306CA8B590"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/185003","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/3B0A36C8.E9D8610%40daten-treuhand.de","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2738","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6562","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/185003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/3B0A36C8.E9D8610%40daten-treuhand.de","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0738","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:1.3:*:*:*:*:*:*:*","matchCriteriaId":"745ACC17-B6D6-4B4E-9648-A8B45C4A3F7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-026-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99258618906506&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/249579","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7098","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-026-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99258618906506&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/249579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0739","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79A6E38E-9BC6-4CD7-ABC6-754C9DB07DB2"}]}]}],"references":[{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1404.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-126.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7404","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1404.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0740","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of \"%s\" strings, possibly triggering a format string vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3c840-us:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"B396316D-02AC-461F-9772-39A7EABEC4A3"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.9","matchCriteriaId":"BF3EDD33-AC7E-4869-9F11-4593D898C2D8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0115.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100119572524232&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100137290421828&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2721","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6573","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100119572524232&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100137290421828&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0741","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:hsrp:*:*:*:*:*:*:*:*","matchCriteriaId":"8E75AEBF-D509-42B5-9EF5-67649D7E8FA5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0035.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/networkers/nw00/pres/2402.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2684","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6497","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/networkers/nw00/pres/2402.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0742","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:computalynx:cmail:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"14FBCE95-ACC0-4BCD-8EA8-B69BE9B78AC2"}]}]}],"references":[{"url":"http://www.securiteam.com/windowsntfocus/5UP0B204AY.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5UP0B204AY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0743","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oreilly:webboard:4.10.30:*:*:*:*:*:*:*","matchCriteriaId":"0CABA0F5-E637-48B8-9778-1F433277ACF2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0326.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2814","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0744","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"B8CBE562-6B8F-4BDA-B1EB-BACBF22925B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D11E08A4-79D6-46FE-880F-66E9778C298E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55A3894F-2E3F-49CA-BEE5-759D603F6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3B52D447-8E56-4E04-9650-38D222DA8D2C"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-025.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0303.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.horde.org/imp/2.2/news.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-025.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0303.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.horde.org/imp/2.2/news.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-0745","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:messanger:4.7x:*:*:*:*:*:*:*","matchCriteriaId":"400E7B23-57DA-440D-B27E-213472EBF248"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0014.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5543","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7417","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0746","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp3:*:*:*:*:*:*:*","matchCriteriaId":"83651DFD-50C1-451F-AAB1-F1392790CD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp4:*:*:*:*:*:*:*","matchCriteriaId":"3A6338DC-E60A-4BA9-8CB3-9BA8DB6D9834"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp5:*:*:*:*:*:*:*","matchCriteriaId":"8099D845-6335-4B52-B8FB-210EB1CA7B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp6:*:*:*:*:*:*:*","matchCriteriaId":"243B2B9A-920C-4EE8-A8BD-46810C6C76D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp7:*:*:*:*:*:*:*","matchCriteriaId":"B9ECA407-AA77-4155-A746-10C3F49519FB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2732","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6554","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0747","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B2091816-7705-462D-BB91-76D07B9A1F3E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0203.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0748","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:acme_server:1.7:*:*:*:*:*:*:*","matchCriteriaId":"39C4FDC1-A4DA-4D6F-B546-7D0EFF4B0CC4"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/acmeweb-acsunix-dirtravers-vuln-pub.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/6634.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/5544","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/188141","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2809","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/acmeweb-acsunix-dirtravers-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/6634.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/5544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/188141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0749","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beck_ipc_gmbh:ipc_at_chip_embedded-webserver:*:*:*:*:*:*:*:*","matchCriteriaId":"F2F9DC4E-550A-4CC2-BCE9-B16B68DF1AE5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8922","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0750","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(2\\)t:*:*:*:*:*:*:*","matchCriteriaId":"B2A0B63E-5CCF-4441-A6A1-B4EE1A556070"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)t:*:*:*:*:*:*:*","matchCriteriaId":"156DB723-98BC-402A-A517-18D20DA45206"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ios-tcp-scanner-reload-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2804","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6589","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ios-tcp-scanner-reload-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0751","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections."},{"lang":"es","value":"Conmutadores y routers Cisco corriendo CBOS 2.3.8 usan números iniciales de secuencia TCP (ISN) predecibles, lo que permite a un atacante remoto secuestrar o falsificar conexiones TCP;"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8","matchCriteriaId":"6E02E785-40FF-4F46-BB32-4D07F08352D2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/139","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0752","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set."},{"lang":"es","value":"Cisco CBOS 2.3.8 y anteriores permiten a atacantes remotos causar una denegación de servicio mediante un paquete ICMP de petición de eco (ping) con la opción trazar ruta activada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8","matchCriteriaId":"6E02E785-40FF-4F46-BB32-4D07F08352D2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5573","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7298","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0753","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8","matchCriteriaId":"6E02E785-40FF-4F46-BB32-4D07F08352D2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44544","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0754","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets."},{"lang":"es","value":"Cisco CBOS 2.3.8 y anteriores permiten a atacantes causar una denegación de servicio mediante una serie de paquetes ICMP de petición de eco (ping) grandes, que les hacen entrar en modo ROMMON y dejar de reenviar paquetes"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8","matchCriteriaId":"6E02E785-40FF-4F46-BB32-4D07F08352D2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7299","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0755","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2F1D5A17-F34C-4898-BAF4-DABCE50CF6A4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0188.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0756","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtualcart:virtualcatalog:*:*:*:*:*:*:*:*","matchCriteriaId":"C6B7E2EF-48E1-4593-B7BB-D76492D17F1B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0067.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99237435902211&w=2","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99237435902211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0757","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet."},{"lang":"es","value":"La tarjeta Node Route Proccessor 2 (NRP2) 12.1DC del concentrador de acceso Cisco 6400 no desactiva adecuamente el acceso cuando no se establece contraseña para vtys, lo que permite a atacantes remotos obtener acceso mediante telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:6400_nrp_2:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"4DF59478-9780-4B37-9582-D20D83DF678A"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-097.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/6400-nrp2-telnet-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/516659","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/804","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2874","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6691","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-097.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/6400-nrp2-telnet-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/516659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0758","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via \"CWD ...\"  command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolvable_corporation:shambala_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D0038B0E-2EF8-421C-B745-03B09DC2322B"}]}]}],"references":[{"url":"http://www.securiteam.com/windowsntfocus/5SP011P4KC.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP011P4KC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0759","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetico:bestcrypt:0.6:*:*:*:*:*:*:*","matchCriteriaId":"9AC08ABC-FE4D-4F0D-A740-880548AD5677"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetico:bestcrypt:0.7:*:*:*:*:*:*:*","matchCriteriaId":"5F2B1645-8DDD-436C-8500-40F077C42258"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetico:bestcrypt:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"200C5531-982D-4991-88E8-776464FA0EAE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/191111","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2875","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/191111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0760","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field."},{"lang":"es","value":"Citrix Nfuse 1.51 permite a atacantes remotos obtener la ruta absoluta de la raíz del web mediante una petición malformada que no provee el campo de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:nfuse:1.51:*:*:*:*:*:*:*","matchCriteriaId":"F4A451DF-C634-4C51-A0ED-26FA6A485A86"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/194449","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2956","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6786","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/194449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0761","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value to a certain parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_webmanager:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B1C33920-9BC7-41BC-BB66-723D0BAF2839"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/194463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2959","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0762","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:su-wrapper:su-wrapper:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"987A7401-C80A-4B88-A8AA-5FC06467A6D2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0057.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0763","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.8.8.p3-1.1","matchCriteriaId":"41A5311E-752F-4C45-8FA0-8B38F9186FA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000404","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-024-01","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-104.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-063","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1469.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2840","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6670","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-024-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-104.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1469.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0764","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument."},{"lang":"es","value":"Desbordamiento de buffer en ntping en Scotty 2.1.0 permite a usuarios locales ejecutar código arbitrario mediante un nombre de máquina largo como argumento de linea de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juergen_schoenwaelder:scotty:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6D6F0C61-87DC-4326-9D53-B3064977E219"},{"vulnerable":true,"criteria":"cpe:2.3:a:juergen_schoenwaelder:scotty:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B20FBC4-6D25-4C19-A825-702C88CEFF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:juergen_schoenwaelder:scotty:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"83772F08-18CD-4EFE-828F-D928E7724591"},{"vulnerable":true,"criteria":"cpe:2.3:a:juergen_schoenwaelder:scotty:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"311FA4EF-5C3F-4A83-A805-B2EC77E238C1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0579.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0627.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_023_scotty_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/192664","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2911","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6735","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0579.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0627.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_023_scotty_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/192664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0765","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories."},{"lang":"es","value":"BisonFTP V4R1 permite a usarios locales acceder a directorios fuera del suyo cargando ficheros .bld que pueden ser enlazados a otros directorios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bisonware:bison_ftp_server:v4r1:*:*:*:*:*:*:*","matchCriteriaId":"617FF40B-FCD2-4039-BD40-7A8C1BB050D6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bisonftp.com/ServRev.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2963","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6782","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bisonftp.com/ServRev.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0766","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0090.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2852","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0767","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_poulsen:guildftpd:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"CACDEBBB-1D5F-49C3-A778-830DF5B2C4A1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nitrolic.com/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nitrolic.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0768","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_poulsen:guildftpd:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"CACDEBBB-1D5F-49C3-A778-830DF5B2C4A1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6611","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0769","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_poulsen:guildftpd:0.97:*:*:*:*:*:*:*","matchCriteriaId":"FE4F775F-01A4-4725-AB58-B6DCFCBD573F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0254.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6613","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0770","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_poulsen:guildftpd:0.97:*:*:*:*:*:*:*","matchCriteriaId":"FE4F775F-01A4-4725-AB58-B6DCFCBD573F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0254.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nitrolic.com/help/history.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6612","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nitrolic.com/help/history.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0771","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the \"loginpass\" field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spytech-web:spyanywhere:1.50:*:*:*:*:*:*:*","matchCriteriaId":"B18613EB-D9E7-4C91-B5F4-CD358AF0B533"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/186006","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2755","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6578","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/186006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0772","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*","versionEndIncluding":"11.11","matchCriteriaId":"F42BC6B3-EA80-4D15-B7BB-38E12615D03C"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0044.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6585","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6022","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0773","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests."},{"lang":"es","value":"El router DSL Cayman 3220-H 1.0 permite a atacantes remotos producir una denegación de servicio (ostia) mediante una serie de paquetes SYN (peticiones de conexión de TCP/IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:3220-h_dsl_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C4894F-C634-4830-B0D8-F6158C074A89"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/312761","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/195644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3001","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6825","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/312761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/195644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0774","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files."},{"lang":"es","value":"Tripwire 1.3.1, 2.2.1 y 2.3.0 permite a usuarios locales sobreescribir ficheros arbitrarios y posibilita ganar privilegios mediante un ataque de enlaces simbólicos en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A5573059-D3E4-4760-BECF-74F137421244"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FF3F4FED-7015-4797-9EBF-694B9EA9CE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AD06AF56-3FB0-4005-AAA7-445C4D6C28B8"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/349019","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-064.php3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1895","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195617","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3003","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6820","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/349019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-064.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/195617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0775","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xli:xli:1.16:*:*:*:*:*:*:*","matchCriteriaId":"44737F18-0C52-451E-9555-0A222F02B321"},{"vulnerable":true,"criteria":"cpe:2.3:a:xli:xli:1.17:*:*:*:*:*:*:*","matchCriteriaId":"6EE9AD48-3D2F-44AD-9950-494B14E3FC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:xloadimage:xloadimage:4.1:*:*:*:*:*:*:*","matchCriteriaId":"7B1B749C-552E-4DE4-A43D-B21021D0EF6E"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-695","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-05.xml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6821.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_024_xli_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-088.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195823","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3006","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6821.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_024_xli_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/195823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0776","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dynfx:dynfx_mailserver:2.10:*:*:*:*:*:*:*","matchCriteriaId":"F9C98405-7977-473E-9450-5739CD2C26FF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0278.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2781","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6615","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0278.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0777","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D2FCE2E5-0BF5-496D-B083-553AE163C809"},{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"671A9E75-C199-48C2-9364-5305F30C8897"},{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5EBAD41-B221-4F7B-A984-40F2F0C23B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FB24FDB-BE4F-4B28-8ECE-B1494082F76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5DBB9E17-9C38-452A-A44F-D728A5DA040D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0248.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2783","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6620","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0778","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8","matchCriteriaId":"A0A4024A-52B1-40DD-B6E3-449F5AA252DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0248.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.omnicron.ca/httpd/docs/release.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6621","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.omnicron.ca/httpd/docs/release.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0779","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username."},{"lang":"es","value":"Desbordamiento de buffer en rpc.yppasswdd (servidor de yppasswd) en Solaris 2.6, 7 y 8 permite a atacantes remotos obtener acceso de root mediante un nombre de usuario largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/209","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-008.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/327281","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/187086","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/200110041632.JAA28125%40dim.ucsd.edu","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2763","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6629","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A102","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A56","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-008.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/327281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/187086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/200110041632.JAA28125%40dim.ucsd.edu","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A56","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0780","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cosmicperl:directory_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0B46-45E7-4C24-87A8-78A667F0A751"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/187182","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2793","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/187182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0781","sourceIdentifier":"cve@mitre.org","published":"2001-05-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"SpoonFTP v1.0.0.13 fixes problem.","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:1.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D9BBE186-B866-463E-8260-C916ED30A183"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0296.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6630","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0782","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:ktv:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.1.271","matchCriteriaId":"671B26C4-62D7-4AD3-A0A1-1720DE714DCF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0302.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6741","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0302.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0783","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:tftp_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6D365285-9642-4636-8DB8-4AC2A5CF003B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0227.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2886","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.sentry-labs.com/files/cisco0201061701.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6722","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.sentry-labs.com/files/cisco0201061701.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0784","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot)  attack using encoded URL characters."},{"lang":"es","value":"Vulnerabilidad en el atravesamiento de directorios de Icecast 1.3.10 y anteriores permite a atacantes remotos leer ficheros arbitrarios mediante un ataque modificado .. (punto punto) usando caractéres URL codificados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:*:*:linux:*:*:*:*:*","versionEndIncluding":"1.310","matchCriteriaId":"3D6257FD-C6AD-4B38-A6D2-7B4D15876D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9C35E7B3-C898-4127-9188-65E691148EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.8_beta2:*:*:*:*:*:*:*","matchCriteriaId":"09D43B23-E146-41E9-AFA4-A107DF96A268"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0353.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-089","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1883","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-105.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2932","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6752","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0353.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0785","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows allows remote attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet_software_solutions:air_messenger_lan_server:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B669EE28-D247-449F-9068-45B19BD3E6C2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2883","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0786","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores user passwords in plaintext in the pUser.Dat file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet_software_solutions:air_messenger_lan_server:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B669EE28-D247-449F-9068-45B19BD3E6C2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2882","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0787","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges."},{"lang":"es","value":"LPRng en Red Hat Linux 7.0 y 7.1 no libera miembros en grupos suplementarios cuando se bajan los privilegios, lo que podría permitir a un usuario local elevar sus privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-096.shtml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-077.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2865","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6703","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-096.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0788","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet_software_solutions:air_messenger_lan_server:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B669EE28-D247-449F-9068-45B19BD3E6C2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2881","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0789","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/134.html\" rel=\"nofollow\">CWE-134: Use of Externally-Controlled Format String</a>","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en avpkeeper en Kaspersky KAV 3.5.135.2 para Sendmail permite a atacantes remotos provocar una denegación de servicio o posiblemente ejecutar código arbitrario a través de un mensaje de correo electrónico mal formado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky:kaspersky_anti-virus:3.5.132.2:*:*:*:*:sendmail:*:*","matchCriteriaId":"731F8CA2-F382-4093-A1F3-81F7A10913EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0274.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0274.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0790","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan, which causes the server to consume CPU while preparing alerts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:specter:specter_ids:4.5:*:*:*:*:*:*:*","matchCriteriaId":"87F4A129-7EFA-4D0A-AA6B-656E1F1E7AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:specter:specter_ids:5.0:*:*:*:*:*:*:*","matchCriteriaId":"600DEE63-0570-4FFC-B1CA-85ADD432DECC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2001-q2/0071.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2001-q2/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0791","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:*:*:*:*:*:*:*:*","matchCriteriaId":"3F3D7981-9319-4EAE-B4CB-A12DB51C0412"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00006.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0792","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.2.x:*:*:*:*:*:*:*","matchCriteriaId":"949D4D39-2B40-441A-A015-9C8667441ACB"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/5AP0Q2A4AQ.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7416","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5AP0Q2A4AQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0794","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a-ftp:anonymous_ftp_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8BDD85B2-86D2-4023-A3F8-3718170FF2C8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0280.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0280.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0795","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmfperception:liteserve:1.25:*:*:*:*:*:*:*","matchCriteriaId":"5281A4D3-2846-453A-A42C-21C9CDDDEF0D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0328.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2926","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0328.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0796","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay."},{"lang":"es","value":"SGI IRIX 6.5 a 6.5.12f y posiblemente versiones anteriores, y FreeBSD 3.0, permiten a un atacante remoto producir una denegación de servicio mediante un paquete un paquete IGMP malformado con un pequeño retardo de respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.12f","matchCriteriaId":"DDA8B3FB-DE77-4841-B493-F46C4A91A6A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011001-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=8990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3463","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7332","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011001-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=8990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0797","sourceIdentifier":"cve@mitre.org","published":"2001-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin."},{"lang":"es","value":"Desbordamiento de búfer en la entrada a varios sistemas operativos basados en System V, permite a atacantes remotos la ejecución de comandos arbitrarios mediante un gran número de argumentos a través de servicios como telnet y rlogin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"199F4D8C-2FB9-4AF7-B7A3-339513665616"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*","matchCriteriaId":"41D0212C-EA41-4DF3-9A93-4559545BCD7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3567046C-FE3F-424D-A1B0-D7A43D00B79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"40511481-CD42-4EB7-BE2A-7A78964B7D3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D926CDA1-AF2B-4DED-93AE-8F12091E0B23"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*","matchCriteriaId":"3187435B-C052-4DBA-AA79-F8AC0287EE14"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB008E3-9A00-4D28-8826-A9FCC9F65314"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74C1B49F-9EEF-4857-B444-840F91E2B40A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6236FA51-E996-4E84-A8CC-2635A814CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"BBC635C0-2B09-41F5-8160-365EC8642F89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*","matchCriteriaId":"1F881110-7B54-49DA-B23A-710273430C44"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1370216-93EB-400F-9AA6-CB2DC316DAA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FF2C7C4-6F8D-40DB-9FBC-E7E4D76A2B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"84523B48-218B-45F4-9C04-2C103612DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C7A22D21-E0A9-4B56-86C7-805AD1A610D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100844757228307&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-34.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/569272","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246487","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3681","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise105.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7284","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100844757228307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY26221&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/569272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise105.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0799","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.13f","matchCriteriaId":"039404D4-B81E-4F1A-A0DF-1F31B6CC6C9E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lsd-pl.net/files/get?IRIX/irx_lpsched2","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8572","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7641","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lsd-pl.net/files/get?IRIX/irx_lpsched2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0800","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.13f","matchCriteriaId":"039404D4-B81E-4F1A-A0DF-1F31B6CC6C9E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lsd-pl.net/files/get?IRIX/irx_lpsched2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27566","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lsd-pl.net/files/get?IRIX/irx_lpsched2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0801","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library."},{"lang":"es","value":"lpstat en IRIX 6.5.13.f y anteriores permite a usuarios locales obtener privilegios de root especificando un caballo de troya como librería compartida de nettype."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.13f","matchCriteriaId":"039404D4-B81E-4F1A-A0DF-1F31B6CC6C9E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lsd-pl.net/files/get?IRIX/irx_lpstat2","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7639","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lsd-pl.net/files/get?IRIX/irx_lpstat2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0803","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CF2E9D-CDA8-4131-93F3-7A2860A688C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"690A998B-EDDA-4247-96CC-318718C3F79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B7178A47-F7D9-44FC-A2D2-82504EA6F115"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.2:*:*:*:*:*:*:*","matchCriteriaId":"74C56D68-802D-46C7-ABB1-DA1D9BE00C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:2.0:*:*:*:*:*:*:*","matchCriteriaId":"706EEB12-AB99-4126-956F-B7253D51D0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2F897B7F-2F0E-4D96-89EA-621D06B7D613"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011107-01-P","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.30/","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/214","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-31.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2002-01.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/172583","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/3651","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3517","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise101.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7396","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011107-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.30/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2002-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/172583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/3651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/alerts/advise101.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A70","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A74","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0804","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the \"next\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valerie_mates:interactive_story:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28AF63C9-8B9D-4A31-9883-8F7689D5F7D2"}]}]}],"references":[{"url":"http://www.osvdb.org/683","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3028","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.valeriemates.com/story_download.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6843","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.valeriemates.com/story_download.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0805","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDA7723A-7057-4410-A6B9-885B10ACEE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.01:*:*:*:*:*:*:*","matchCriteriaId":"381E5189-01A1-4692-8226-92C7E7FE9DAB"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/20010619150935.A5226%40tarantella.com","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/3B2E37D0.81D9ED9D%40snosoft.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2890","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/20010619150935.A5226%40tarantella.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/3B2E37D0.81D9ED9D%40snosoft.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0806","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99358249631139&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99436289015729&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/219166","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2930","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6750","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99358249631139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99436289015729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/219166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0807","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"}]}]}],"references":[{"url":"http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=189341","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6688","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=189341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0808","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yngve_svendsen:gnatsweb:2.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"E2927DA6-4836-4CDE-97F1-AEC816CF05FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:yngve_svendsen:gnatsweb:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"10750679-4D90-4365-995E-001CA0AB0D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yngve_svendsen:gnatsweb:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"BE8DB446-7805-43F5-BF95-063716F090CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:yngve_svendsen:gnatsweb:3.95:gnats_4:*:*:*:*:*:*","matchCriteriaId":"F327FA35-5722-49E2-85FB-1E7FDBA004AE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6753","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0809","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0074.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5673","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0815","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.1.629","matchCriteriaId":"323F7A23-2635-4783-B1CD-165CAF9EB156"}]}]}],"references":[{"url":"http://bugs.activestate.com/show_bug.cgi?id=18062","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100583978302585&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3526","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7539","source":"cve@mitre.org"},{"url":"http://bugs.activestate.com/show_bug.cgi?id=18062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100583978302585&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0816","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.9","matchCriteriaId":"689B5DE2-D3F3-49D6-8C80-AFE4EAFEE092"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0153.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5536","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-154.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7634","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0817","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-32.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-021.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/638011","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3561","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/alerts/advise102.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7234","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-021.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/638011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/alerts/advise102.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0818","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow the '\\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marty_bochane:mdbms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99b9","matchCriteriaId":"45FF42BE-C421-4BEC-BF00-DA7FBEBE67C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:marty_bochane:mdbms:0.96b6:*:*:*:*:*:*:*","matchCriteriaId":"CEC3A160-434A-433D-9ED6-268B25CCD1CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:marty_bochane:mdbms:0.99b4:*:*:*:*:*:*:*","matchCriteriaId":"CDC1039C-AE68-4CA0-A8ED-3DCB06570564"},{"vulnerable":true,"criteria":"cpe:2.3:a:marty_bochane:mdbms:0.99b5:*:*:*:*:*:*:*","matchCriteriaId":"5F161058-462C-42AD-B5DE-B626F6C55620"},{"vulnerable":true,"criteria":"cpe:2.3:a:marty_bochane:mdbms:0.99b6:*:*:*:*:*:*:*","matchCriteriaId":"A81CE320-F089-4266-8877-C8DF0B5DA319"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/190933","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2867","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6700","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/190933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0819","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8.5","matchCriteriaId":"00047715-4AB1-411A-B1A2-02245F1266A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:43.fetchmail.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000403","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-025-01","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-022.1.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-060","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-063.php3?dis=7.1","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1451.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-103.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2877","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6704","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:43.fetchmail.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-025-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-022.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-063.php3?dis=7.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1451.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0820","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gaztek:ghttp:1.4:*:*:*:*:*:*:*","matchCriteriaId":"54129B65-8A3B-47BB-9ACE-17A6FEC88FBE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99279182704674&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99406263214417&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2879","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2965","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6702","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99279182704674&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99406263214417&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0821","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcshop:1.002_beta:*:*:*:*:*:*:*","matchCriteriaId":"059C1720-9768-4224-8C66-2C6ECF5A708A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0233.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.dcscripts.com/dcforum/dcshop/44.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2889","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6707","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0233.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.dcscripts.com/dcforum/dcshop/44.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0822","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:packet_knights:fpf_linux_kernel_module:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7A3B4F07-A9F1-457E-ADBE-AE8507AD51A2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99167206319643&w=2","source":"cve@mitre.org"},{"url":"http://www.pkcrew.org/news.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2816","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6659","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99167206319643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pkcrew.org/news.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0823","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"81FC987D-ACD6-4495-87FE-5C3547CE22B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DECE1AE3-0247-4170-A02F-03D33A6DD33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D4E5A424-E298-4967-8174-CB6035126750"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DCFD1859-A3F0-4A1C-B593-B9FBFDF165D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5B5E5B48-F324-49DB-BD42-B8F9B9C3EA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"C9D6FF9F-006D-45C9-B0A1-A2E450A75590"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"1C8F4743-9016-453B-81E7-F3BEC6979FE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"817F8589-040B-4216-95A2-FE70000B1CDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"C4B93DB7-2220-4CF6-B2F3-BB953023EE94"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"4F9A53D4-333E-4DD1-A99D-AC35C808A138"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"9F08C5F0-6EF7-4539-9CED-D3F3E81EEA82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:performance_co-pilot:2.2:*:*:*:*:*:*:*","matchCriteriaId":"551F7EA0-7323-4D0C-8DE2-EE08689DAFDE"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010601-01-A","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0245.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99290754901708&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2887","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6724","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20010601-01-A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99290754901708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0824","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FC25AE4-76D2-4FE6-8B33-7069322EBC5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"06D2CEBB-0CEB-4BD2-B3E7-657D26770597"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2969","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0825","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.1","matchCriteriaId":"65E549AA-F0A8-4290-97D3-4F1FFA9880CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"6C378594-2892-4A0E-807D-D5201E6D465F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"5DB40DBC-E2DC-4F60-A4BC-236D42A5ED7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3D29D598-7150-46E8-B199-A70116EEA742"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000406","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-029-01","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-092.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2971","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6804","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-029-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-092.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0826","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aclogic:cesarftp:0.98b:*:*:*:*:*:*:*","matchCriteriaId":"C9E01331-AB2C-4A40-BB5F-E7409079C6A8"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/20010630093621.66913.qmail%40web13002.mail.yahoo.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/20010630093621.66913.qmail%40web13002.mail.yahoo.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0827","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-23T16:15:18.870","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of \"PASV\" requests."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CF703DF4-A895-4DB8-875C-6D00B8C88252"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"432EAEB9-FF31-4615-A4DF-D9E93B9DFF2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.01:*:*:*:*:*:*:*","matchCriteriaId":"9F6054A8-8281-4818-999F-ACB2224CEC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E0C6D135-503D-4169-895F-44D22EAAD9A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5848DB91-9D18-431A-BB3E-FACC226D8A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"AF945D2B-3873-43DA-AAA8-93CCA2739AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:ceberus_ftp_server:1.22:*:*:*:*:*:*:*","matchCriteriaId":"7E466BF3-8F89-439A-807E-1ECA111EC890"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2976","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0828","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.4","matchCriteriaId":"030F7B20-ED04-4A31-80DA-C4000EBAEC4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"150FA89A-58BB-4A74-A1F4-B1BCFA03A98D"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"cve@mitre.org"},{"url":"http://www.caucho.com/products/resin/changes.xtp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/981651","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2981","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6793","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caucho.com/products/resin/changes.xtp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/981651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0829","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7079F63C-7CA8-4909-A9C8-45C4C1C1C186"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"cve@mitre.org"},{"url":"http://jakarta.apache.org/tomcat/tomcat-3.2-doc/readme","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2982","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://jakarta.apache.org/tomcat/tomcat-3.2-doc/readme","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0830","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-772"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:6tunnel_project:6tunnel:*:*:*:*:*:*:*:*","versionEndIncluding":"0.08","matchCriteriaId":"B58776F5-F89E-456E-8BBF-B081DD979C39"}]}]}],"references":[{"url":"ftp://213.146.38.146/pub/wojtekka/6tunnel-0.09.tar.gz","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=100386451702966&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/3467","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7337","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://213.146.38.146/pub/wojtekka/6tunnel-0.09.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=100386451702966&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/3467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0831","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access."},{"lang":"es","value":"Vulnerabilidad en Oracle Label Security en Oracle 8.1.7 y 9.0.1 cuando se usan la funcionalidad de auditar, SET_LABEL o SQL*Predicate, permite a usuarios locales ganar privilegios adicionales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED700CB5-6896-41D1-ABEF-98FC159940F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"203B7526-8009-45BA-840D-CAC6A09E8ABE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100386756715645&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/OLS817alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7344.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3465","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100386756715645&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/OLS817alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7344.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0832","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the \"Oracle File Overwrite Security Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.1","matchCriteriaId":"76DB240A-9089-4E5E-8FA8-9B976C32797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"05E6B744-9449-4C20-B7F7-8F3922C360C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D71D7201-8853-4FA1-89D3-A827281531B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100386756715645&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100386756715645&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0833","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the \"Oracle Trace Collection Security Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.1","matchCriteriaId":"76DB240A-9089-4E5E-8FA8-9B976C32797E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"05E6B744-9449-4C20-B7F7-8F3922C360C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D71D7201-8853-4FA1-89D3-A827281531B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100386756715645&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/201295","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/222612","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/otrcrep.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-011.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6940","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100386756715645&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/201295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/222612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/otrcrep.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0834","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.5","matchCriteriaId":"43CC50AC-510B-4340-AF87-872992FC38DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97177EF7-8FC4-4D4D-A8D9-3628AA0035FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100260195401753&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-080","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-139.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3410","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7262","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7263","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100260195401753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-139.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0835","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bradford_barrett:webalizer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.6","matchCriteriaId":"F5701FB3-1F15-4E08-83B3-35128DE54AE3"}]}]}],"references":[{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Nov/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100394630702875&w=2","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1677.html","source":"cve@mitre.org"},{"url":"http://www.mrunix.net/webalizer/news.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-140.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-141.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3473","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7350","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7351","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Nov/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100394630702875&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1677.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mrunix.net/webalizer/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-141.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0836","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100342151132277&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100395487007578&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/webcache.pdf","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-29.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/649979","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5534","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7306","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100342151132277&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100395487007578&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/webcache.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/649979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0837","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltathree:pc-to-phone:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D0B96A4E-EA95-444C-B46F-C8715E0F3176"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100403691432052&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7393","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100403691432052&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0838","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.x:*:*:*:*:*:*:*","matchCriteriaId":"26BA3D50-FE6D-49C8-83D3-6D8CE8ACCC90"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100402652724815&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100402652724815&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0839","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibill_internet_billing_company:processing_plus:*:*:*:*:*:*:*:*","matchCriteriaId":"19475304-2B9B-4DB1-B19C-E050C87A37EC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100404371423927&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3476","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7352","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100404371423927&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0840","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:1.0:*:*:*:*:*:*:*","matchCriteriaId":"091FB40A-03CD-4CDF-961D-A6D0AECDE6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*","matchCriteriaId":"803B702A-3D4D-4438-A182-B181BEA00270"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:2.1:*:*:*:*:*:*:*","matchCriteriaId":"87261CA0-1226-46EA-9725-23DFBB443067"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_manager_xe:2.1b:*:*:*:*:*:*:*","matchCriteriaId":"71C976B5-5B6C-40DC-8C9E-10283B2BCA29"}]}]}],"references":[{"url":"http://www.compaq.com/products/servers/management/mgtsw-advisory.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7411.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/908611","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3482","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.compaq.com/products/servers/management/mgtsw-advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7411.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/908611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0841","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:*:*:*:*:*:*:*:*","versionEndIncluding":"ib219","matchCriteriaId":"6C13C88A-7E21-4016-AD0F-47945FF96797"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100446445208739&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7433.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3486","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100446445208739&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7433.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0842","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leoboard:lb5000:*:*:*:*:*:*:*:*","versionEndIncluding":"1029","matchCriteriaId":"03E2480B-8B72-4C8B-B051-E74AF5E4DE0C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100446455809273&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7436.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3484","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100446455809273&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7436.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0843","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4","matchCriteriaId":"A44E11F5-90CB-4057-BFCA-EBCA488D3049"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/conectiva/2001-q3/0020.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100109679010256&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-077","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-088.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_037_squid_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-113.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3354","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7157","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/conectiva/2001-q3/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100109679010256&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-088.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_037_squid_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0844","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seth_leonard:book_of_guests:*:*:*:*:*:*:*:*","matchCriteriaId":"1687D7A7-CBF3-41D2-B825-B92042554C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:seth_leonard:post_it:*:*:*:*:*:*:*:*","matchCriteriaId":"4D7E686A-5D0D-4AC4-BEDD-1A1CDF687B3C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100446263601021&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7434.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7435.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3483","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3485","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100446263601021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7434.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7435.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0845","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:6.2_vax:*:*:*:*:*:*:*","matchCriteriaId":"834D638A-30FD-4F37-A876-AFC1DE3D2C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:7.1_vax:*:*:*:*:*:*:*","matchCriteriaId":"AE57DEE5-0F14-41EC-9242-631908CB8EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:7.2_vax:*:*:*:*:*:*:*","matchCriteriaId":"53E60EE4-22AE-4959-8C00-B9D621BE3A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms:7.3_vax:*:*:*:*:*:*:*","matchCriteriaId":"E189EB73-4B47-4DD7-9A1A-BBC4F70F92A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_alpha:6.2:*:*:*:*:*:*:*","matchCriteriaId":"E4DD6B1C-F18B-4953-A9D5-F5627476D490"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_alpha:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"76044FE0-8BDA-4EAF-98C5-1BF33562CC50"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_alpha:7.2.1h1:*:*:*:*:*:*:*","matchCriteriaId":"3332AE9E-C93B-4061-98CF-14C75F1163CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_alpha:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"383E31DC-E001-4598-BFA6-BBD097274312"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:dec_openvms_alpha:7.3:*:*:*:*:*:*:*","matchCriteriaId":"C8F1BA1B-9AFE-45C4-AEC0-7AE30A97A7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:sevms:6.2:*:*:*:*:*:*:*","matchCriteriaId":"248EF7BE-F23C-4339-AA96-5367D10BB95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dec:sevms_alpha:6.2:*:*:*:*:*:*:*","matchCriteriaId":"4A54891C-1729-4FCD-BD11-99366C245432"}]}]}],"references":[{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0738.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3492","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7425","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0738.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0846","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*","matchCriteriaId":"ECFA202A-6B78-4378-B9C2-B13EBC443A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB826C12-8B6E-4636-A6FC-90D47CCB706B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A190AC8-E0AC-4CCF-8E5B-62F97633173A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"43FCF018-AE63-4D6B-B6D2-2DF6912E4D4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9ADEA116-1DB1-4D19-B073-A36B63313BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B990B6CA-8288-47E6-8D09-5F56FC844F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C6A9DC42-4A06-4FA0-9E4A-2ABC52D1D083"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"748BF88E-D906-44D0-8B2C-7D734C76634E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C9CC25-44BD-4000-A5BD-62B55E9855D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0F8C3E35-9D62-4E10-91AA-EFFC40A35918"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"3BF50283-F028-4FA7-95B6-829BF3BE32D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B9F784ED-9EB5-4CBA-98BE-B6C78F5B66DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1CCD6703-23A6-4BCC-BE57-C0D7FDB26E45"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100448721830960&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7424.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1979","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7424","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100448721830960&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7424.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0847","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_web_server:5.x:*:*:*:*:*:*:*","matchCriteriaId":"A93836F8-9984-4979-A639-904BFC191895"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100448726831108&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3488","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7423","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100448726831108&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0848","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media:fuse_talk:*:*:*:*:*:*:*:*","matchCriteriaId":"CECFE56B-B1D7-40E0-8FC1-A4B65DF3E040"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100463832209281&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7445.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3496","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100463832209281&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7445.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0849","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duncan_hall:viralator:0.7:*:*:*:*:*:*:*","matchCriteriaId":"D8658223-90FC-4D7C-920C-88407095F428"},{"vulnerable":true,"criteria":"cpe:2.3:a:duncan_hall:viralator:0.8:*:*:*:*:*:*:*","matchCriteriaId":"86B29220-FB3F-40E0-BE53-4E62D28A75D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:duncan_hall:viralator:0.9_pre1:*:*:*:*:*:*:*","matchCriteriaId":"24620631-CCDD-4734-98DD-D58CF55EB42E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100463639800515&w=2","source":"cve@mitre.org"},{"url":"http://viralator.loddington.com/changes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3495","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7440","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100463639800515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://viralator.loddington.com/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0850","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4636EA3B-CF25-4224-A0F2-A12576B355BF"}]}]}],"references":[{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-037.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7427","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-037.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0851","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A218B67-B87B-4A5E-B9EF-EF39ADEAD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB41DE44-C3A1-4CC9-ACA7-4EC171D68910"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_edesktop:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B211BCBF-CB17-4D32-B6FE-A34D86C4FBF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D11E0075-50CD-4A16-9A89-56DEF5263BCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000432","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-038.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1683.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_039_kernel2_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-142.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7461","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-038.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1683.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_039_kernel2_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-142.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7461","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0852","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100498100112191&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=tux-list&m=100584714702328&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-142.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3506","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100498100112191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tux-list&m=100584714702328&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0853","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entrust:getaccess:all_versions:*:*:*:*:*:*:*","matchCriteriaId":"A8E5428F-7277-4FC0-972B-A0C6DA390A6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0022.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100498111712723&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/243243","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3508","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7474","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100498111712723&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/243243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0854","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100525739116093&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7478.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3510","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100525739116093&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7478.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0855","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:3.2_plus:*:*:*:*:*:*:*","matchCriteriaId":"3A6E3BCA-6F68-4B62-B4A2-5227118B4E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8D8C1022-ED1D-4B1F-A741-85687B4097C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:4.1:*:*:*:*:*:*:*","matchCriteriaId":"94003DDA-E8F3-4E24-AA9A-444BC3B176A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CCDB47E2-4AE1-4576-AD9F-4E3E96F54FA7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100528623328037&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7488.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3523","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100528623328037&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7488.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0856","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:4758:*:*:*:*:*:*:*:*","matchCriteriaId":"42B27A39-350C-49F4-A810-B6A20C189B79"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100533053219673&w=2","source":"cve@mitre.org"},{"url":"http://www.cl.cam.ac.uk/~rnc1/descrack/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cl.cam.ac.uk/~rnc1/descrack/attack.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3524","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100533053219673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cl.cam.ac.uk/~rnc1/descrack/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cl.cam.ac.uk/~rnc1/descrack/attack.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0857","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imp:webmail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.6","matchCriteriaId":"07B43331-B3A4-437D-8F2F-5D83DB757B27"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000437","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100535679608486&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100540578822469&w=2","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-039.0.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/668","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3525","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7496","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100535679608486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100540578822469&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-039.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0858","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA04F71A-0CBA-4479-A5BA-58AED5F67B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.32/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100562386012917&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7570.php","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.32/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100562386012917&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7570.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0859","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/3725","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-148.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3527","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7549","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0860","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100578220002083&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3541","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7538","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100578220002083&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0861","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unreachable replies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-unreachables-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/794","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3534","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7536","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-unreachables-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0862","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7550","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0863","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the \"fragment\" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1987","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3539","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7551","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0864","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit \"deny ip any any\" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3536","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7553","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0865","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the \"fragment\" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1988","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3540","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7552","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0866","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7554.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3537","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7554.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0867","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the \"fragment\" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:12000_router:*:*:*:*:*:*:*:*","matchCriteriaId":"978CC32A-55A9-4DAE-B2A4-9FE41FC9497D"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1989","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3538","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7555","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0868","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:stronghold:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0","matchCriteriaId":"653A45CD-E5E1-46E9-9EC3-5893E20070CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:stronghold:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B778FBDF-3D73-4841-8568-C4DDCE839EA7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100654958131854&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3577","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51950","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51951","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7582","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100654958131854&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/51951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0869","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función de retrollamada (callback) en common.c en la librería Cyrus SASL (cyrus-sasl) podría permitr a atacantes remotos ejecutar comandos de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB41DE44-C3A1-4CC9-ACA7-4EC171D68910"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:linux_powertools:6.2:*:*:*:*:*:*:*","matchCriteriaId":"A5AE3BF4-237D-4D84-9753-512A642141A0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux_eserver:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BA1B334D-F259-4DD8-838C-17446476820F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:15.cyrus-sasl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000444","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:018","source":"cve@mitre.org"},{"url":"http://lwn.net/alerts/SuSE/SuSE-SA%3A2001%3A042.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-040.0.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-150.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-151.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3498","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7443","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:15.cyrus-sasl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/alerts/SuSE/SuSE-SA%3A2001%3A042.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-040.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-150.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-151.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0870","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file."},{"lang":"es","value":"Servidor HTTP en Alchemy Eye y Alchemy Network Monitor 1.9x a 2.6.18 está activado sin autenticación por defecto, lo que permite a atacantes remotos obtener registros de monitorización de red con información potencialmente sensible pidiendo directamente el fichero eye.ini."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:1.9:*:*:*:*:*:*:*","matchCriteriaId":"A0BBDA03-3C32-4423-8B70-7118A43D0A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C57D4BEB-8A2B-434D-9259-F0D74680583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.1:*:*:*:*:*:*:*","matchCriteriaId":"125F5340-4E2E-4398-92D4-D1596556EC71"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3CC27884-242B-408E-BF52-4BAA7230648F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B35A9CDC-2B00-4463-B003-5DC83D8F741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B0E5C679-06B1-4FEA-BCFE-384A098A673A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE5C405F-F6EE-4893-BC33-6541D1968928"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.6:*:*:*:*:*:*:*","matchCriteriaId":"672B793F-E68D-48E7-89F8-D7CD7B6A3853"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"4B816AAB-8EA9-4404-9782-401D5D49F74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dek_software:alchemy_network_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.18","matchCriteriaId":"CC7C48D0-86F3-4B71-A23F-1814962C0C9C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100715758109838&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3598","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7630","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100715758109838&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0871","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en servidor HTTP para Alchemy Eye y Alchemy Network Monitor permite a atacantes remotos ejecutar comandos arbitrarios mediante una petición HTTP conteniendoun .. (punto punto) en versión 2.0 a 2.6.16, oun nómbre de dispositivo de DOS seguido por .. en versiones 2.6.19 a 3.0.10"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C57D4BEB-8A2B-434D-9259-F0D74680583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.1:*:*:*:*:*:*:*","matchCriteriaId":"125F5340-4E2E-4398-92D4-D1596556EC71"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3CC27884-242B-408E-BF52-4BAA7230648F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B35A9CDC-2B00-4463-B003-5DC83D8F741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.4:*:*:*:*:*:*:*","matchCriteriaId":"B0E5C679-06B1-4FEA-BCFE-384A098A673A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE5C405F-F6EE-4893-BC33-6541D1968928"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.6:*:*:*:*:*:*:*","matchCriteriaId":"672B793F-E68D-48E7-89F8-D7CD7B6A3853"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.6.18:*:*:*:*:*:*:*","matchCriteriaId":"4B816AAB-8EA9-4404-9782-401D5D49F74C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:2.6.19:*:*:*:*:*:*:*","matchCriteriaId":"B091D4AB-C1FE-43BF-AD6A-E4EAC20C2C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E47EAEB3-A164-4763-8B2F-C5DB2610CD27"},{"vulnerable":true,"criteria":"cpe:2.3:a:alchemy_lab:alchemy_eye:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"975B14B0-A28C-46B7-9B24-D077486D275F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dek_software:alchemy_network_monitor:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.10","matchCriteriaId":"B42DEE5A-9EEF-4735-96B2-51E7FEE4C68C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100714173510535&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/220715","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7625","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7626","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100714173510535&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/220715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0872","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges."},{"lang":"es","value":"OpenSSH 3.0.1 y anteriores con UseLogin activado no limpia variables de entorno críticas como LD_PRELOAD, lo que permite a usuario locales ganar privilegios de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"3BD465DC-BAA4-4582-A5A1-824DF20E339C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-042.1.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000446","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:092","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Dec/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100749779131514&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openssh-unix-dev&m=100747128105913&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-026.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-091","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/157447","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/688","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-161.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3614","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0112-005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7647","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-042.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archives/suse-security-announce/2001-Dec/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100749779131514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssh-unix-dev&m=100747128105913&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-026.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/157447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0112-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0873","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option."},{"lang":"es","value":"uuxqt en el paqute Taylor UUCP no elimina adecuadamente opciones largas peligrosas, lo que permite a usuarios locales ganar privilegios llamando a uux y especificando un fichero de configuración alternativo con la opción -config."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ian_lance_taylor:taylor_uucp:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"22DC62E0-1D56-404B-84E7-BDFCC187C086"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100715446131820","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-165.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-079","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212892","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3312","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7099","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100715446131820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-165.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/212892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0874","sourceIdentifier":"cve@mitre.org","published":"2001-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the \"Frame Domain Verification\" vulnerability."},{"lang":"es","value":"Internet Explorer 5.5 y 6.0 permite a atacantes remotos la lectura de ciertos ficheros vía HTML, pasando información de un marco en el dominio del cliente a otro marco del dominio del sitio web, una variante de la vulnerabilidad \"FrameDomain Verification\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-027.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3693","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7702","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0875","sourceIdentifier":"cve@mitre.org","published":"2001-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/245594","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3597","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7636","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0876","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL."},{"lang":"es","value":"Desbordamiento de buffer en UPnP (Universal Plug and Play) en Windows 98, 98E, Me y XP permite a atacantes remotos ejecutar código arbitrario por medio de una directiva NOTIFY con una URL muy larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100887440810532&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=100887271006313&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-37.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-030.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/951555","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3723","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7721","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100887440810532&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=100887271006313&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-030.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/951555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0877","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system."},{"lang":"es","value":"Desbordamiento de buffer en UPnP (Universal Plug and Play) en Windows 98, 98E, Me y XP permite a atacantes remotos ejecutar código arbitrario por medio de (1) un anuncio SSDP malicioso que insta al cliente a conectarse a una máquina que ya tiene una enorme cantidad de tráfico, o (2)  un anuncio SSDP malicioso a direcciones de broadcast o multicast, lo que podría causar que todos los clientes UPnP enviasen tráfico a un único sistema objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100887440810532&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=100887271006313&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-37.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-030.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/411059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/249238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3724","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7722","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100887440810532&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=100887271006313&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/m-030.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/411059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/249238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0879","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service."},{"lang":"es","value":"Vulnerabilidad de cadena formateada en las funciones de ejecución C en SQL Server 7.0 y 2000 permite a atacantes remotos provocar una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100891252317406&w=2","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a122001-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3732","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7725","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A253","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100891252317406&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2001/a122001-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0884","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en el archivador de correo electrónico Mailman permite a atacantes ganar información sensible o credenciales de autenticación mediante un enlace malicioso que es accedido por otros usuarios web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","matchCriteriaId":"60AD053B-1E35-4AB6-BCCC-96D571C11B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2D04755F-8B82-4951-93D7-B81792387610"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C92A998E-585A-4D66-B985-0C5401CFF2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E237A77D-A80A-4ED7-AA07-0AB765D54F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9BE92813-4FDE-4358-9769-E17D89BA76CC"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2001-168.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-169.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-170.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3721","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/242839","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3602","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7617","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-168.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-169.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/242839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0886","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace \"{\" character."},{"lang":"es","value":"Desbordamiento de buffer en la función glob de glibc para Red Hat Linux 6.2 a 7.2, y otros sistemas operativos, permite a atacantes causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrarios mediante un patrón de glob que acaba en una llave \"{\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3C67BDA1-9451-4026-AC6D-E912C882A757"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","versionEndIncluding":"7.2","matchCriteriaId":"182B6CF4-3E9D-4188-AFBF-749E2CB53300"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000447","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-037-01","source":"cve@mitre.org"},{"url":"http://sources.redhat.com/ml/bug-glibc/2001-11/msg00109.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-029.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-103","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-095.php3","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1752.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-160.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245956","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3707","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7705","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-037-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sources.redhat.com/ml/bug-glibc/2001-11/msg00109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-029.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-095.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1752.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-160.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0887","sourceIdentifier":"cve@mitre.org","published":"2002-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files."},{"lang":"es","value":"xSANE 0.81 y anteriores permiten a usuarios locales modificar ficheros de otros usuarios de xSANE mediante un ataque de enlaces simbólicos (symlink) en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oliver_rauch:xsane:0.81:*:*:*:*:*:*:*","matchCriteriaId":"638C5DE0-8A33-4B47-8BFA-65DCC135F637"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2001-171.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-172.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3734","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3700","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7714","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-171.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0888","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than \"public\" or (2) an unknown OID, which causes the WAP to deny subsequent SNMP requests."},{"lang":"es","value":"El Wireless Acces Point (WAP) Atmel Firmware 1.3 permite a atacantes remotos causar una denegación de servicio mediante una petición SNMP con una cadena de comunidad distinta de \"public\", oun OID (identificador de objeto) desconocido  lo que hace que el WAP deniege peticiones SNMP subsiguientes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:atmel:firmware:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2EC60D10-C9DD-4488-96A5-B1622BE575B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap11:1.3:*:*:*:*:*:*:*","matchCriteriaId":"F4B03C2B-DAB8-4BB2-BDAC-66340134B5B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:me102:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5AC6DA21-9715-48BF-A77B-2F9BD59DCB4A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100895903202798&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7734","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100895903202798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0889","sourceIdentifier":"cve@mitre.org","published":"2001-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters."},{"lang":"es","value":"Exim 3.22 y anteriores, bajo ciertas configuraciones, no verifica apropiadamente la parte local de una dirección cuando redirige ésta a una tubería (pipe), lo que permitiría a atacantes remotos ejecutar comandos remotos por medio de metacaracteres de la shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*","versionEndIncluding":"3.22","matchCriteriaId":"A7E4A99A-FC71-4FC2-8F1D-DB29D35752BD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"B133DAC8-2B0D-4F83-9025-AD071740187A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100877978506387&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-097","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/283723","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-176.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3728","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7738","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100877978506387&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/283723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-176.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3728","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0890","sourceIdentifier":"cve@mitre.org","published":"2001-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49B2EFC6-08BE-45A6-81A9-1592C18FC41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C653F5D7-8F19-4EA6-A3E1-CBE493D45E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"67D729AD-29EB-4352-811C-CF4BE2A78699"},{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5081C505-7F02-450F-AFC0-75BBF21C0BED"},{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"75940BFB-561E-4F68-9301-BB4ACC667E08"},{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F6688485-2120-4660-B9C2-3DFA1BE970AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4A638B1D-4542-4195-990C-43F451B4A6BA"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2001-171.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7714.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3987","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-171.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7714.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0891","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters."},{"lang":"es","value":"Vulnerabilidad en el formateado de cadenas en el demonio NQS (nqsdaemon) en NQE 3.3.0.16 para CRAY UNICOS permite que un usuario local obtenga privilegios de root usando qsub para enviar un proceso job cuyo nombre contiene caracteres de formatado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:nqsdaemon:3.3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"5F517BBC-025F-475C-8BD4-2AC77D11265B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cray:unicos:*:*:*:*:*:*:*:*","matchCriteriaId":"B7B7EE1D-BD38-49D6-B58E-34A53EB150C1"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100695627423924&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3275","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3590","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7618","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100695627423924&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0892","sourceIdentifier":"cve@mitre.org","published":"2001-11-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme:thttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.22","matchCriteriaId":"0A41C78F-ECCE-4BDD-A840-56DCC8F7A105"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100568999726036&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.acme.com/software/thttpd/","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://marc.info/?l=bugtraq&m=100568999726036&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.acme.com/software/thttpd/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}},{"cve":{"id":"CVE-2001-0893","sourceIdentifier":"cve@mitre.org","published":"2001-11-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme:mini_httpd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16","matchCriteriaId":"B492CE2C-A341-4AC8-A06B-5CE10F9D2C0B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100568999726036&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.acme.com/software/mini_httpd/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7541.php","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=100568999726036&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.acme.com/software/mini_httpd/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7541.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2001-0894","sourceIdentifier":"cve@mitre.org","published":"2001-11-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wietse_venema:postfix:1999-09-06:*:*:*:*:*:*:*","matchCriteriaId":"D8F498EC-BAB8-44E9-A1E9-F5FE59D969E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wietse_venema:postfix:1999-12-31:*:*:*:*:*:*:*","matchCriteriaId":"3AC09670-77D3-40B7-BD0A-2F447FAB272E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wietse_venema:postfix:2000-02-28:*:*:*:*:*:*:*","matchCriteriaId":"711ECD8D-66D7-414E-B509-9F10A93FCED8"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000439","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:089","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100584160110303&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-093","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-156.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3544","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7568","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100584160110303&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0895","sourceIdentifier":"cve@mitre.org","published":"2001-11-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2900xl:*:*:*:*:*:*:*:*","matchCriteriaId":"608C95E6-75D1-4A04-83B4-F9785CD25F79"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2948g-l3:*:*:*:*:*:*:*:*","matchCriteriaId":"C8BF525D-E813-4CB9-BE84-0B8283F2FACF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2950:*:*:*:*:*:*:*:*","matchCriteriaId":"0B4DA944-5B98-4BFB-90E9-C2A1C7731ECF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3500xl:*:*:*:*:*:*:*:*","matchCriteriaId":"9229CAAE-1582-43DE-B727-881D0E3ABB9A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_3550:*:*:*:*:*:*:*:*","matchCriteriaId":"1DA518E9-3A63-4997-AC3E-2FB0B8438B82"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4000:*:*:*:*:*:*:*:*","matchCriteriaId":"105544F7-F57E-4B22-921C-E5EEA82B5CC4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4908g-l3:*:*:*:*:*:*:*:*","matchCriteriaId":"83198D7C-C205-44AF-901F-6BD6D5C36244"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"38E8BD58-5E55-4F07-B115-3BE78D7B2AD6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000:*:*:*:*:*:*:*:*","matchCriteriaId":"4B75201F-F007-4612-A3F0-ABC75C730F94"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_8500:*:*:*:*:*:*:*:*","matchCriteriaId":"57BAA00D-994D-4F18-9858-7EAC3470FBC0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:distributed_director:*:*:*:*:*:*:*:*","matchCriteriaId":"F61E4FE9-24E4-4360-B606-488CB1EB7278"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/399355","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3547","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7547","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/399355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0896","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.33/CSSA-2001-SCO.33.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101284101228656&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101303877215098&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7571","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.33/CSSA-2001-SCO.33.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101284101228656&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101303877215098&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0897","sourceIdentifier":"cve@mitre.org","published":"2001-11-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:-:*:*:*:*:*:*:*","matchCriteriaId":"D9273BCD-A439-426F-AA8C-7194B9A993F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DC26B64-FC02-45F2-A263-9E011945A3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.0:*:*:*:*:*:*:*","matchCriteriaId":"08AB5674-453A-433A-8219-35F456611461"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.01:*:*:*:*:*:*:*","matchCriteriaId":"EC6486FB-B5F8-4DDA-B42B-98A07C7BE14F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.02:*:*:*:*:*:*:*","matchCriteriaId":"A23809E5-50FB-4CF0-A72D-EBF37C01781F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.03:*:*:*:*:*:*:*","matchCriteriaId":"AB495093-00E6-4C1F-B544-9D2D965F0E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.04:*:*:*:*:*:*:*","matchCriteriaId":"127135A5-A776-424C-B5F1-9BC3238CF213"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.05:*:*:*:*:*:*:*","matchCriteriaId":"E1FAFE51-8E79-453E-870D-B369EE29D36A"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.10:*:*:*:*:*:*:*","matchCriteriaId":"87C217B8-5732-430F-ACD6-99CF2B2027D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:2.11:*:*:*:*:*:*:*","matchCriteriaId":"474CF5E7-4C77-473B-950B-7B1FC399725C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.0:*:*:*:*:*:*:*","matchCriteriaId":"326C13A5-F302-418C-85E1-C333325E229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.01:*:*:*:*:*:*:*","matchCriteriaId":"88C02339-7393-46D7-9DA4-3228DF837582"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.02:*:*:*:*:*:*:*","matchCriteriaId":"DA8097F7-5A17-40E7-8CD2-231291253BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.5:*:*:*:*:*:*:*","matchCriteriaId":"2A28920A-EF18-4160-9DC1-0DC7D1CFD61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.6:*:*:*:*:*:*:*","matchCriteriaId":"1382D86F-0A84-46B6-B5E7-E9ED3FBFB57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.7:*:*:*:*:*:*:*","matchCriteriaId":"A80A0BE7-A823-4AC1-9B84-2D7F910FA16E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:3.75:*:*:*:*:*:*:*","matchCriteriaId":"3D0055FF-C2E8-443A-B567-23ED37A3F95B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2EAD48EC-5B61-4EC8-A128-3E6C59FF2EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.01:*:*:*:*:*:*:*","matchCriteriaId":"6BAAB97D-7381-4447-B8E4-EB7EFD27547C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.02:*:*:*:*:*:*:*","matchCriteriaId":"B2CD2691-F351-4D11-8EFC-8F86EB6A6B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.03:*:*:*:*:*:*:*","matchCriteriaId":"1D0CED1F-7C87-4156-8466-C4CB67839072"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.04:*:*:*:*:*:*:*","matchCriteriaId":"16ECB78B-36C6-49FE-AC76-5F3C49989422"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.05:*:*:*:*:*:*:*","matchCriteriaId":"E529724F-68AB-4BC9-90E9-1719A67C7972"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.06:*:*:*:*:*:*:*","matchCriteriaId":"553AD514-8315-4A53-A985-CADDFCDD2F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.07:*:*:*:*:*:*:*","matchCriteriaId":"3A3C3B5B-2EEA-466C-9944-A11370AAA446"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.50:*:*:*:*:*:*:*","matchCriteriaId":"591E5018-66DF-4F8B-8EE9-2459C9142BC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.51:*:*:*:*:*:*:*","matchCriteriaId":"1D3E9916-DCF8-47E9-8C1D-571D9423178E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.52:*:*:*:*:*:*:*","matchCriteriaId":"96C0DEAA-F0F7-4E98-A901-49D8B6B8C35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.53:*:*:*:*:*:*:*","matchCriteriaId":"C4E36013-DFB5-4D6B-B933-653E00B1AD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.75:*:*:*:*:*:*:*","matchCriteriaId":"C2E8CE07-A4BD-4E61-88CD-8E72AE0A3577"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.80:*:*:*:*:*:*:*","matchCriteriaId":"E19C4427-ABF7-47B0-8C18-9A9D7E093BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.81:*:*:*:*:*:*:*","matchCriteriaId":"E779CE38-A887-4484-A319-AE177A2FC33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.82:*:*:*:*:*:*:*","matchCriteriaId":"296780D8-88A9-4B4E-98BA-138CB702D846"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.83:*:*:*:*:*:*:*","matchCriteriaId":"BABCB8BB-89B8-4711-9CEE-069DBCB372C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.84:*:*:*:*:*:*:*","matchCriteriaId":"E255B370-054C-4BED-A00D-FD088BEE9B9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.85:*:*:*:*:*:*:*","matchCriteriaId":"6F99A2D1-E071-4E99-AD0F-DAEA5A57CA31"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:4.86:*:*:*:*:*:*:*","matchCriteriaId":"06743824-C01A-44A1-A75A-36F0719D83BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.00:*:*:*:*:*:*:*","matchCriteriaId":"85540AB5-815E-4B1E-912C-07B8F7A2112C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.01:*:*:*:*:*:*:*","matchCriteriaId":"48E6BB74-AEF9-4B8E-967F-1867969994FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.02:*:*:*:*:*:*:*","matchCriteriaId":"7F219F48-41A2-4373-AD6F-B86C7194DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:-:*:*:*:*:*:*","matchCriteriaId":"064000B6-2B45-48F9-ACE7-96D4A872C37B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.05:a:*:*:*:*:*:*","matchCriteriaId":"AB6C89B1-FA6F-4578-881F-A0990E6F5013"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:-:*:*:*:*:*:*","matchCriteriaId":"2ABD4153-05AA-4BD3-8667-A59D0A9F90DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.06:a:*:*:*:*:*:*","matchCriteriaId":"B684B4A5-3BAB-43DD-9BC7-034BAD426784"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.07:*:*:*:*:*:*:*","matchCriteriaId":"0C52CA83-3B52-4C87-92B1-E45424A2556B"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.08:*:*:*:*:*:*:*","matchCriteriaId":"24356CBC-CACF-49B4-8063-6060801205D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.09:*:*:*:*:*:*:*","matchCriteriaId":"34855C05-1FFD-436C-87AB-EC5344D229E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.10:*:*:*:*:*:*:*","matchCriteriaId":"A530F3D9-0872-40C3-B2E2-052DAD2C5268"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.11:*:*:*:*:*:*:*","matchCriteriaId":"CEDA5D94-8E1C-4F3B-B09B-3B5BFFA6B801"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.12:*:*:*:*:*:*:*","matchCriteriaId":"68B5870D-53AD-4F13-8AAA-85DD277857B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.13:*:*:*:*:*:*:*","matchCriteriaId":"9FB03DE5-A890-4D4A-A436-66AC29C10EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.14:*:*:*:*:*:*:*","matchCriteriaId":"358BA26A-5F81-4C33-BA46-BFAD09DAB74D"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.15:*:*:*:*:*:*:*","matchCriteriaId":"79C09870-2EB7-4648-A015-C615911D5DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.16:*:*:*:*:*:*:*","matchCriteriaId":"DFDF474B-BF27-44D8-857B-772EF651A7B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.17:*:*:*:*:*:*:*","matchCriteriaId":"4ABFDB1B-2A64-4AB9-AAD5-8E81EDC5F0A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.18:*:*:*:*:*:*:*","matchCriteriaId":"FF3EE5A2-C82A-427A-88CF-CED24440550A"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.19:*:*:*:*:*:*:*","matchCriteriaId":"DDC496C6-F120-49B9-A852-9F692D5EDA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.20:*:*:*:*:*:*:*","matchCriteriaId":"5AEF11EA-F515-4F75-BCA5-C1632FBA8B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.25:*:*:*:*:*:*:*","matchCriteriaId":"DD5BEA29-DE63-4B0D-A037-96109930BDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.26:*:*:*:*:*:*:*","matchCriteriaId":"9B14FEA3-C2F2-4690-8EF3-07978A29C452"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.27:*:*:*:*:*:*:*","matchCriteriaId":"C4304FE2-84DE-452E-91B1-0E12C9AB8B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.28:*:*:*:*:*:*:*","matchCriteriaId":"18C97E41-6A7F-41EF-8801-BBEDCD5F88F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:-:*:*:*:*:*:*","matchCriteriaId":"B7E3A8D6-F692-4316-ABA8-DC431B47AD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:a:*:*:*:*:*:*","matchCriteriaId":"4B6F88B0-A4B6-4EC1-A29D-FA99CFC711EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.29:b:*:*:*:*:*:*","matchCriteriaId":"C9C5D600-EC5B-4D62-B21A-962DED1F31CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:-:*:*:*:*:*:*","matchCriteriaId":"07C71232-9C46-4034-84CD-63F9A44D1EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.30:a:*:*:*:*:*:*","matchCriteriaId":"04CDE5BC-A8F8-43A4-B716-DAA918F241DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.31:*:*:*:*:*:*:*","matchCriteriaId":"51F72F6D-F8B2-41AD-ABA1-15205D3CF0C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.32:*:*:*:*:*:*:*","matchCriteriaId":"0B50B140-28FB-442E-A998-C791C4B554A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.33:*:*:*:*:*:*:*","matchCriteriaId":"671C1290-9C59-4822-AEC6-04143B770BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:-:*:*:*:*:*:*","matchCriteriaId":"C8ADD31B-C5A8-4299-B9C4-7577F7EC4378"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.34:a:*:*:*:*:*:*","matchCriteriaId":"E9BCCE31-C166-49A7-972D-527AB89AEFCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.35:*:*:*:*:*:*:*","matchCriteriaId":"EC2FFC74-4F52-4549-8B3C-FD83364F6B5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:-:*:*:*:*:*:*","matchCriteriaId":"C9D6A017-E229-445C-A4A1-07E8DBA8FDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.36:a:*:*:*:*:*:*","matchCriteriaId":"A0E39F77-08F8-4939-89F9-88B5FC254A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.37:*:*:*:*:*:*:*","matchCriteriaId":"729977A6-7E1D-409F-B74F-21FCB469A265"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:-:*:*:*:*:*:*","matchCriteriaId":"5009EDAC-EE9E-49F2-B717-3AD12D675A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:a:*:*:*:*:*:*","matchCriteriaId":"FA861D32-8E30-41ED-93D7-54BA46B96429"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:b:*:*:*:*:*:*","matchCriteriaId":"D69D4949-926A-4209-9769-C91F390AE931"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:c:*:*:*:*:*:*","matchCriteriaId":"F366C2A8-2396-4ADA-98A2-2C727F6BB2F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.38:d:*:*:*:*:*:*","matchCriteriaId":"B3B9B13E-98BC-4B2F-A46E-2EF2A4C51A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:-:*:*:*:*:*:*","matchCriteriaId":"99EBE73C-CF78-4123-B5BC-A719B0317CB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:a:*:*:*:*:*:*","matchCriteriaId":"2A7202ED-8BA1-40B4-A8EF-CB638FEF8FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:b:*:*:*:*:*:*","matchCriteriaId":"5C15A0BE-87B3-4D3C-B9A5-5731661D8577"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.39:c:*:*:*:*:*:*","matchCriteriaId":"3E701F44-F1AA-4BB9-A2BB-A89CA82E54C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.40:*:*:*:*:*:*:*","matchCriteriaId":"39018D43-F8A4-49F4-90BC-464648DB55C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:-:*:*:*:*:*:*","matchCriteriaId":"81224635-60DF-4C4F-9ABF-3FBCDE769C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:a:*:*:*:*:*:*","matchCriteriaId":"6954C7A9-4AE4-4374-AD35-C78ABAD6D13F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.41:b:*:*:*:*:*:*","matchCriteriaId":"337E61B7-4A9B-42A8-8C8D-E8A8644A599E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:-:*:*:*:*:*:*","matchCriteriaId":"6F4A2A10-E274-4DAB-83ED-5603FA4A1744"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.42:a:*:*:*:*:*:*","matchCriteriaId":"036C0212-3ABE-4435-897F-5ADD4EA47F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:-:*:*:*:*:*:*","matchCriteriaId":"76FBE583-898B-4EA3-9406-D01B0C6D2E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:a:*:*:*:*:*:*","matchCriteriaId":"53598A0B-F14C-43B6-B554-73910DD4D6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:b:*:*:*:*:*:*","matchCriteriaId":"5641CF25-DE69-4412-A930-E844641E54B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:c:*:*:*:*:*:*","matchCriteriaId":"EA38A770-062D-4987-871C-BF12D2415473"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:d:*:*:*:*:*:*","matchCriteriaId":"F7044A6E-347A-44E9-9EB6-BEF0D6191B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:-:*:*:*:*:*:*","matchCriteriaId":"7FE4CFA8-FE00-4D82-99FB-154763BC7B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:a:*:*:*:*:*:*","matchCriteriaId":"D3F14DF9-3ACE-4117-9AF3-AFB75B6F6C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.44:b:*:*:*:*:*:*","matchCriteriaId":"BCAF1620-D289-419D-8DC9-2237BFF3D9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:-:*:*:*:*:*:*","matchCriteriaId":"1867E969-B4BB-4F30-9435-03E3311D453C"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:a:*:*:*:*:*:*","matchCriteriaId":"06300271-726B-4725-ABCD-6F7F0D1D9163"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:b:*:*:*:*:*:*","matchCriteriaId":"8CAABC7E-ADAB-4234-AC09-3A269830D50F"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.45:c:*:*:*:*:*:*","matchCriteriaId":"2E7C092C-2B1A-4D95-89F4-3C752DE0F542"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:-:*:*:*:*:*:*","matchCriteriaId":"954827B7-14BA-470F-A40A-2EF3B5818314"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.46:a:*:*:*:*:*:*","matchCriteriaId":"11E88097-2945-4046-83B0-93C11B995400"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:-:*:*:*:*:*:*","matchCriteriaId":"F974F8FB-A8EB-41CF-A370-B4743F56CA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:a:*:*:*:*:*:*","matchCriteriaId":"C8C476D5-BE6B-4292-B358-8565E940459D"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:b:*:*:*:*:*:*","matchCriteriaId":"BF77674A-01AD-456B-B17E-2DFCA43319C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:c:*:*:*:*:*:*","matchCriteriaId":"34E0C561-2F6E-474B-BCFE-15B24A2657C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.47:d:*:*:*:*:*:*","matchCriteriaId":"FA9C9EA8-140A-49F7-BF57-82CABB733D4D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100586033530341&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=100586541317940&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=100586033530341&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=100586541317940&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2001-0898","sourceIdentifier":"cve@mitre.org","published":"2001-11-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"75EAF4E3-96C8-4B42-A624-009C180E5BC0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100586079932284&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100588139312696&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7567.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3553","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100586079932284&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100588139312696&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7567.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0899","sourceIdentifier":"cve@mitre.org","published":"2001-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","matchCriteriaId":"2C438592-FF60-49D4-A15D-D1C08BCCCBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:rick_fournier:network_tools:0.2:*:*:*:*:*:*:*","matchCriteriaId":"B4BEC6B3-7764-49FC-9B75-D44778625716"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100593523104176&w=2","source":"cve@mitre.org"},{"url":"http://phpnukerz.org/modules.php?name=Downloads&d_op=viewsdownload&sid=32","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7578","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100593523104176&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpnukerz.org/modules.php?name=Downloads&d_op=viewsdownload&sid=32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0900","sourceIdentifier":"cve@mitre.org","published":"2001-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:gallery:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.3","matchCriteriaId":"37AA60DD-EDA0-4BF3-A58E-D5D835395F0A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100619599000590&w=2","source":"cve@mitre.org"},{"url":"http://www.menalto.com/projects/gallery/article.php?sid=33&mode=&order=","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/677","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3554","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7580","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100619599000590&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.menalto.com/projects/gallery/article.php?sid=33&mode=&order=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0901","sourceIdentifier":"cve@mitre.org","published":"2001-11-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hypermail_development:hypermail:*:*:*:*:*:*:*:*","matchCriteriaId":"B2045BBE-07E3-4751-A3CA-B1F9DB8144DB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100626603407639&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7576","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=100626603407639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0902","sourceIdentifier":"cve@mitre.org","published":"2001-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100626531103946&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=100627497122247&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6795","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7613","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100626531103946&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=100627497122247&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0903","sourceIdentifier":"cve@mitre.org","published":"2001-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:high-bandwidth_digital_content_protection:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C16A19D4-3B00-4872-A3B2-915B44321137"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100626641009560&w=2","source":"cve@mitre.org"},{"url":"http://nunce.org/hdcp/hdcp111901.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7612.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3558","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100626641009560&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nunce.org/hdcp/hdcp111901.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7612.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0904","sourceIdentifier":"cve@mitre.org","published":"2001-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100619268115798&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7581.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3556","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100619268115798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7581.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0905","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:procmail:procmail:*:*:*:*:*:*:*:*","versionEndIncluding":"3.20","matchCriteriaId":"6C16592E-B822-4941-8F39-F668E6E5D40E"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:60.procmail.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000433","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-083","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-085.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-093.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3071","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6872","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:60.procmail.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-085.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0906","sourceIdentifier":"cve@mitre.org","published":"2001-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.7.7","matchCriteriaId":"238C902A-040C-4174-8716-63C9D28A071E"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-030-01","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-086.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-102.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/192647","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2974","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6785","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-030-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-086.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/192647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0907","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.1","versionEndIncluding":"2.2.19","matchCriteriaId":"30FB89D1-D24F-4747-A622-BC74AF5BF566"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.1","versionEndIncluding":"2.4.10","matchCriteriaId":"90D2FE4A-1271-4CF6-BEBE-E825B90387A0"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100343090106914&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100350685431610&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/7312.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1650.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3444","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100343090106914&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100350685431610&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/7312.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0908","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe:1.8:*:*:*:*:*:*:*","matchCriteriaId":"9000244E-D977-4EB9-B05D-64494329029B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638693315933&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3566","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7538","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638693315933&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0909","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638955422011&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6802","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7605","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638955422011&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0910","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5967C58A-D318-466D-9370-222FE7034B2D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638782917917&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3564","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7601","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638782917917&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0911","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DD378628-2AA0-4244-A4D7-8591BEB7A926"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638850219503&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3567","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7596","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638850219503&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0912","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7604","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0913","sourceIdentifier":"cve@mitre.org","published":"2001-11-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"3E001A19-25AE-4014-A07D-50857939F2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.1a:*:*:*:*:*:*:*","matchCriteriaId":"3664770E-FECC-42B4-AF71-8498559873E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3C3DC586-9898-45F5-9702-37162D918948"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"821851F0-B71E-4EB6-80A0-CD355004BEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"9510627D-17D7-40DC-87B5-D702D7A9B264"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"F36CE252-50F8-42C8-A6BB-27E9F6355646"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"8D0B340A-319C-4A69-8B4B-27DB3D03DE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FDA5D401-F1CD-4678-865C-1DE56BC3D2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_solutions:rwhoisd:1.5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"78C82F9F-06FA-46E7-807C-37CE3708F0A1"}]}]}],"references":[{"url":"http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100655265508104&w=2","source":"cve@mitre.org"},{"url":"http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100655265508104&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0914","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:pre3:*:*:*:*:*:*","versionEndIncluding":"2.4.11","matchCriteriaId":"D2A82D10-AA79-4F7E-8547-F02C311BFFB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638584813349&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100654787226869&w=2L:2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3570","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7591","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638584813349&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100654787226869&w=2L:2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0915","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley:pmake:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.33","matchCriteriaId":"07B98A8B-0EED-441E-AAC7-24E9806C840D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638919720975&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7602.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3572","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638919720975&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7602.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0916","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley:pmake:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.33","matchCriteriaId":"07B98A8B-0EED-441E-AAC7-24E9806C840D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638919720975&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7603.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3573","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638919720975&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7603.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0917","sourceIdentifier":"cve@mitre.org","published":"2001-11-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100654722925155&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=tomcat-dev&m=100658457507305&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7599","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100654722925155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tomcat-dev&m=100658457507305&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0918","sourceIdentifier":"cve@mitre.org","published":"2001-11-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2001_041_susehelp_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3576","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7583","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_041_susehelp_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0919","sourceIdentifier":"cve@mitre.org","published":"2001-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.50.4134.0100 on Windows ME with \"Prompt to allow cookies to be stored on your machine\" enabled does not warn a user when a cookie is set using Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100679857614967&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100679857614967&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0920","sourceIdentifier":"cve@mitre.org","published":"2001-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0F521CF8-8A5B-4920-A044-D07DDABDFE32"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8528B284-E3DA-4E4F-BE83-04FB163A5788"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"421FABA9-DA59-4C9A-96EC-FACCDD78A437"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"11236A72-9EDA-4B63-9067-8C5A10E8237B"},{"vulnerable":true,"criteria":"cpe:2.3:a:patrick_schemitz:autonice_daemon:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"50274A9F-25F7-4CAD-8A37-DB550AC9B8A2"}]}]}],"references":[{"url":"http://and.sourceforge.net/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100680319004162&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7606","source":"cve@mitre.org"},{"url":"http://and.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100680319004162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0921","sourceIdentifier":"cve@mitre.org","published":"2001-11-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:*:*:macos:*:*:*:*:*","versionEndIncluding":"4.77","matchCriteriaId":"EE64CA52-9DDD-4584-97BD-CFCFACB08590"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100638816318705&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3565","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7593","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100638816318705&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0922","sourceIdentifier":"cve@mitre.org","published":"2001-11-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:netdynamics:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9846C76-7DAB-4A3D-B5BC-B3541DEC868A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:netdynamics:4.1:*:*:*:*:*:*:*","matchCriteriaId":"46C84C01-0FCE-4D08-93AC-10E2AFB27D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:netdynamics:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F35F3413-2754-4466-8200-E96EF08CFC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:netdynamics:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"2558DC6A-018B-4B67-A359-BA2027FADEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:netdynamics:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2081CC00-92A4-4351-BD52-3EC2464ADD00"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100681274915525&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3583","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7620","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100681274915525&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0923","sourceIdentifier":"cve@mitre.org","published":"2001-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:redhat_package_manager:4.0.2-71:*:*:*:*:*:*:*","matchCriteriaId":"31D3977B-32C4-4F6E-AA67-184AF775DA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:redhat_package_manager:4.0.2-72:*:*:*:*:*:*:*","matchCriteriaId":"ECDDB82C-4EEB-458E-95D4-98D0B167A165"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/222542","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3472","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7349","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/222542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0924","sourceIdentifier":"cve@mitre.org","published":"2001-11-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:3.3:*:*:*:*:*:*:*","matchCriteriaId":"4EEA6D64-D19F-480E-933A-C904A8262722"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:3.4:*:*:*:*:*:*:*","matchCriteriaId":"35DAF59F-B3C7-4E11-9351-E4C386E89D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:3.5:*:*:*:*:*:*:*","matchCriteriaId":"0B074C06-64F9-4A31-A562-DC1AD9184002"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:3.6:*:*:*:*:*:*:*","matchCriteriaId":"7879D36A-DAA1-401B-AE25-44EADE40A8CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:3.7:*:*:*:*:*:*:*","matchCriteriaId":"AA49A09D-E612-47C7-918B-73EF748F27A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.10:*:*:*:*:*:*:*","matchCriteriaId":"C54E0F87-144A-471B-B947-D6C50E4B021C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.11:*:*:*:*:*:*:*","matchCriteriaId":"280BF016-9B3D-471B-ADA6-A6112A0FD018"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.12:*:*:*:*:*:*:*","matchCriteriaId":"BA4F7156-5B59-412F-ACFC-8594E43B3CDF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100654890029878&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100688672019635&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3575","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7585","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100654890029878&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100688672019635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0925","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.19:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://www.apacheweek.com/features/security-13","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-067","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-077.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1452.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/168497","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/178066","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/193081","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2503","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-27&end=2002-02-02&mid=199857&threads=1","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6921","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/features/security-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-077.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1452.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/168497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/178066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/193081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-27&end=2002-02-02&mid=199857&threads=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0926","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DA955BB7-2B8A-4534-A0F6-AEBD6875EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100697797325013&w=2","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3589","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7622","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100697797325013&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0927","sourceIdentifier":"cve@mitre.org","published":"2001-11-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34741CC7-DE3B-4177-8A2C-2CAA19C17785"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"16BD1207-214D-4E0A-AC13-C2C7FCCE3E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"21667DDB-DE7B-4301-ACFF-29E992FF531A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"779349D0-D339-4788-A61B-48E8EAAA60DD"}]}]}],"references":[{"url":"ftp://ftp.gnome.org/pub/GNOME/stable/sources/libgtop/libgtop-1.0.13.tar.gz","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100689302316077&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.gnome.org/pub/GNOME/stable/sources/libgtop/libgtop-1.0.13.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100689302316077&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0928","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"34741CC7-DE3B-4177-8A2C-2CAA19C17785"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"16BD1207-214D-4E0A-AC13-C2C7FCCE3E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"21667DDB-DE7B-4301-ACFF-29E992FF531A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"779349D0-D339-4788-A61B-48E8EAAA60DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:libgtop_daemon:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"07D38EA4-948B-4F27-9B8D-D978ADA1328C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100699007010203&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2003/dsa-301","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/705771","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3594","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100699007010203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2003/dsa-301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/705771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0929","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2p:*:*:*:*:*:*:*","matchCriteriaId":"0DC1411B-4E7E-4F57-B025-9FE27B09C7AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*","matchCriteriaId":"655BB9C1-BA90-452E-A9C8-9B1E15B99650"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/362483","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/808","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7614","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/362483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0930","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendpage:sendpage.pl:*:*:*:*:*:*:*:*","matchCriteriaId":"675DEB2B-0347-44F4-A268-71B992B0C24B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100689313216624&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7609.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100689313216624&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7609.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0931","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cooolsoft:powerftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"903FAB8A-5EEB-4D29-BC74-104BE5DD5F62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7615","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0932","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cooolsoft:powerftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"903FAB8A-5EEB-4D29-BC74-104BE5DD5F62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3595","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7616","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0933","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. \"ls C:\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cooolsoft:powerftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"903FAB8A-5EEB-4D29-BC74-104BE5DD5F62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0934","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cooolsoft:powerftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"903FAB8A-5EEB-4D29-BC74-104BE5DD5F62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100698397818175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0935","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550."}],"vendorComments":[{"organization":"Red Hat","comment":"CVE-2001-0935 refers to vulnerabilities found when SUSE did a code audit of the wu-ftpd glob.c file in wu-ftpd 2.6.0. They shared these details with the wu-ftpd upstream authors who clarified that some of the issues did not apply, and all were addressed by the version of glob.c in upstream wu-ftpd 2.6.1. Therefore we believe that the issues labelled as CVE-2001-0935 do not affect wu-ftpd 2.6.1 or later versions and therefore do not affect Red Hat Enterprise Linux 2.1.","lastModified":"2006-09-27T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A86BB4F6-210F-448A-A3CB-127BEB5BD0D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5E9B738-E8DF-4FE7-B4A5-91DE46A9CF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7196CF2D-8CCC-454A-A2C1-6408A9D636C5"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0936","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"AD003E11-0CC3-4800-A7B3-55916E5AEBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"00D7F5D9-B627-4929-BFD5-D7D9F2B92310"},{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"87EC9715-E4EC-4D9A-8D02-F86A83C70F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"FB601BEC-82E8-4C15-9D9F-B29F5E97871D"},{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"6A4B6340-EB71-4D06-989C-F856B774FD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F6A8F22C-6D58-4A30-A537-32B4BB0564A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:frox:frox:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"7CD5D046-DB6E-4D3E-8600-583344EB1A66"}]}]}],"references":[{"url":"http://frox.sourceforge.net/security.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100713367307799&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3606","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7632","source":"cve@mitre.org"},{"url":"http://frox.sourceforge.net/security.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100713367307799&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0937","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:pgpmail.pl:1.31:*:*:*:*:*:*:*","matchCriteriaId":"8DA048D2-29CA-496C-BEC1-E434FB103685"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100714269114686&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/82/243262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100714269114686&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/82/243262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0938","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:persits:aspupload:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4752C2F4-C39F-40AD-AF87-4D83DF7A2809"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100715294425985&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7628.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7629.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3608","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100715294425985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7628.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7629.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0939","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*","matchCriteriaId":"ECFA202A-6B78-4378-B9C2-B13EBC443A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB826C12-8B6E-4636-A6FC-90D47CCB706B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A190AC8-E0AC-4CCF-8E5B-62F97633173A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B990B6CA-8288-47E6-8D09-5F56FC844F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C6A9DC42-4A06-4FA0-9E4A-2ABC52D1D083"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C9CC25-44BD-4000-A5BD-62B55E9855D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0F8C3E35-9D62-4E10-91AA-EFFC40A35918"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B9F784ED-9EB5-4CBA-98BE-B6C78F5B66DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100715316426817&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/manager.wss?rs=0&rt=0&org=sims&doc=4C8E450DBF2E7F1885256B200079FA88","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3607","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7631","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100715316426817&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/manager.wss?rs=0&rt=0&org=sims&doc=4C8E450DBF2E7F1885256B200079FA88","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0940","sourceIdentifier":"cve@mitre.org","published":"2001-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100094268017271&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100698954308436&w=2","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/buffer_overflow.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1951","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7145","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100094268017271&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100698954308436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.checkpoint.com/techsupport/alerts/buffer_overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0941","sourceIdentifier":"cve@mitre.org","published":"2001-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9C84852A-1153-46A7-9B82-D05F4A6043D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"453891B9-C354-461F-97FA-330165B92255"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED700CB5-6896-41D1-ABEF-98FC159940F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"203B7526-8009-45BA-840D-CAC6A09E8ABE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100716693806967&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3138","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7643","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100716693806967&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0942","sourceIdentifier":"cve@mitre.org","published":"2001-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"453891B9-C354-461F-97FA-330165B92255"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED700CB5-6896-41D1-ABEF-98FC159940F5"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/lists/bugtraq/2001/Dec/0000.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3137","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7645","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/lists/bugtraq/2001/Dec/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0943","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"92829B90-6F6A-4FAF-85A9-731D4F3212C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB401046-E029-4CD1-A937-E9E70A081BF4"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2001/Dec/0001.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/201020","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3129","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/lists/bugtraq/2001/Dec/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/201020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0944","sourceIdentifier":"cve@mitre.org","published":"2001-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:*:*:*:*:*:*:*:*","matchCriteriaId":"BAE72308-D533-453D-A219-288566283BFA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100734173831990&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100734173831990&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0945","sourceIdentifier":"cve@mitre.org","published":"2001-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A72832FD-812D-4175-AA50-DC1DDAD5B954"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"866DFC15-B4DD-4B77-B8A6-119E26C756A9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100741295502017&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7648.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3611","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100741295502017&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7648.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0946","sourceIdentifier":"cve@mitre.org","published":"2001-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"apmscript in Apmd in Red Hat 7.2 \"Enigma\" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100743394701962&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5493","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8268","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100743394701962&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0947","sourceIdentifier":"cve@mitre.org","published":"2001-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:*","matchCriteriaId":"0325EEE5-AD5F-4262-A379-C6F4A8F6B4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:*","matchCriteriaId":"DC9EDA8D-1427-4FFB-B6E5-44296B945F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:*","matchCriteriaId":"847A5CCA-A8A1-4B07-B60F-69E0E56E9384"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:*","matchCriteriaId":"27251C41-296E-4635-9727-37D661080994"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:*","matchCriteriaId":"474EF0B1-2D23-4149-A47B-F928DDB1F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:*","matchCriteriaId":"D1DA047B-69A6-41D2-B98E-9753813F325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:*","matchCriteriaId":"5DB971CB-596A-4A53-A801-6934A64010E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:*","matchCriteriaId":"473714FE-2743-4144-8A02-29E5981A26D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E49EE460-3930-45ED-B5C3-E7C72CECE122"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8147DB94-C5FA-45FA-A601-3FF4D2F6C93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D2FBC1CB-22E4-4C67-9EE5-547EA6B1673E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3615","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7649","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0948","sourceIdentifier":"cve@mitre.org","published":"2001-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:*","matchCriteriaId":"0325EEE5-AD5F-4262-A379-C6F4A8F6B4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:*","matchCriteriaId":"DC9EDA8D-1427-4FFB-B6E5-44296B945F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:*","matchCriteriaId":"847A5CCA-A8A1-4B07-B60F-69E0E56E9384"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:*","matchCriteriaId":"27251C41-296E-4635-9727-37D661080994"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:*","matchCriteriaId":"474EF0B1-2D23-4149-A47B-F928DDB1F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:*","matchCriteriaId":"D1DA047B-69A6-41D2-B98E-9753813F325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:*","matchCriteriaId":"5DB971CB-596A-4A53-A801-6934A64010E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:*","matchCriteriaId":"473714FE-2743-4144-8A02-29E5981A26D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E49EE460-3930-45ED-B5C3-E7C72CECE122"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8147DB94-C5FA-45FA-A601-3FF4D2F6C93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D2FBC1CB-22E4-4C67-9EE5-547EA6B1673E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3619","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7650","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7650","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0949","sourceIdentifier":"cve@mitre.org","published":"2001-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.3:*:*:*:*:*:*:*","matchCriteriaId":"0325EEE5-AD5F-4262-A379-C6F4A8F6B4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.4:*:*:*:*:*:*:*","matchCriteriaId":"DC9EDA8D-1427-4FFB-B6E5-44296B945F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.5:*:*:*:*:*:*:*","matchCriteriaId":"847A5CCA-A8A1-4B07-B60F-69E0E56E9384"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.6:*:*:*:*:*:*:*","matchCriteriaId":"27251C41-296E-4635-9727-37D661080994"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.7:*:*:*:*:*:*:*","matchCriteriaId":"474EF0B1-2D23-4149-A47B-F928DDB1F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.8:*:*:*:*:*:*:*","matchCriteriaId":"D1DA047B-69A6-41D2-B98E-9753813F325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:3.9:*:*:*:*:*:*:*","matchCriteriaId":"5DB971CB-596A-4A53-A801-6934A64010E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.0:*:*:*:*:*:*:*","matchCriteriaId":"473714FE-2743-4144-8A02-29E5981A26D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E49EE460-3930-45ED-B5C3-E7C72CECE122"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8147DB94-C5FA-45FA-A601-3FF4D2F6C93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D2FBC1CB-22E4-4C67-9EE5-547EA6B1673E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3621","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3622","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3625","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3627","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3629","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3630","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3631","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3634","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3636","source":"cve@mitre.org"},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7652","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0950","sourceIdentifier":"cve@mitre.org","published":"2001-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-331"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valicert:enterprise_validation_authority:*:*:*:*:*:*:*:*","versionStartIncluding":"3.3","versionEndIncluding":"4.2.1","matchCriteriaId":"98A5D417-5C40-4C41-9736-ECD0E08983EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/3618","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3620","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7651","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7653","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=100749428517090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/3618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.valicert.com/support/security_advisory_eva.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-0951","sourceIdentifier":"cve@mitre.org","published":"2001-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100774842520403&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100813081913496&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3652","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7667","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100774842520403&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100813081913496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0952","sourceIdentifier":"cve@mitre.org","published":"2001-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:volition:red_faction:1.0:*:*:*:*:*:*:*","matchCriteriaId":"979A918F-9D95-460F-8196-2A4F6C3EDD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:volition:red_faction:1.1:*:*:*:*:*:*:*","matchCriteriaId":"729A7E73-2CE6-4BBD-9200-CE2A0E5EE83D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100774266027774&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3651","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7672","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100774266027774&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0953","sourceIdentifier":"cve@mitre.org","published":"2001-12-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nara_vision:kebi_community:1.0_academy:*:*:*:*:*:*:*","matchCriteriaId":"FEE40E35-642C-4671-806E-FA543FD7319B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nara_vision:kebi_community:1.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"B4903BD3-9FBB-4F24-9C53-AE062A4D15E5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100780264902037&w=2:1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3655","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7674","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100780264902037&w=2:1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0954","sourceIdentifier":"cve@mitre.org","published":"2001-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C9CC25-44BD-4000-A5BD-62B55E9855D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100780146532131&w=2L:1","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=255CC03D83CFF50C85256B1E005E349B","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2000","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7684","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100780146532131&w=2L:1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=255CC03D83CFF50C85256B1E005E349B","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0955","sourceIdentifier":"cve@mitre.org","published":"2001-09-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BCC09AA-AB01-4583-8052-66DBF0E1861D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"43425C85-806B-4823-AD74-D0A0465FC8DF"}]}]}],"references":[{"url":"http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100776624224549&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100784290015880&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=100118958310463&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3657","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.xfree86.org/4.2.0/RELNOTES2.html#2","source":"cve@mitre.org"},{"url":"http://www.xfree86.org/security/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7673","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7683","source":"cve@mitre.org"},{"url":"http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100776624224549&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100784290015880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=100118958310463&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xfree86.org/4.2.0/RELNOTES2.html#2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xfree86.org/security/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0956","sourceIdentifier":"cve@mitre.org","published":"2001-09-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:speechio:speechd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.54","matchCriteriaId":"E30CABCD-8717-4D5D-9CF5-245BC930E46A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0089.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/3326","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.speechio.org/speechd.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7121","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/3326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.speechio.org/speechd.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0958","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dll, (3) SFNofitication.dll, (4) register.dll, (5) TOP10.dll, (6) SpamExcp.dll, and (7) spamrule.dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_emanager:3.51:*:*:*:*:*:*:*","matchCriteriaId":"8DF73278-A5E9-4975-9C0B-DD9413A33FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_emanager:3.51_j:*:*:*:*:*:*:*","matchCriteriaId":"A7F86817-D352-452E-B80F-1402C8A76372"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DEC14336-CD53-44F7-B271-3C98C016295B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D948171A-3B54-462A-8B2E-2C0266A37E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7A9D4E2E-889B-4233-8887-9CF00A5023A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.32:*:*:*:*:*:*:*","matchCriteriaId":"2F72A6DE-BA1B-4907-B19D-D71B172BB249"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3327","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7104","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0959","sourceIdentifier":"cve@mitre.org","published":"2001-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:6.61:sp2a:*:*:*:*:*:*","matchCriteriaId":"B72109C9-FEBA-446D-A55A-3912596F1F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"56FD1727-784A-4DF2-9C58-A966DD54F48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_2000:*:*:advanced:*:*:*:*:*","matchCriteriaId":"2D05049E-B840-42FB-9FCF-F0F049973B89"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/Download/patches/asitnt/QO00945.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5483","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3342","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7122","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/Download/patches/asitnt/QO00945.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0960","sourceIdentifier":"cve@mitre.org","published":"2001-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:6.61:sp2a:*:*:*:*:*:*","matchCriteriaId":"B72109C9-FEBA-446D-A55A-3912596F1F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"56FD1727-784A-4DF2-9C58-A966DD54F48A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup_2000:*:*:advanced:*:*:*:*:*","matchCriteriaId":"2D05049E-B840-42FB-9FCF-F0F049973B89"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/Download/patches/asitnt/QO00945.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3343","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7122","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.ca.com/Download/patches/asitnt/QO00945.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0961","sourceIdentifier":"cve@mitre.org","published":"2001-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.4:*:*:*:*:*:*:*","matchCriteriaId":"7C10D445-5E57-4C8B-A76E-5A612F518B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9CAFD94E-21B4-40CB-9C7D-4C8C1BC4AE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.6:*:*:*:*:*:*:*","matchCriteriaId":"2E1AA11E-CEF7-47CC-95A6-4B0EECEF83B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.7:*:*:*:*:*:*:*","matchCriteriaId":"15E0B212-6E96-4953-A422-88C3DCD7865F"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"86E8609D-2ECA-40CB-8147-0EA5D63CA66E"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"3785E21F-064C-41C5-BAC2-A6489E4B869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_e._davis:most:4.41:*:*:*:*:*:*:*","matchCriteriaId":"5C1E5E22-5C6A-4500-84CB-A7AABA53CCD5"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-076","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3347","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7149","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0962","sourceIdentifier":"cve@mitre.org","published":"2001-09-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.3","matchCriteriaId":"B5D25121-0964-44B9-AA96-D994389BFF19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"754B1A16-2178-4FC1-B2D9-82021316A60F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_commerce_suite:3.2:*:*:*:*:*:*:*","matchCriteriaId":"01FF397E-2A22-4451-8C57-BF3B7CA178C9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5492","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7153","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0963","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DABC0B8B-C6AE-49B8-9C0E-56E65FC26CD4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0171.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1953","source":"cve@mitre.org"},{"url":"http://www.pi-soft.com/spoonftp/index.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3351","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7147","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0171.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pi-soft.com/spoonftp/index.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0964","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0.8","matchCriteriaId":"F4F629AD-4A4F-4D08-9517-6B2787F96C6F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0178.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7148","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0178.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0965","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.13.6:*:*:*:*:*:*:*","matchCriteriaId":"F318FEBE-E9EE-4DD2-881C-61E5FE05AAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.16.9:*:*:*:*:*:*:*","matchCriteriaId":"AADA6033-2154-455E-8E10-761E777549E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"06212998-AE09-4DA2-9F9C-EBB60BBD7EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.18a:*:*:*:*:*:*:*","matchCriteriaId":"834771A5-87B0-41E5-A93C-6A1343726E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*","matchCriteriaId":"2EC24C84-A059-4F09-AE7D-1F077AE8F291"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*","matchCriteriaId":"1B8C2E9C-2305-4DAD-8406-D5BFAFBBEEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.21:*:*:*:*:*:*:*","matchCriteriaId":"93D1CB71-B47D-4683-8174-328676D31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.22b:*:*:*:*:*:*:*","matchCriteriaId":"431B7EC0-0471-4F31-A26C-F59B541DCD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:glftpd:glftpd:1.23:*:*:*:*:*:*:*","matchCriteriaId":"FE1E9A9B-BD3E-4D6B-87F5-1A84ACE32115"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.glftpd.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7001.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3201","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.glftpd.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7001.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0966","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nudester.org:nudester:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10","matchCriteriaId":"B94DE43D-1EBE-4657-BDC6-F7F5BDDB0BD2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0232.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3202","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0232.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0967","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arkeia:arkeia:4.2:*:*:*:*:*:*:*","matchCriteriaId":"05556BA5-3EE3-4734-A78A-5548FD536018"},{"vulnerable":true,"criteria":"cpe:2.3:a:arkeia:arkeia:4.2.8-2:*:*:*:*:*:*:*","matchCriteriaId":"78F95D22-F8C1-42F9-8D03-B024C347BAD0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3204","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0968","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knox_software:arkeia:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D77845A3-D9BF-4C82-9F8A-F6799FBACFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:knox_software:arkeia:4.2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"D8891574-D1EF-48A6-943D-919077737F3E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3203","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0969","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ipfw in FreeBSD does not properly handle the use of \"me\" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7002","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0970","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tdavid:td_forum:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0085611D-B905-4B78-B27E-290454131D67"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99832137410609&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/782243","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3207","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7009","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99832137410609&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/782243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0971","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aci:4d_webserver:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"FDA76F49-F68C-42E5-B738-D247FA834243"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7010.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/206102","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7010.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/206102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0972","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. \"0888888.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surf-net:asp_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"2.30","matchCriteriaId":"5F18893E-57BC-46D7-A55F-63E6AE414953"},{"vulnerable":true,"criteria":"cpe:2.3:a:surf-net:asp_forum:2.20:*:*:*:*:*:*:*","matchCriteriaId":"1BDE962E-BCD3-471D-902B-91C4758D682B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99834088223352&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3210","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7011","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99834088223352&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0973","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.2_beta","matchCriteriaId":"A995E498-F4C4-44B8-A148-38304712D42C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:3.3:*:*:*:*:*:*:*","matchCriteriaId":"60BF0F6A-49B7-4BA1-B462-31E12C48A679"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E90AE8A1-6B6A-4CAF-8A6D-314225B66DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C271E1D3-6E9B-4E62-8FD1-464073B86E65"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"BC64E190-BBC1-4BFF-8F41-FBE19C654554"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:4.0.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"D693A08F-DA8C-467B-B585-BD3B29401A61"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0328.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bscw.gmd.de/Bulletins/BSCW-SB-2001-08.extract.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7029.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/465971","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3227","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0328.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bscw.gmd.de/Bulletins/BSCW-SB-2001-08.extract.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7029.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/465971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0974","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E2C1A6E-C778-4DE0-BFBE-8C60E0A655F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8040429D-3179-4E63-B897-F39F12B508CC"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/869184","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3048","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6903","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/869184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0975","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E2C1A6E-C778-4DE0-BFBE-8C60E0A655F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8040429D-3179-4E63-B897-F39F12B508CC"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/869184","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3047","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6902","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/869184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0976","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:process_resource_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"c.01.08.2","matchCriteriaId":"5557A801-C2A2-4DCF-A8E4-3CC4D49332F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0048.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0977","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*","matchCriteriaId":"7A188467-3856-4599-A2CD-BD2655974B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:*","matchCriteriaId":"086DC60F-F530-4515-8F3D-87F30DB9B322"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D538927-82D5-476E-9C85-2E9297316D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2A904832-A6D6-45D4-B07C-79ED1FE47A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB554A4-EEC2-4E17-9F32-27A580B9E389"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1:*:*:*:*:*:*:*","matchCriteriaId":"191DB249-6A73-4561-8CCA-565D1525CB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"34A5D9A5-FB1D-4ACF-846A-4DB73196122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41400CE6-FA51-435C-93F7-B31FE42F18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6022ABEB-6825-4A5F-9884-74F94C2387F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D2F15789-334D-460D-B5B3-FCC71087D107"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F77B1548-BB6D-4618-AE7B-E97F91A0AF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B7064C52-1211-42B8-BF1F-C22D800AED07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1CD95826-E44A-48C6-BAAB-77A905CAE6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FEEA6BB6-41FC-4F15-A95F-9B052F062454"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E90766C1-6DBD-435C-85E1-920DAFA26D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8CD13DAE-9588-4540-9183-FB80C507F985"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"526366F3-52F0-4816-A356-8F39B718C048"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"AC07AD0D-5DF9-41A4-8592-CEFF1842355D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"30017C56-42A9-4AF9-B5B3-7357E424F837"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C8A51F38-3F5A-4F6D-93EE-776B5C2FF48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8DBEC27E-3220-42CE-B6CC-675F387CB506"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E641DFFB-CBAF-4DCF-944F-443CFF836A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A552E270-5C9C-40DC-B23D-97C8D995B8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0:*:*:*:*:*:*:*","matchCriteriaId":"552F2E25-DDB8-49A6-844A-8520696DBE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03D75A36-41C4-464F-8DC4-42C841ABC087"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C3EE919-D05C-4625-85FE-132F6F2B932C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"20D99A58-8D7E-4586-A9BF-1DD2A1DBB8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DEBA0118-545E-4D7B-B819-34D157B2BA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"67826609-F4CA-42CB-A5D0-B4503DDE2C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"61676BBD-95B8-44C9-BD66-79F00381BF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"719A9B1D-8E32-461F-BCD4-F72C6AD3E63E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000417","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-068","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/935800","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-069.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1905","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-098.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3049","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6904","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2001/dsa-068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/935800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-069.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-098.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0978","sourceIdentifier":"cve@mitre.org","published":"2001-09-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:*","matchCriteriaId":"CE98EAD2-838F-42A2-BC90-F739A6639D47"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0052.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8632.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3289","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8632.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0979","sourceIdentifier":"cve@mitre.org","published":"2001-09-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/211687","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3279","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7078","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/211687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0980","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A218B67-B87B-4A5E-B9EF-EF39ADEAD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB41DE44-C3A1-4CC9-ACA7-4EC171D68910"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3052","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6854","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0981","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the \"unix password sync\" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:*:*:*:*:*:*:*:*","versionEndIncluding":"a.01.07","matchCriteriaId":"DD06C4B0-0D36-44D7-A215-5A7ADA6A4CFE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0048.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7051","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0982","sourceIdentifier":"cve@mitre.org","published":"2001-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing \"%2e\" strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_secureway_policy_director:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E84C65C6-1BA7-463A-9C20-F73776AF3DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_secureway_policy_director:3.6:*:*:*:*:*:*:*","matchCriteriaId":"779D8E3B-2A85-4C13-A12A-AD0E1B41672B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_secureway_policy_director:3.7:*:*:*:*:*:*:*","matchCriteriaId":"403C90F9-573E-4B91-9788-C27ADBD8FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_secureway_policy_director:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D17248B2-881C-4226-9EAF-DED81A90FCCA"}]}]}],"references":[{"url":"ftp://ftp.tivoli.com/support/patches/patches_3.7.1/3.7.1-POL-0003/3.7.1-POL-0003.README","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1908","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3080","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6884","source":"cve@mitre.org"},{"url":"ftp://ftp.tivoli.com/support/patches/patches_3.7.1/3.7.1-POL-0003/3.7.1-POL-0003.README","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0983","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges."}],"vendorComments":[{"organization":"UltraEdit","comment":"We include an option, by design, that allows the user to *not* save the password, and instead enter the password on a per FTP session basis.  This would provide the highest level of security.  If the user decides to have UltraEdit save the FTP password in the INI, it is encrypted for the benefit of the user moving their settings from one system to another.  However, even with the highest level of encryption of the saved password, if the user decides to save their password in the INI, there will always be a level of vulnerability as a result of the users decision to save the password.","lastModified":"2012-03-06T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultraedit:ultraedit-32:*:*:*:*:*:*:*:*","matchCriteriaId":"9C7A9247-740B-4D28-B8CD-29013001E1E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99861651923668&w=2","source":"cve@mitre.org"},{"url":"http://www.eve-software.com/security/ueditpw.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99861651923668&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eve-software.com/security/ueditpw.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0984","sourceIdentifier":"cve@mitre.org","published":"2001-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the \"Clear the password when minimized\" and \"Lock password database on minimize and prompt on restore\" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:counterpane:password_safe:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7A817C45-885B-41DA-A0B7-C37A64F756B9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7123","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0985","sourceIdentifier":"cve@mitre.org","published":"2001-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the \"page\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hassan_consulting:shopping_cart:1.23:*:*:*:*:*:*:*","matchCriteriaId":"0CDF4C61-6330-4037-9676-7ABF32B12799"}]}]}],"references":[{"url":"http://www.irata.com/shopver.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/212827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3308","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7106","source":"cve@mitre.org"},{"url":"http://www.irata.com/shopver.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/212827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0986","sourceIdentifier":"cve@mitre.org","published":"2001-09-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:index_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D56759FD-DE03-4E90-8688-B6A49AA24F25"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/214217","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3339","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7125","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/214217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0987","sourceIdentifier":"cve@mitre.org","published":"2001-07-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathan_neulinger:cgiwrap:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"6D77B405-5FD8-4886-B9DD-5841DCCEDA86"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cgiwrap.sourceforge.net/changes.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/1909","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3084","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6886","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cgiwrap.sourceforge.net/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/1909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0988","sourceIdentifier":"cve@mitre.org","published":"2001-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knox_software:arkeia:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.8.2","matchCriteriaId":"C83CB4B8-4186-449F-8F1F-7648EE2EC915"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0521.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6885","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0521.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0989","sourceIdentifier":"cve@mitre.org","published":"2001-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:richard_everitt:pileup:1.1:*:*:*:*:*:*:*","matchCriteriaId":"47E3039D-0688-4013-8AF6-C4A1B54A4ADA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0512.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.babbage.demon.co.uk/linux/pileup-1.2/pileup-1.2.tar.gz","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0512.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.babbage.demon.co.uk/linux/pileup-1.2/pileup-1.2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-0990","sourceIdentifier":"cve@mitre.org","published":"2001-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"85F4E493-79E9-49EF-9C8B-237F2FC771D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EA8F2818-965F-45CB-842E-0BE3A9DC3606"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FACEBAD4-B602-401B-A798-8BD440D62368"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"12D27D37-97E4-413F-A3B5-33E5CC7DD811"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"FB9D8F71-E669-41B9-9686-3C348669710B"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F07EA2-D0D6-4CF2-A1E5-87C7FBE77E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"48D21401-54EB-49FE-ACA6-CED2E7300D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"1F2078CF-E0F3-4CF2-AC4B-8F1B66C5D36B"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"D8ABFEF3-019C-46E7-841E-87EF8C6C9DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"55281945-8C12-49C5-8B3A-C1247A2F2955"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"242098D4-C84A-4741-B651-2C8ABCF631DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:3.4.11e:*:*:*:*:*:*:*","matchCriteriaId":"D907D537-B206-40B4-A27B-DEC45CEF0DF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:4.5:*:*:*:*:*:*:*","matchCriteriaId":"EB4FCDD9-2491-4B90-B70D-2BADFC2CE4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:4.6:*:*:*:*:*:*:*","matchCriteriaId":"7FD37D2A-AA5C-4FA7-AB3E-27CA5FC2BB77"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:4.7:*:*:*:*:*:*:*","matchCriteriaId":"9D547D97-E996-4EE4-872F-1A3A0B28B2FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:4.8:*:*:*:*:*:*:*","matchCriteriaId":"3B56A0D4-31E8-4C3B-97CC-EDFA2EE0A271"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:4.9:*:*:*:*:*:*:*","matchCriteriaId":"C9BDA23C-8B7F-4BFF-AA66-5072AA79CF4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:vpopmail:4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"F7F96550-7AFB-4978-84A2-FE903FB7A922"}]}]}],"references":[{"url":"http://www.inter7.com/vpopmail/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212036","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3284","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7076","source":"cve@mitre.org"},{"url":"http://www.inter7.com/vpopmail/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/212036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0991","sourceIdentifier":"cve@mitre.org","published":"2001-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta1:*:*:*:*:*:*:*","matchCriteriaId":"35E46269-4E16-47BB-A86A-FECBA180BB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta2:*:*:*:*:*:*:*","matchCriteriaId":"A240D4AF-D40F-44E4-83D6-DC66F3614DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta3:*:*:*:*:*:*:*","matchCriteriaId":"022BDEE8-CD8E-4BAA-8E6E-17BCF381964A"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_r._lemmon:proxomitron_naoko-4:beta4:*:*:*:*:*:*:*","matchCriteriaId":"136A1805-29C5-4BA9-A876-51ED9DA70BEC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/198954","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3087","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/198954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0992","sourceIdentifier":"cve@mitre.org","published":"2001-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the \"file\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kabotie_software_technologies:shopplus_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"16D44C3E-8473-4064-A4BB-472FE22D3EA4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0012.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7077","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0993","sourceIdentifier":"cve@mitre.org","published":"2001-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1910","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3088","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6908","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0994","sourceIdentifier":"cve@mitre.org","published":"2001-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marconi:forethought:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0D15EDA5-8C70-431E-A8ED-211A9940AEEE"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/211956","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7082","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/211956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0995","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4a","matchCriteriaId":"C2ADF50B-C9E2-4A8D-BEC3-79610F3077D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB00BE86-A254-46CE-80C8-D76871B6D233"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DC7E15FE-5163-4D9A-91BF-FEC1D51ADAAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE20254C-8118-4013-B85D-091C5C78D96F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"CC288426-7FFD-4103-B460-A78722DC9032"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E3EAC5D3-5BD2-48B5-866D-2B82F550E7F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"9918B4EA-67BC-4EEF-81AA-CC349D0AADC4"}]}]}],"references":[{"url":"http://www.phprojekt.com/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210349","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3239","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7035","source":"cve@mitre.org"},{"url":"http://www.phprojekt.com/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0996","sourceIdentifier":"cve@mitre.org","published":"2001-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pop3lite:pop3lite:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5ED94BF3-1979-41F7-BEC0-736FD3D2F889"},{"vulnerable":true,"criteria":"cpe:2.3:a:pop3lite:pop3lite:0.2.3b:*:*:*:*:*:*:*","matchCriteriaId":"09123A30-F835-488C-ACC7-4447B61C0028"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3278","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7075","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0997","sourceIdentifier":"cve@mitre.org","published":"2001-09-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:textor_webmasters_ltd.:listrec.pl:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DFA85C48-838D-493A-A8B5-9303C62BCBCE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0096.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7117","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0998","sourceIdentifier":"cve@mitre.org","published":"2001-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:hacmp:4.4:*:*:*:*:*:*:*","matchCriteriaId":"61EB1838-010B-4727-842B-0AC84FC26507"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY20943&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/216105","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/217910","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3358","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7165","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY20943&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/216105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/217910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-0999","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/214453","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7118","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/214453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1000","sourceIdentifier":"cve@mitre.org","published":"2001-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merit:aaa_radius_server:3.8m:*:*:*:*:*:*:*","matchCriteriaId":"B63700D5-6969-41D1-A0A3-E8ACB1A59B5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:merit:aaa_radius_server:5.01:*:*:*:*:*:*:*","matchCriteriaId":"29DE3241-3C6A-4621-AE8B-18ABEE015837"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3302","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7096","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1002","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99892644616749&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-102.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3241","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16509","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99892644616749&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1003","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webct:respondus:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7FA3BE83-66B9-41BA-88C6-2F3E6A64B695"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99859557930285&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99859557930285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1004","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnutella:gnutella_client:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.27","matchCriteriaId":"E4E5ED8E-B927-414C-866C-065CC548AE50"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1005","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:starfish:truesync_desktop:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"F45F9C53-6D90-431B-B8C2-D55E2C09DDA9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/210067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1006","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:starfish:truesync_desktop:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"F45F9C53-6D90-431B-B8C2-D55E2C09DDA9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/210067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3232","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1007","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:starfish:truesync_desktop:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"F45F9C53-6D90-431B-B8C2-D55E2C09DDA9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/210067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1008","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_plug-in:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B01AB32D-BC5B-4301-B6D2-CA43DB9F8F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AAB87D43-2860-43DD-94EE-886D7D75A351"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7048.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3245","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7048.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1009","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8.14","matchCriteriaId":"848FBF74-4AF9-4C79-91D8-5770CFA7B100"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-071","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6965.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1555.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-103.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3164","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3166","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6965.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1555.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1010","sourceIdentifier":"cve@mitre.org","published":"2001-07-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.4:*:*:*:*:*:*:*","matchCriteriaId":"9681C75D-45B3-46AB-8FEA-5D8E45D81AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"8CDD4A6F-A334-4081-B7DC-ED4DA5F635E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"B1DA41E4-5170-4BDD-9BFC-8146CCE3EF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"387DA782-35E3-47CB-B041-DAD3C433CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F8B1D7C8-E0D4-4FB1-9011-8BD361B38CC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.sambar.com/security.htm","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3092","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6916","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.sambar.com/security.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1011","sourceIdentifier":"cve@mitre.org","published":"2001-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"677FC209-BD49-4331-9723-DEDE4F8BC20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"758CAFF4-10F3-49A6-98DA-B043F3E9EF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2FE13A8C-F380-4925-AC25-A3980D52C7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E6E8B61B-0761-40FC-99FF-58BC8725FE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0B499138-1060-4FF5-B6B7-C6326CAF9411"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"61F070B7-A0A3-43FD-8D9C-98798F1E8286"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1911","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3093","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6910","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1012","sourceIdentifier":"cve@mitre.org","published":"2001-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2001_030_screen_txt.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7134","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_030_screen_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1013","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213667","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3335","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7129","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1014","sourceIdentifier":"cve@mitre.org","published":"2001-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_boehme:webdiscount_e_shop_online_shop_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"779C29C0-6AEC-4192-9F27-4F40621D927D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/214456","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7128","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/214456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1015","sourceIdentifier":"cve@mitre.org","published":"2001-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snes9x.com:snes9x:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B6351B01-9D81-47DA-9E81-E3ED9C7973A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:snes9x.com:snes9x:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9EC55D37-FF66-4AF4-825B-918ABE9A2F73"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0107.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3437","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1016","sourceIdentifier":"cve@mitre.org","published":"2001-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the \"PGPsdk Key Validity Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:corporate_desktop:7.1:*:*:*:*:*:*:*","matchCriteriaId":"380D0E94-0977-491C-9E06-2C7D43585E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:e-business_server:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"512DD08B-EB5E-4D4D-9075-69D63EDD7960"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:e-business_server:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3AAB642C-3F4E-43E9-8B6E-912C6431634B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:e-business_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F90767BF-6F08-4993-A7BC-D6CD1774F23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6E218A3A-1AC5-456F-93B7-FD27E282F739"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"56051D4A-7A78-423B-9F96-AF73C5451A36"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFE4ED40-67CE-40CA-B96E-E014E9C0A161"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F108CDD2-F323-493D-BA3C-CE752ED7F287"}]}]}],"references":[{"url":"http://www.osvdb.org/1946","source":"cve@mitre.org"},{"url":"http://www.pgp.com/support/product-advisories/pgpsdk.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/211806","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3280","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7081","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pgp.com/support/product-advisories/pgpsdk.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/211806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1017","sourceIdentifier":"cve@mitre.org","published":"2001-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:59.rmuser.v1.1.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1947","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3282","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7086","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:59.rmuser.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1018","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100094373621813&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3350","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100094373621813&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1019","sourceIdentifier":"cve@mitre.org","published":"2001-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seaglass_technologies_inc.:sglmerchant:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2ED1E8EC-C7F0-4A34-A66A-41B67C2C3A11"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/212825","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3309","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1020","sourceIdentifier":"cve@mitre.org","published":"2001-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vibechild:directory_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"0.91","matchCriteriaId":"B3B0709F-2718-45F7-88ED-DBD286C62AB9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=51589","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3288","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7079","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=51589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1021","sourceIdentifier":"cve@mitre.org","published":"2001-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F7B58011-9D3B-432C-93B1-47938F7E2D43"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6911","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1022","sourceIdentifier":"cve@mitre.org","published":"2001-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*","matchCriteriaId":"35017C15-4CCD-4B44-9108-F5650319A009"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*","matchCriteriaId":"B8AC4613-F1BE-4EEE-84C3-A13D2AC048B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*","matchCriteriaId":"2D6BD17C-0DE9-405D-BC02-E996FBC4F97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*","matchCriteriaId":"5493392A-B8E1-4F71-A1ED-6889FD1CC217"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*","matchCriteriaId":"BDF86410-1841-4549-A0FE-3D16C6CCE383"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*","matchCriteriaId":"EDB1389A-0F7D-4616-8553-AF1E40B05256"},{"vulnerable":true,"criteria":"cpe:2.3:a:jgroff:jgroff:*:*:*:*:*:*:*:*","matchCriteriaId":"9687B381-9EC4-45DB-A9A2-9AAFC6BF9D3A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000428","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-072","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-107","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1914","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-004.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/199706","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3103","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6918","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/199706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1023","sourceIdentifier":"cve@mitre.org","published":"2001-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xcache_technologies:xcache:2.0:*:*:*:*:*:*:*","matchCriteriaId":"467C3097-E18B-4182-AAF5-C9771412BC4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xcache_technologies:xcache:2.1:*:*:*:*:*:*:*","matchCriteriaId":"68B2236D-069E-456F-AB79-848B27DA92CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0182.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3352","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7159","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0182.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1024","sourceIdentifier":"cve@mitre.org","published":"2001-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entrust:getaccess:*:*:*:*:*:*:*:*","matchCriteriaId":"FB53BB4B-6AD8-43F1-B423-DFC7044A711D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0662.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6915","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0662.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6915","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1025","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the \"prefix\" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0019.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3149","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1026","sourceIdentifier":"cve@mitre.org","published":"2001-07-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_applettrap:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9903AB2D-0517-47F8-B918-3C1372E9430F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2996","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3000","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6816","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6817","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6818","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6819","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1027","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:*:*:*:*:*:*:*:*","versionEndIncluding":"0.64","matchCriteriaId":"32B9BB2E-271C-4167-9B44-CC5E1067B8E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.60:*:*:*:*:*:*:*","matchCriteriaId":"B7608D98-51FF-4B72-B264-997F1CDC52AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.61:*:*:*:*:*:*:*","matchCriteriaId":"61B98917-1DCD-4E44-B795-77D6E5EF4591"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.61.1:*:*:*:*:*:*:*","matchCriteriaId":"C68989EA-4697-45D7-9AEC-A14DE785A00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.62:*:*:*:*:*:*:*","matchCriteriaId":"E2AA2B5B-C63F-4076-A759-2B9C04D6151B"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.62.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F849D3-AF59-4318-8205-8B6E7A8129D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.63:*:*:*:*:*:*:*","matchCriteriaId":"36012A18-0215-4357-94A0-A18A77165CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.63.1:*:*:*:*:*:*:*","matchCriteriaId":"D19C4E0B-1E47-44E1-9963-6C8596B0E746"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000411","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-074","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-074.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_032_wmaker_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3177","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.windowmaker.org/src/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6969","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-074.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_032_wmaker_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.windowmaker.org/src/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1028","sourceIdentifier":"cve@mitre.org","published":"2001-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"4BF54738-3C44-4FD4-AA9C-CAB2E86B1DC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EF44364-0F57-4B74-81B0-501EA6B58501"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8EED385-8C39-4A40-A507-2EFE7652FB35"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8622.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-072.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8622.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1029","sourceIdentifier":"cve@mitre.org","published":"2001-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*","matchCriteriaId":"9B72CFB3-39C7-469C-AA59-69F5B8993BF7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4","matchCriteriaId":"5D525F21-A36E-4A84-9FA9-B9EF23C27622"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8697","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1030","sourceIdentifier":"cve@mitre.org","published":"2001-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A218B67-B87B-4A5E-B9EF-EF39ADEAD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"DB0F79BE-8EBF-44D8-83A1-9331669BED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"1A2889C6-8DE0-4432-812A-F2A5C4A08897"},{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*","matchCriteriaId":"7A188467-3856-4599-A2CD-BD2655974B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy:2.3stable3:*:*:*:*:*:*:*","matchCriteriaId":"1D5299EE-5CA6-4A9E-9543-BDB0ADF9ED68"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid_web_proxy:2.3stable4:*:*:*:*:*:*:*","matchCriteriaId":"69466E6B-CD99-4A6F-87EE-1CC430573509"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.01:*:*:*:*:*:*:*","matchCriteriaId":"9406727E-365C-466F-8406-82B393537559"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"13EBB2F7-712E-4CB1-B4B4-5F0851F3D37E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-097.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/197727","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6862","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-097.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/197727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1031","sourceIdentifier":"cve@mitre.org","published":"2001-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:charles_clark:meteor_ftpd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"50D053F7-6907-4C1C-BCC7-4F8F8CB93BB2"}]}]}],"references":[{"url":"http://207.202.218.172/","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0231.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3374","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7176","source":"cve@mitre.org"},{"url":"http://207.202.218.172/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1032","sourceIdentifier":"cve@mitre.org","published":"2001-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"550DED26-19FF-4B27-89A6-1742110AE3A4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0203.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=113892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3361","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7170","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=113892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1033","sourceIdentifier":"cve@mitre.org","published":"2001-09-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a \"split-brain\" state."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:trucluster:1.5:*:*:*:*:*:*:*","matchCriteriaId":"32AF13B6-A3C9-424C-9702-8C0A331A0BB2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3198FD9F-ACB8-4F59-A896-68A3A7287D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/216323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3362","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7171","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/216323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1034","sourceIdentifier":"cve@mitre.org","published":"2001-09-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/215984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3357","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/215984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1035","sourceIdentifier":"cve@mitre.org","published":"2001-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slrn_development_team:slrn:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"6624BE33-0DE2-4108-90D2-4ACFD646729C"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-078","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3364","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7166","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1036","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:findutils:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7CA98BAA-CDE7-4255-B4A9-926CA2BF9783"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:findutils:4.1:*:*:*:*:*:*:*","matchCriteriaId":"82F0B7F9-8A8E-4717-9C78-A26141AC66BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F0297F56-5F41-48FD-AB47-36E3BD2AB7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"78D76664-F4AC-470A-9686-3F708922A340"}]}]}],"references":[{"url":"http://www.osvdb.org/5477","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/200991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3127","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6932","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/200991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1037","sourceIdentifier":"cve@mitre.org","published":"2001-01-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6576F05C-271D-401F-99BF-54D004B8D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"718815AE-B1F2-4275-946A-A6FE5D5106C7"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/SN-kernel-pub.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1917","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3131","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6827","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/SN-kernel-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1038","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6576F05C-271D-401F-99BF-54D004B8D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"718815AE-B1F2-4275-946A-A6FE5D5106C7"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-112.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/SN-kernel-pub.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1899","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3014","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6826","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-112.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/SN-kernel-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/1899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1039","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*","matchCriteriaId":"565A8753-31CC-4D4D-BF71-EB4C08A2D47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"30AAEB5E-184F-4DB4-B0A6-D770D3832B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*","matchCriteriaId":"012B7A13-0A21-4FCD-8B32-7302545885A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*","matchCriteriaId":"30DA33FB-AFA3-4720-8108-E279D97BADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*","matchCriteriaId":"8F6E0862-A565-4099-9EB7-D02AD6081811"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*","matchCriteriaId":"BE4F960E-F153-45DF-812F-47AA31C33E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*","matchCriteriaId":"17A6954A-D8E0-4ADF-BB64-329D7589F38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1A5E2537-1E27-4962-BFC3-488FF3C2D305"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*","matchCriteriaId":"467A92C4-1067-4158-8BA1-367495B1845C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/201160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/201160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1040","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:4.0:*:*:*:*:*:*:*","matchCriteriaId":"565A8753-31CC-4D4D-BF71-EB4C08A2D47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"30AAEB5E-184F-4DB4-B0A6-D770D3832B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.1:*:*:*:*:*:*:*","matchCriteriaId":"012B7A13-0A21-4FCD-8B32-7302545885A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.5:*:*:*:*:*:*:*","matchCriteriaId":"30DA33FB-AFA3-4720-8108-E279D97BADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.5.177:*:*:*:*:*:*:*","matchCriteriaId":"8F6E0862-A565-4099-9EB7-D02AD6081811"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:5.6:*:*:*:*:*:*:*","matchCriteriaId":"BE4F960E-F153-45DF-812F-47AA31C33E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.0:*:*:*:*:*:*:*","matchCriteriaId":"17A6954A-D8E0-4ADF-BB64-329D7589F38A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1A5E2537-1E27-4962-BFC3-488FF3C2D305"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jetadmin:6.2:*:*:*:*:*:*:*","matchCriteriaId":"467A92C4-1067-4158-8BA1-367495B1845C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/201224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/201224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1041","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"05E6B744-9449-4C20-B7F7-8F3922C360C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D71D7201-8853-4FA1-89D3-A827281531B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"203B7526-8009-45BA-840D-CAC6A09E8ABE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100395579811880&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99677282117387&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3135","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100395579811880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99677282117387&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1042","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.9.5.0:*:*:*:*:*:*:*","matchCriteriaId":"B190E2EC-CB66-445F-AF0B-DB075208E38B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/194443","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2960","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6760","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/194443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1043","sourceIdentifier":"cve@mitre.org","published":"2001-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"85FD4FAF-EF41-4DFA-84BC-F92B69089478"}]}]}],"references":[{"url":"http://www.osvdb.org/1886","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/194445","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2961","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6760","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/1886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/194445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1044","sourceIdentifier":"cve@mitre.org","published":"2001-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:0.9.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"477EE6E0-941F-4667-B879-A523B012CE6E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/155897","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2198","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5934","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/155897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1045","sourceIdentifier":"cve@mitre.org","published":"2001-07-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:1.02_beta:*:*:*:*:*:*:*","matchCriteriaId":"E241BC1A-DAC9-4060-B32B-9E5B7154D169"},{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:1.03_beta:*:*:*:*:*:*:*","matchCriteriaId":"8C8E1917-6CF0-48F9-9158-991641D67B1F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0114.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2995","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6873","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1046","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D04F5B4-57CD-486E-BE24-A9092D21BBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"794F010E-E06E-4156-8932-940680D97DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0EEBDFB2-5CB5-4E05-962D-4B0C4156D23A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q3/0006.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=98777649031406&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/188267","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2811","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6647","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q3/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=98777649031406&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/188267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1047","sourceIdentifier":"cve@mitre.org","published":"2001-06-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2001/Jun/0020.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2817","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6660","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6661","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2001/Jun/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1048","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2DF6C3B6-A3F3-4783-BECC-15C8E4296600"},{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"215C7E79-921A-48F2-A673-C1C6EB87E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:1.2:*:*:*:*:*:*:*","matchCriteriaId":"51ED771B-E24B-4CCF-9952-5EF37A1F0D87"},{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F2F38C23-25AF-4ED7-AEA3-4987437404AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2A81CCF0-0814-438A-B986-CFAD68C28EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:2.1:*:*:*:*:*:*:*","matchCriteriaId":"69C3D8CC-0FA2-492B-8C2C-8E0972DA66ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:topher1kenobe:awol:2.01:*:*:*:*:*:*:*","matchCriteriaId":"AF4FC544-5503-4654-A517-87135789CC44"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.geocrawler.com/archives/3/14414/2001/9/0/6668723/","source":"cve@mitre.org"},{"url":"http://www.gospelcom.net/mnn/topher/awol/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3387","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.geocrawler.com/archives/3/14414/2001/9/0/6668723/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gospelcom.net/mnn/topher/awol/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1049","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_m._jones:phorecast:*:*:*:*:*:*:*:*","versionEndIncluding":"0.40","matchCriteriaId":"636FC627-571C-4567-AF39-7C9C7521A0C9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://phorecast.org/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3388","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://phorecast.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1050","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.91:*:*:*:*:*:*:*","matchCriteriaId":"7FBD8F0C-EC46-4094-9D96-D61C51540B90"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.92:*:*:*:*:*:*:*","matchCriteriaId":"9D982196-CAFC-4407-8F87-20369C2DC3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.94:*:*:*:*:*:*:*","matchCriteriaId":"066A0571-258E-417E-BFDA-9C0C93D64255"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.95:*:*:*:*:*:*:*","matchCriteriaId":"49F2A4A4-8E60-4AE5-B6BB-2F36DB74A9EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.96:*:*:*:*:*:*:*","matchCriteriaId":"8DA213DD-6B68-4D82-AE43-0D85EF5FB9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.97:*:*:*:*:*:*:*","matchCriteriaId":"BD8D0BBB-433D-4217-899D-95CA23A7CBB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.98:*:*:*:*:*:*:*","matchCriteriaId":"56BB5876-109C-41F2-9737-C25AE96F0CBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:0.99:*:*:*:*:*:*:*","matchCriteriaId":"A3802BCC-1082-4262-9CC1-119498C68568"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"98D420B4-49E6-4154-B380-CC7699CC34BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:1.02:*:*:*:*:*:*:*","matchCriteriaId":"C4CD580B-63D6-415F-ABC7-69343C8DBEF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cccsoftware:ccc:1.03:*:*:*:*:*:*:*","matchCriteriaId":"8EB38E07-4A86-4F95-8676-AEC9306FA068"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3389","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1051","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dark_hart_portal:darkportal-unix:0.1.16:*:*:*:*:*:*:*","matchCriteriaId":"6E7944E4-C37B-46DA-BCE8-146159903D0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dark_hart_portal:darkportal-unix:0.1.17:*:*:*:*:*:*:*","matchCriteriaId":"09B6B439-571F-4FE7-AE2C-B5E0DDD515C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dark_hart_portal:darkportal-unix:0.1.18:*:*:*:*:*:*:*","matchCriteriaId":"9578AB95-0215-475F-8FC3-36548AFBCF33"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3390","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1052","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emergenices_personnel_information_system:empris:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B730EE85-DE12-4327-BCB6-D04A279A4FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:emergenices_personnel_information_system:empris:2001-08-10:*:*:*:*:*:*:*","matchCriteriaId":"DF828B04-34D1-458D-BF4C-3E076D05A0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:emergenices_personnel_information_system:empris:2001-09-08:*:*:*:*:*:*:*","matchCriteriaId":"61F686AF-878A-4AC8-A4F4-B59FFCD37549"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1053","sourceIdentifier":"cve@mitre.org","published":"2001-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:0.77:*:*:*:*:*:*:*","matchCriteriaId":"CEF57436-6A31-4FC6-ACEB-80964D4CB644"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:0.77b:*:*:*:*:*:*:*","matchCriteriaId":"91F083DD-A0E4-4976-AA90-411E997EAB2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:0.78b:*:*:*:*:*:*:*","matchCriteriaId":"05F8CC7D-06BF-4066-B81E-E90938CC63B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.0:*:*:*:*:*:*:*","matchCriteriaId":"38258B1D-D550-4B05-B3A5-ED2B1AD24CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.12:*:*:*:*:*:*:*","matchCriteriaId":"51DED5F8-C6B7-4E83-99D1-68218AE93801"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2E40848-FA86-4A13-BA3C-9E9F73918F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.14:*:*:*:*:*:*:*","matchCriteriaId":"DF746F4C-CD78-4900-9734-C0D44A3241BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.15:*:*:*:*:*:*:*","matchCriteriaId":"0760FC61-AF27-432E-9C85-84C81FED6B5B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3032","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6837","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1054","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpadsnew:phpadsnew:2.0_beta5:*:*:*:*:*:*:*","matchCriteriaId":"4DC61A97-7253-4ED3-A01F-8F76E77C391A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=117952","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?thread_id=148900&forum_id=117952","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3392","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=117952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?thread_id=148900&forum_id=117952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1055","sourceIdentifier":"cve@mitre.org","published":"2001-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/200323","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3113","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6924","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/200323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1056","sourceIdentifier":"cve@mitre.org","published":"2001-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a \"DCC SEND\" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartExcluding":"2.0.1","versionEndIncluding":"2.0.18","matchCriteriaId":"1C4B89DB-8BFA-446D-A00F-FB6DFE067BBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndIncluding":"2.2.18","matchCriteriaId":"21794CDE-ADB5-45ED-B995-456A2C439438"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0733.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0750.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/6923.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/1916","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3117","source":"cve@mitre.org","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0733.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0750.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/6923.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/1916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1057","sourceIdentifier":"cve@mitre.org","published":"2001-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making license requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_research:mathematica:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D1173DFB-1B04-4653-89F8-D65E65E5FF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_research:mathematica:4.1:*:*:*:*:*:*:*","matchCriteriaId":"8048187B-0F9B-42AC-B747-5A60816C63DC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/200462","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3120","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/200462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1058","sourceIdentifier":"cve@mitre.org","published":"2002-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license."},{"lang":"es","value":"El gestor de licencias (mathlm) de Mathematica 4.0 y 4.1 permite que atacantes remotos pasen el control de acceso (especificado por el argumento -restrict) y roben una licencia por medio de una petición cliente que incluye el nombre de una máquina que tiene derecho a la licencia."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_research:mathematica:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D1173DFB-1B04-4653-89F8-D65E65E5FF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_research:mathematica:4.1:*:*:*:*:*:*:*","matchCriteriaId":"8048187B-0F9B-42AC-B747-5A60816C63DC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/200462","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3118","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6927","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/200462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1059","sourceIdentifier":"cve@mitre.org","published":"2001-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"66596F04-9C2E-4091-85A7-40239F3F920E"}]}]}],"references":[{"url":"http://www.osvdb.org/5475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/200455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3119","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6925","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/200455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1060","sourceIdentifier":"cve@mitre.org","published":"2001-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3FF189AE-9485-4F8C-AAAE-25088DF6F964"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"560BC57D-BDCE-4479-9847-6DB53A89FFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4859644F-E5FF-4AE4-B16D-CC2243964D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"}]}]}],"references":[{"url":"http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/200596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3121","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/200596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1061","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q3/0003.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2001-q3/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1062","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.6a","matchCriteriaId":"29E4E765-F758-45B9-83A5-45B6FCF6DC22"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.12/CSSA-2001-SCO.12.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7034.php","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.12/CSSA-2001-SCO.12.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7034.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1063","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"42AA34B0-4A86-4864-8C10-456DDD152989"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.14/CSSA-2001-SCO.14.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3244","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7036","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.14/CSSA-2001-SCO.14.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1064","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.2ap","matchCriteriaId":"709494BE-334A-43C4-A10B-E3784093B2A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8EE29F62-FF38-4951-B3CB-2B9102CB9291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EEF0CEB-4CCF-46B1-99BC-8301CD422371"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"9A6E05A1-524C-441C-A4E2-F2E9DE62E82A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3875EB7E-7D22-4C3D-80CD-A7E8A249E97F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFD36C73-8CAC-4DDB-8A64-11DAC075D300"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"EC7E0234-23B5-41D4-A8B5-04C5BB881F3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B2277233-E3EB-42F0-BB02-068E50A09265"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59C80FB5-35CC-4FE2-8C98-A560B7D5C479"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"ADC81B47-C744-4776-BFB6-AA70D35A4140"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFB61AC-25EE-46E4-9F34-70569EF74CFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"4737C7E7-1E40-40F6-A6B3-4CE1465F4105"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A18E9CCC-D8EB-4778-B444-14314651CA9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FB7AF093-B5E2-4C4F-997B-5ECB5192A524"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E8FFFBE5-EE4C-4A10-8D94-015438A39C76"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3236","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7026","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1065","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.2ap","matchCriteriaId":"709494BE-334A-43C4-A10B-E3784093B2A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8EE29F62-FF38-4951-B3CB-2B9102CB9291"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7027","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1066","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0036.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99893667921216&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7042","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99893667921216&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1067","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E02E404B-8361-4531-A732-DFDA0762E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"817E4138-D68E-47A8-AD73-3BC27201999F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0325.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213041","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3230","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7030","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0325.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1068","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"794F010E-E06E-4156-8932-940680D97DB5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0363.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3242","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7047","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1069","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"}]}]}],"references":[{"url":"http://lists.debian.org/debian-security/2001/debian-security-200101/msg00085.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99849121502399&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3225","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7024","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-security/2001/debian-security-200101/msg00085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99849121502399&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1070","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sage_software:mas_200:*:*:*:*:*:*:*:*","matchCriteriaId":"78A2F3AA-A534-4D4E-A7C9-E31B29DDC92E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0312.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3221","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7020","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0312.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1071","sourceIdentifier":"cve@mitre.org","published":"2001-10-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3\\(11\\)b:*:*:*:*:*:*:*","matchCriteriaId":"9C7C99C7-ABF5-4581-B3CB-A8B2DCD7A5CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.1\\)xp:*:*:*:*:*:*:*","matchCriteriaId":"AEB89FCC-6602-4B41-9BFA-91B0B48827A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(19\\):*:*:*:*:*:*:*","matchCriteriaId":"13BB143D-CE87-4B5B-8B41-F641C160624F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"E3AB1738-A733-4227-B389-650FD7559D7B"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/139491","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/219257","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/219305","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3412","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7242","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/139491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/219257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/219305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1072","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"}]}]}],"references":[{"url":"http://www.apacheweek.com/issues/02-02-01#security","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/203955","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3176","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8633","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/02-02-01#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/203955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1073","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webridge:px_application_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"CDD960E1-AA9C-4E78-A08D-1709A76B251D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/204725","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3182","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6993","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/204725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1074","sourceIdentifier":"cve@mitre.org","published":"2001-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A9641C23-B30A-4CB2-A348-BD708F68F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.6:*:*:*:*:*:*:*","matchCriteriaId":"0852A462-22ED-422D-A454-0A6E026D9AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"97FEF73D-767D-4BF2-AA12-67268719A404"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*","matchCriteriaId":"23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.83:*:*:*:*:*:*:*","matchCriteriaId":"DFD94AA9-CABA-4FC8-8367-D5D9D8B4F623"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.84:*:*:*:*:*:*:*","matchCriteriaId":"35B136CA-47BF-46DE-885A-9E74EBDE5306"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2795","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6627","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6627","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1075","sourceIdentifier":"cve@mitre.org","published":"2001-07-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a \"POP login by user\" string that includes the attacker's IP address to be injected into the maillog log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0064.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0150.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2986","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6806","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0150.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1076","sourceIdentifier":"cve@mitre.org","published":"2001-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2935","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6802","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1077","sourceIdentifier":"cve@mitre.org","published":"2001-06-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rxvt:rxvt:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5BA71D83-EA61-4B68-9D71-40E660C8E9E9"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-028-01","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-062","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-060.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/191510","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2878","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6701","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-028-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-060.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/191510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1078","sourceIdentifier":"cve@mitre.org","published":"2001-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"72FC40F9-E186-43CA-8C85-EA91A8E91ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F395FF0F-8CD2-4653-9C27-5329A37DCC40"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37AD1A31-7763-4540-9785-FDC168D7E62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"20BDB6DF-6570-4AB1-8ACF-D2262C767EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1:*:*:*:*:*:*:*","matchCriteriaId":"24C2B718-0D43-4305-9937-705696B6BEFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C48091F8-7F0D-4FA6-9FC4-2DCC121B368E"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E60F2FCF-E439-4321-ABE3-21DAC3ABED3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F168C99-99C5-4039-A6EB-15D2D094CBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"FD5059DA-D66C-43F5-9DF0-5E9728AB8F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"10300F83-95C3-4FAB-8918-B72E4AB1B2FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A0D80F5F-767D-4E01-84BE-3F8418189819"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CEF46411-F100-40B5-A021-09A5292B45F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5B40D6E2-4B84-49D6-AC75-E1FBA9E607B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"10617FD8-536F-4CA8-996D-7B8746822EF1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0291.html","source":"cve@mitre.org"},{"url":"http://www.extremail.com/history.htm","source":"cve@mitre.org"},{"url":"http://www.extremail.com/news.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2908","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6733","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0291.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.extremail.com/history.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.extremail.com/news.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1079","sourceIdentifier":"cve@mitre.org","published":"2002-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service."},{"lang":"es","value":"create_keyfiles en PSSP 3.2 con autentificación DCE 3.1 en sistemas AIX 3.2.0 crea los directorios de ficheros de claves con permisos de escritura para todo el mundo, lo cual permite que un usuario local borre esos ficheros y provoque una denegación del servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"52E2640B-D116-4CB1-A2B8-648AE716D40A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q3/0000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5473","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8923","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2001-q3/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1080","sourceIdentifier":"cve@mitre.org","published":"2001-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6734","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1081","sourceIdentifier":"cve@mitre.org","published":"2001-07-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6567647A-3EE9-42BE-A712-A3F7C9FD0801"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_horms:radius:2.1_2:*:*:*:*:*:*:*","matchCriteriaId":"933E9B4F-F4E7-4376-84FB-9C1C27F17F21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0009.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org"},{"url":"http://freshmeat.net/releases/52020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2994","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/releases/52020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1082","sourceIdentifier":"cve@mitre.org","published":"2001-07-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6567647A-3EE9-42BE-A712-A3F7C9FD0801"},{"vulnerable":true,"criteria":"cpe:2.3:a:simon_horms:radius:2.1_2:*:*:*:*:*:*:*","matchCriteriaId":"933E9B4F-F4E7-4376-84FB-9C1C27F17F21"}]}]}],"references":[{"url":"http://freshmeat.net/releases/52020/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/releases/52020/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1083","sourceIdentifier":"cve@mitre.org","published":"2001-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \\ (backward slash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5BF7EE94-1633-4279-84C7-8DCE655AC09D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9C35E7B3-C898-4127-9188-65E691148EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.8_beta2:*:*:*:*:*:*:*","matchCriteriaId":"09D43B23-E146-41E9-AFA4-A107DF96A268"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-020.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-089","source":"cve@mitre.org"},{"url":"http://www.icecast.org/index.html","source":"cve@mitre.org"},{"url":"http://www.icecast.org/releases/icecast-1.3.11.tar.gz","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-105.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/193516","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2933","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6751","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-020.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.icecast.org/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.icecast.org/releases/icecast-1.3.11.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/193516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1084","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DA955BB7-2B8A-4534-A0F6-AEBD6875EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/654643","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2983","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6793","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/654643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1085","sourceIdentifier":"cve@mitre.org","published":"2001-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jon_zeeff:lmail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"BD4E4BB7-B184-410D-82DC-6FF6DBC53FCC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/195022","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2984","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6809","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1086","sourceIdentifier":"cve@mitre.org","published":"2001-07-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AE887A26-0590-40DE-ACE2-28A30E5228AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/195008","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194907","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2985","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6808","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/195008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1087","sourceIdentifier":"cve@mitre.org","published":"2001-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:network_appliance:netcache:c700:*:*:*:*:*:*:*","matchCriteriaId":"3D30E3BD-5E3E-4690-97A5-F78F356ED3AD"},{"vulnerable":true,"criteria":"cpe:2.3:h:network_appliance:netcache:c1100:*:*:*:*:*:*:*","matchCriteriaId":"54AF252A-4C60-476A-BB2C-087C421233E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:network_appliance:netcache:c3100:*:*:*:*:*:*:*","matchCriteriaId":"AEB34976-5065-4776-9BCD-E57FA2817226"},{"vulnerable":true,"criteria":"cpe:2.3:h:network_appliance:netcache:c6100:*:*:*:*:*:*:*","matchCriteriaId":"1165BE22-CEAA-49E9-A7E5-26B1A15C07F1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/195176","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6807","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1088","sourceIdentifier":"cve@mitre.org","published":"2001-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the \"Automatically put people I reply to in my address book\" option enabled, do not notify the user when the \"Reply-To\" address is different than the \"From\" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6764F97F-6906-4953-BB1C-AA6345FA8FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.5:*:*:*:*:*:*:*","matchCriteriaId":"67AB674C-70E1-4CCB-8F88-0741AAE6DA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.27.3110:*:*:*:*:*:*:*","matchCriteriaId":"3A5A497C-D03E-4666-BFCE-632F9943DB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.2106:*:*:*:*:*:*:*","matchCriteriaId":"5D635E46-B428-498D-9C6C-7CA9EB397C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3120.0:*:*:*:*:*:*:*","matchCriteriaId":"7769EE2E-A740-4AE8-B1B1-A5256C12601D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3612:*:*:*:*:*:*:*","matchCriteriaId":"F6C57670-B009-4C06-BAFD-B5212750F298"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/188752","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2823","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6655","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/188752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1089","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alessandro_gardich:nss_postgresql:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F94C6FB3-FB04-4A73-84CC-20307CA0F1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joerg_wendland:libnss-pgsql:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"37C134B7-977B-40BB-BC26-B438195DA562"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213331","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3314","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1090","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alessandro_gardich:nss_postgresql:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F94C6FB3-FB04-4A73-84CC-20307CA0F1CC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213331","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3315","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1091","sourceIdentifier":"cve@mitre.org","published":"2001-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-014.txt.asc","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7037","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-014.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1092","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"B750254C-A460-4F52-B4A4-636CB2CBE50E"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"41610DE1-C3E9-4D1E-91E3-27E7B4BA9841"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/440539","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/213238","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3320","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7102","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/440539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/213238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1093","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"B750254C-A460-4F52-B4A4-636CB2CBE50E"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"41610DE1-C3E9-4D1E-91E3-27E7B4BA9841"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213238","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1094","sourceIdentifier":"cve@mitre.org","published":"2001-09-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crosstec_corporation:netop_school:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7F49804E-8973-4F8A-8D51-ABEE3AFEE63D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7120","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1095","sourceIdentifier":"cve@mitre.org","published":"2001-10-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"44C6203A-D05B-47B1-8BC2-BA021EBAFDEB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY24231&apar=only","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5469","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY24231&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1096","sourceIdentifier":"cve@mitre.org","published":"2001-10-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"44C6203A-D05B-47B1-8BC2-BA021EBAFDEB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5470","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1097","sourceIdentifier":"cve@mitre.org","published":"2001-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5CFBBDA3-8A5E-407D-8608-45C1BD56BF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FF2207E5-7458-40C5-AEF4-73B271EAB3C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"1A0D82E1-CCF7-429B-A637-479E839EAE3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5BB7513-C232-4B4F-BE68-972B05086ABD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"ECCE69A3-41C6-4893-86D4-7F264352C8A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99749327219189&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/199558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3096","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6913","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99749327219189&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/199558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1098","sourceIdentifier":"cve@mitre.org","published":"2001-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall_manager:4.3\\(2\\)g:*:*:*:*:*:*:*","matchCriteriaId":"E550982E-EC1F-4AC3-A22F-8CC6F378FD0B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0071.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/639507","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3419","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7265","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/639507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1099","sourceIdentifier":"cve@mitre.org","published":"2001-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2.5:*:*:*:*:*:*:*","matchCriteriaId":"5FC60140-2135-4E25-BC27-049E819616F5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"34300FD4-EC3B-4206-B6C0-1345F17EC5EA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/212724","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213762","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3305","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7093","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/212724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1100","sourceIdentifier":"cve@mitre.org","published":"2001-10-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spencer_miles:w3mail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BA20A802-D390-40DC-B8EF-E2B995F82243"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/218921","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3673","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.w3mail.org/ChangeLog","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/218921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.w3mail.org/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1101","sourceIdentifier":"cve@mitre.org","published":"2001-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/212826","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3303","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7095","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1102","sourceIdentifier":"cve@mitre.org","published":"2001-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A550C18E-F07A-4A05-87F0-B1D52FDC401C"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/212824","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7094","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1103","sourceIdentifier":"cve@mitre.org","published":"2001-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rhinosoft:ftp_voyager:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"CD2843C4-507F-4CF2-AB37-C3067121F4AA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/320944","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7119","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/320944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1104","sourceIdentifier":"cve@mitre.org","published":"2001-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:soho_firmware:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"86E6AA85-EF88-48B2-B032-05F6CF2792BA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*","matchCriteriaId":"C6B6B3FD-428E-4D6C-8C45-172CF4FB430D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:soho_firmware:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8F9A014E-10BB-4FD8-9D82-94C45115056E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*","matchCriteriaId":"C6B6B3FD-428E-4D6C-8C45-172CF4FB430D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sonicwall:soho_firmware:5.1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6355EC5F-DD35-46AF-A3A6-C11BEBB2316A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sonicwall:soho:-:*:*:*:*:*:*:*","matchCriteriaId":"C6B6B3FD-428E-4D6C-8C45-172CF4FB430D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/199632","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3098","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/199632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1105","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:icdn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E074F8F9-6997-45FE-8FB9-4A800C896DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/l-141.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/SSL-J-pub.html","source":"cve@mitre.org"},{"url":"http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3329","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7112","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-141.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/SSL-J-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1106","sourceIdentifier":"cve@mitre.org","published":"2001-07-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1300381D-449D-42BE-8B94-28D2A5ACC3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.2.1_production:*:*:*:*:*:*:*","matchCriteriaId":"F2FC3057-9969-48B5-A5CF-C11912B89D06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.3:*:*:*:*:*:*:*","matchCriteriaId":"94F70201-3D0E-463A-82B8-4CDE086EAF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:4.4:*:*:*:*:*:*:*","matchCriteriaId":"9681C75D-45B3-46AB-8FEA-5D8E45D81AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"8CDD4A6F-A334-4081-B7DC-ED4DA5F635E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"B1DA41E4-5170-4BDD-9BFC-8146CCE3EF9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta3:*:*:*:*:*:*","matchCriteriaId":"387DA782-35E3-47CB-B041-DAD3C433CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta4:*:*:*:*:*:*","matchCriteriaId":"F8B1D7C8-E0D4-4FB1-9011-8BD361B38CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:beta5:*:*:*:*:*:*","matchCriteriaId":"7A771154-443C-4468-A205-6D0CA83866C9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/199418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3095","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6909","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/199418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1107","sourceIdentifier":"cve@mitre.org","published":"2001-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snapstream:pvs:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"B365644B-B6EA-4399-A109-E8BB1790D3BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3101","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6917","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1108","sourceIdentifier":"cve@mitre.org","published":"2001-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snapstream:pvs:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"B365644B-B6EA-4399-A109-E8BB1790D3BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2080","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3100","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6917","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1109","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.7.337:*:*:*:*:*:*:*","matchCriteriaId":"4D526CA9-E3A7-42BD-BB5C-7FBBFC1E9ACC"}]}]}],"references":[{"url":"http://www.eftp.org/releasehistory.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/213647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3333","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7113","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7114","source":"cve@mitre.org"},{"url":"http://www.eftp.org/releasehistory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/213647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1110","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.7.337:*:*:*:*:*:*:*","matchCriteriaId":"4D526CA9-E3A7-42BD-BB5C-7FBBFC1E9ACC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/213647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1111","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.7.337:*:*:*:*:*:*:*","matchCriteriaId":"4D526CA9-E3A7-42BD-BB5C-7FBBFC1E9ACC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7116","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1112","sourceIdentifier":"cve@mitre.org","published":"2001-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.7.337:*:*:*:*:*:*:*","matchCriteriaId":"4D526CA9-E3A7-42BD-BB5C-7FBBFC1E9ACC"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/213647","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3330","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/213647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1113","sourceIdentifier":"cve@mitre.org","published":"2001-08-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.17:*:*:*:*:*:*:*","matchCriteriaId":"83D2AAD1-AD99-43F3-A8AE-44C3120E7EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.18:*:*:*:*:*:*:*","matchCriteriaId":"90D61B78-BD7B-48BD-B36B-78B57807CD0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.19:*:*:*:*:*:*:*","matchCriteriaId":"CD3A545E-E357-4FCC-B2B8-5422544AB99E"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.20:*:*:*:*:*:*:*","matchCriteriaId":"A42C8E53-B7AC-4336-9411-DA6D9F90A3AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.21:*:*:*:*:*:*:*","matchCriteriaId":"39FA16CB-D4FC-4914-BC31-8695FE8F8F09"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.22:*:*:*:*:*:*:*","matchCriteriaId":"ADB7F4AB-9285-4EC5-8722-A59CA9883442"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.23:*:*:*:*:*:*:*","matchCriteriaId":"FFA95792-77DE-4D6C-A2E8-1FE1570FF090"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.24:*:*:*:*:*:*:*","matchCriteriaId":"3948A6AF-C7D2-45BD-BBA0-152DEF4A7C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.25:*:*:*:*:*:*:*","matchCriteriaId":"861413E3-704B-4B5B-A159-DB6640295A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:trollftpd:1.26:*:*:*:*:*:*:*","matchCriteriaId":"D1BB597A-1CDE-435F-931C-A99E0A9AB5B8"}]}]}],"references":[{"url":"ftp://ftp.trolltech.com/freebies/ftpd/troll-ftpd-1.27.tar.gz","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/203874","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3174","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6974","source":"cve@mitre.org"},{"url":"ftp://ftp.trolltech.com/freebies/ftpd/troll-ftpd-1.27.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/203874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1114","sourceIdentifier":"cve@mitre.org","published":"2001-08-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the \"current\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netcode:nc_book:0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4FAAB667-4E51-4860-BE67-72E144190D1C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/204094","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3178","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/204094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1115","sourceIdentifier":"cve@mitre.org","published":"2001-08-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sixhead:six-webboard:2.01:*:*:*:*:*:*:*","matchCriteriaId":"E15997B5-B797-4B0E-9F0C-5298C7F70D63"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/204053","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3175","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6975","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/204053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1116","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:identix:biologon:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9F32A152-9B40-4A20-A55F-A0CBD7BA120C"},{"vulnerable":true,"criteria":"cpe:2.3:a:identix:biologon:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AC42FAEA-F423-4152-8372-E9EFFBE24529"},{"vulnerable":true,"criteria":"cpe:2.3:a:identix:biologon:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C25651AB-6710-4F9C-8935-ADDFEB572916"},{"vulnerable":true,"criteria":"cpe:2.3:a:identix:biologon:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"06AB3EC2-CED6-4210-9321-924334E40AC0"}]}]}],"references":[{"url":"http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=IND0108&L=NTBUGTRAQ&F=P&S=&P=71","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind0108&L=ntbugtraq&F=P&S=&P=724","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5453","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3140","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6948","source":"cve@mitre.org"},{"url":"http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=IND0108&L=NTBUGTRAQ&F=P&S=&P=71","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind0108&L=ntbugtraq&F=P&S=&P=724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1117","sourceIdentifier":"cve@mitre.org","published":"2001-08-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.35:*:*:*:*:*:*:*","matchCriteriaId":"A52F18C5-6D00-493C-B38F-D6695670357F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.36:*:*:*:*:*:*:*","matchCriteriaId":"3F7E417D-3751-4FCF-AECC-7601F77198E9"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.37:*:*:*:*:*:*:*","matchCriteriaId":"127E79AF-33BE-485E-B4A3-058ECC898E9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.38.5:*:*:*:*:*:*:*","matchCriteriaId":"B49FC600-D1E3-4233-AC8A-DBFA87D2138D"}]}]}],"references":[{"url":"ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1920","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5467","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/201390","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/203302","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3141","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6949","source":"cve@mitre.org"},{"url":"ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/201390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/203302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1118","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roxen:roxen_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3F23BA8A-8E0E-463D-A698-AC120A24AD41"},{"vulnerable":true,"criteria":"cpe:2.3:a:roxen:roxen_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A1AD4A8B-BBDF-4E5B-A910-63ECD1EDBF69"}]}]}],"references":[{"url":"http://download.roxen.com/2.0/patch/security-notice.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/201476","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/201499","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6937","source":"cve@mitre.org"},{"url":"http://download.roxen.com/2.0/patch/security-notice.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/201476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/201499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1119","sourceIdentifier":"cve@mitre.org","published":"2001-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ti_kan:xmcd:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"544A14E6-6D36-4F69-A8B3-CB4937A62E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ti_kan:xmcd:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4CF0FC90-7D10-4E74-B6A8-9E51F408C931"},{"vulnerable":true,"criteria":"cpe:2.3:a:ti_kan:xmcd:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8CBD0512-4806-4683-9283-9AEF9510E878"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/105347","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2001_025_xmcd_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6941","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/105347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2001_025_xmcd_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1120","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EE00F45E-C410-4268-B0EC-18B4043E6631"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7BB5B124-A5C2-4B24-8091-FF9863D17BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"72ADE8ED-2A3D-45A2-B009-EBDE19372757"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DC21856A-F57F-4C34-8276-5880B57A2DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"48996949-448E-457A-B288-4CDD0490FCAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E5BC7A2B-455E-42DF-89E5-FB0B0D14139C"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3630623B-468C-4E71-9C57-EFF83E5EFA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"292DA1C8-5B98-4552-B51B-B0C3F230321F"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5FA98847-8A14-409C-86E8-C7652E5ECF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"A52C6951-19F6-48EA-93C6-53A12701D88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5.1_sp2:*:*:*:*:*:*:*","matchCriteriaId":"0E5FCF6E-BD98-47E1-A39D-4725F2581D06"}]}]}],"references":[{"url":"http://www.allaire.com/handlers/index.cfm?id=21566","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/135531","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/196452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3018","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6839","source":"cve@mitre.org"},{"url":"http://www.allaire.com/handlers/index.cfm?id=21566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/135531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/196452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1121","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2023-11-07T01:55:41.453","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2001-1084. Reason: This candidate is a duplicate of CVE-2001-1084. Notes: All CVE users should reference CVE-2001-1084 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2001-1122","sourceIdentifier":"cve@mitre.org","published":"2001-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*","matchCriteriaId":"14F55877-A759-4C8A-84D5-70508E449799"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/201722","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3144","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/201722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1123","sourceIdentifier":"cve@mitre.org","published":"2001-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:5.01:*:*:*:*:*:*:*","matchCriteriaId":"1218361D-6F62-4035-B0B2-9BEB19539A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*","matchCriteriaId":"39C1B197-F043-4FB7-AFB3-AFC8B8B5B051"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*","matchCriteriaId":"E8E17259-60C7-4F6B-AB23-06E406FA006D"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/782155","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/3585","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3723","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3399","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7222","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/782155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/3585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1124","sourceIdentifier":"cve@mitre.org","published":"2001-10-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-003.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3586","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3400","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7221","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5683","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-003.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1125","sourceIdentifier":"cve@mitre.org","published":"2001-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-494"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6","matchCriteriaId":"B7F89DF5-6664-4C75-B46C-A73FD64B8462"}]}]}],"references":[{"url":"http://www.sarc.com/avcenter/security/Content/2001.10.05.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/218717","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3403","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7235","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.sarc.com/avcenter/security/Content/2001.10.05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/218717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1126","sourceIdentifier":"cve@mitre.org","published":"2001-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate:1.4:*:*:*:*:*:*:*","matchCriteriaId":"92905909-6A38-4D8C-BEFC-61D806CEE1DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate:1.5:*:*:*:*:*:*:*","matchCriteriaId":"D8151566-9F49-444C-86A4-1759DD39B8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6C35D980-BADE-414E-8C41-A41C55E1A0EF"}]}]}],"references":[{"url":"http://www.sarc.com/avcenter/security/Content/2001.10.05.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/218717","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3413","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7235","source":"cve@mitre.org"},{"url":"http://www.sarc.com/avcenter/security/Content/2001.10.05.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/218717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1127","sourceIdentifier":"cve@mitre.org","published":"2001-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv, (2) _mprosrv, (3) _mprshut, (4) orarx, (5) sqlcpp, (6) _probrkr, (7) _sqlschema and (8) _sqldump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:progress:8.3d:*:*:*:*:*:*:*","matchCriteriaId":"DFC28C15-BD8D-4231-8118-188AD9445945"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:progress:9.1c:*:*:*:*:*:*:*","matchCriteriaId":"C131D075-5A8E-4A09-90B3-228307A40C0D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/218833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3404","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7236","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/218833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1128","sourceIdentifier":"cve@mitre.org","published":"2001-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the (1) PROMSGS or (2) PROTERMCAP environment variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:progress:8.3d:*:*:*:*:*:*:*","matchCriteriaId":"DFC28C15-BD8D-4231-8118-188AD9445945"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:progress:9.1c:*:*:*:*:*:*:*","matchCriteriaId":"C131D075-5A8E-4A09-90B3-228307A40C0D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/219174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7264","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/219174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1129","sourceIdentifier":"cve@mitre.org","published":"2001-11-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:progress:9.1c:*:*:*:*:*:*:*","matchCriteriaId":"C131D075-5A8E-4A09-90B3-228307A40C0D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/224395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/224395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1130","sourceIdentifier":"cve@mitre.org","published":"2001-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2001_027_sdb_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/201216","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7003","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_027_sdb_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/201216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1131","sourceIdentifier":"cve@mitre.org","published":"2001-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whitsoft_development:slimftpd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E13508B2-AF47-48DE-8B81-608BE4BD25A0"}]}]}],"references":[{"url":"http://www.securiteam.com/windowsntfocus/5RP0L0055O.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5RP0L0055O.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1132","sourceIdentifier":"cve@mitre.org","published":"2001-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"B1FA86F3-4C9D-4B7B-A183-7187BF453744"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7091","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1133","sourceIdentifier":"cve@mitre.org","published":"2001-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"950CE88E-E396-4D32-AC9D-B76EB2B537C6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7023.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/209192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3220","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7023.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/209192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1134","sourceIdentifier":"cve@mitre.org","published":"2001-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docuprint_n40:*:*:*:*:*:*:*:*","matchCriteriaId":"811F7BCC-D029-413D-83B1-8425452D4B5F"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6976.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/198381","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/203025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3170","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6976.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/198381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/203025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1135","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:642r:*:*:*:*:*:*:*","matchCriteriaId":"4073980C-74CD-4951-9C2B-0AEDAB682652"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/203022","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/203592","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/204439","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/214971","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7146","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/203022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/203592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/204439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/214971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1136","sourceIdentifier":"cve@mitre.org","published":"2001-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0063.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/l-143.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3338","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7124","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/l-143.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1137","sourceIdentifier":"cve@mitre.org","published":"2001-09-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dl-704:v2.56b5:*:*:*:*:*:*:*","matchCriteriaId":"F5C9166E-EC9A-49E1-8A7B-EED8B35E70F8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/212532","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3306","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7090","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1138","sourceIdentifier":"cve@mitre.org","published":"2001-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:randy_parker:power_up_html:0.8033_beta:*:*:*:*:*:*:*","matchCriteriaId":"D5173943-BAA4-451E-8F1B-ADD103ACB79B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/212679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3304","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7092","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1139","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ascii_nt:winwrapper_professional:2.0:*:*:*:*:*:*:*","matchCriteriaId":"39798F40-F183-4D3E-852E-5DCEC007B8E6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7015.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/209414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3219","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tsc.ant.co.jp/products/download.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7015.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/209414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tsc.ant.co.jp/products/download.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1140","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.02_beta:*:*:*:*:*:*:*","matchCriteriaId":"429813C6-BAEA-42A2-B179-BB253D1ADD50"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/209545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7021","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/209545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1141","sourceIdentifier":"cve@mitre.org","published":"2001-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"29C56055-3DB2-4A23-8301-6F6AB4BA38AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.9:*:*:*:*:*:*:*","matchCriteriaId":"76F1B179-25A4-4A72-9E42-43DA61CA1475"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssleay:ssleay:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"127DE515-7313-40EC-BD5A-57CA8EF69F8E"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1483.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/853","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-051.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195829","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3004","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6823","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1483.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/195829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1142","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"85FD4FAF-EF41-4DFA-84BC-F92B69089478"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6848.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/196968","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3029","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6848.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/196968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1143","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"6EA810DB-104E-412A-8B6E-DBB5BEE743A5"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6832.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6833.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/196140","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3010","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6832.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6833.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/196140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1144","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:asap_virusscan:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BB814C86-ACA9-44B8-95A8-E716EB7F7277"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6834.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/190267","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/584","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/196272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3020","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6834.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/190267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/196272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1145","sourceIdentifier":"cve@mitre.org","published":"2001-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9","matchCriteriaId":"28125403-1E0F-44F0-BAA6-E05392544DF6"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:40.fts.v1.1.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/netbsd/2001-q3/0204.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8715.php","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata28.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5466","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3205","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:40.fts.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/netbsd/2001-q3/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8715.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata28.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1146","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lee_herron:allcommerce:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DD7EC09C-8355-4805-A9B2-4E73D80799B9"}]}]}],"references":[{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1492.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6830","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1492.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1147","sourceIdentifier":"cve@mitre.org","published":"2001-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.10s:*:*:*:*:*:*:*","matchCriteriaId":"861DAF15-48B3-42C0-B747-76967AE1918D"},{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.11f:*:*:*:*:*:*:*","matchCriteriaId":"AE56638F-4097-4754-80A8-88EC5DAB132A"},{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.11h:*:*:*:*:*:*:*","matchCriteriaId":"3324A111-D5BC-4A81-8EF4-2E95AFAFD19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.11i:*:*:*:*:*:*:*","matchCriteriaId":"1F256A5F-8525-452F-BF47-8F916A65608C"},{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.11k:*:*:*:*:*:*:*","matchCriteriaId":"9A6AEAFC-F3AA-46CF-81CD-3CE5151CFC62"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-009.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7266.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-084.php3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2001_034_shadow_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-132.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/219175","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3415","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-009.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7266.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-084.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2001_034_shadow_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-132.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/219175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1148","sourceIdentifier":"cve@mitre.org","published":"2001-06-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.6a","matchCriteriaId":"462A9E3F-C690-4235-915D-301993F02CB8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/219966","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/191216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7281","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/219966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/191216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1149","sourceIdentifier":"cve@mitre.org","published":"2001-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:panda_antivirus_platinum:*:*:*:*:*:*:*:*","versionEndIncluding":"6.23.00","matchCriteriaId":"58C54AAC-FB46-402A-8E9E-B75C91EBB617"}]}]}],"references":[{"url":"http://www.osvdb.org/5456","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/82/209328","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/82/209328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1150","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:*:*:*:*:*:*","matchCriteriaId":"BE60F5D9-35D0-4D0E-85D1-EE71E533622F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.54:*:*:*:*:*:*:*","matchCriteriaId":"A79FBAAA-D6B8-4A05-B8E1-D7549207EA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_buster:corporate_3.52:*:*:*:*:*:*:*","matchCriteriaId":"6E3D6BED-09E4-48AD-9AF8-59FFE9241E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_buster:corporate_3.53:*:*:*:*:*:*:*","matchCriteriaId":"924B6C34-036E-4A3E-A5CA-219D06379A1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_buster:corporate_3.54:*:*:*:*:*:*:*","matchCriteriaId":"B4D76FA9-4C35-4D33-A4AC-BAACC16335B4"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7014.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/209375","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210087","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3216","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7014.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/209375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/210087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1151","sourceIdentifier":"cve@mitre.org","published":"2001-10-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.53:*:*:*:*:*:*:*","matchCriteriaId":"C5FF32ED-84C2-4A22-BA4D-2436B96A69A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:virus_buster:corporate_3.53:*:*:*:*:*:*:*","matchCriteriaId":"924B6C34-036E-4A3E-A5CA-219D06379A1B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/220666","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7286","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/220666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1152","sourceIdentifier":"cve@mitre.org","published":"2001-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:baltimore_technologies:websweeper:4.02:*:*:*:*:*:*:*","matchCriteriaId":"E1994D0E-14CF-4F9A-8374-4BAB489DDFB7"}]}]}],"references":[{"url":"http://www.mimesweeper.com/support/technotes/notes/1043.asp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/212283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mimesweeper.com/support/technotes/notes/1043.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/212283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1153","sourceIdentifier":"cve@mitre.org","published":"2001-08-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0391.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7041.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3248","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0391.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7041.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1154","sourceIdentifier":"cve@mitre.org","published":"2001-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:1.6.24:*:*:*:*:*:*:*","matchCriteriaId":"26C5549E-B9DC-4704-90C7-B32E84055AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"65421EE4-CD45-4C99-83A4-E8F17D6B8291"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"686E6850-2FFB-4A83-9BBB-9C4FB456294E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.2:*:*:*:*:*:*:*","matchCriteriaId":"7267B83B-1DC7-4A38-9338-B3BC3B2ECD74"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/211056","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3260","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/211056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1155","sourceIdentifier":"cve@mitre.org","published":"2001-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.1","versionEndIncluding":"4.3","matchCriteriaId":"DE322EF9-8D52-4B54-92DC-14388E3C05A3"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:56.tcp_wrappers.asc","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5454","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:56.tcp_wrappers.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1156","sourceIdentifier":"cve@mitre.org","published":"2001-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a \"../../*\" argument to (1) STOR or (2) RETR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.95:*:*:*:*:*:*:*","matchCriteriaId":"1E140CB7-0806-466C-9902-76F2FA6D70EE"}]}]}],"references":[{"url":"http://membres.lycos.fr/typsoft/eng/history.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7247.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/219167","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3409","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://membres.lycos.fr/typsoft/eng/history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7247.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/219167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1157","sourceIdentifier":"cve@mitre.org","published":"2001-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:baltimore_technologies:websweeper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"ACA513AF-DAEF-4487-8042-FC24FC7A1323"},{"vulnerable":true,"criteria":"cpe:2.3:o:baltimore_technologies:websweeper:4.02:*:*:*:*:*:*:*","matchCriteriaId":"E1994D0E-14CF-4F9A-8374-4BAB489DDFB7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/203821","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3172","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/203821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1158","sourceIdentifier":"cve@mitre.org","published":"2001-07-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1_build_41439:*:*:*:*:*:*:*","matchCriteriaId":"188CAD33-68AB-459F-BD09-47081563B2C7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0128.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-109.shtml","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-11&end=2002-03-17&mid=195647&threads=1","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-17.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.checkpoint.com/techsupport/alerts/rdp.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/310295","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2952","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6815","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0128.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-109.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-11&end=2002-03-17&mid=195647&threads=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.checkpoint.com/techsupport/alerts/rdp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/310295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/1884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1159","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6775.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2968","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squirrelmail.org/changelog.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6775.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squirrelmail.org/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1160","sourceIdentifier":"cve@mitre.org","published":"2001-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microburst:udirectory:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B643D5C8-0D25-4B17-A8B5-D2CA031B8AF6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/191829","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2884","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/191829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1161","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r5_server:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A7BDBEB3-5C51-4547-82D5-C2F7F5655756"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6789.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/642239","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/194465","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194609","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2962","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6789.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/642239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/194465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1162","sourceIdentifier":"cve@mitre.org","published":"2001-06-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"93AF43FA-9947-4F26-96E8-1D77BF909AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B4A46D8D-1535-400B-B1CD-AA2685F4164D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"AFD51F01-B47A-47F5-8798-2EB53EB17297"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"C127A2E6-F94F-41D5-82AA-60C0190186BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"65AC9643-E1A5-4013-9607-17C6CC7CC63B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.05:*:*:*:*:*:*:*","matchCriteriaId":"729FE6E7-5665-4A87-A281-0F904AEA1D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.06:*:*:*:*:*:*:*","matchCriteriaId":"46E92180-5696-49F2-8972-1949F2EBD5D7"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011002-01-P","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-105.shtml","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000405","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-027-01","source":"cve@mitre.org"},{"url":"http://us1.samba.org/samba/whatsnew/macroexploit.html","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-024.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-065","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-062.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-086.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3423","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/193027","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2928","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6731","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011002-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-105.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-027-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://us1.samba.org/samba/whatsnew/macroexploit.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-024.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-062.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/193027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1163","sourceIdentifier":"cve@mitre.org","published":"2001-06-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:munica:netsql:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F2D8C2F9-182A-4669-AD60-DBFD9EC31977"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2885","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1164","sourceIdentifier":"cve@mitre.org","published":"2001-06-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BDB26B9B-75E4-4E4F-9B4F-2621FE673C21"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.4/CSSA-2001-SCO.4.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.4/CSSA-2001-SCO.4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1165","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool."},{"lang":"es","value":"Intego FileGuard 4.0 usa cifrado debil para almacenar información de usuario y contraseñas, lo que permite a usuarios locales ganar privilegios descifrando la información, por ejemplo con la herramienta Disengage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intego:diskguard:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EAE90A47-F3EA-4E66-9DCB-85CC28C6A4F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:intego:fileguard:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2DB630BC-7915-407C-8CD1-7049BA336C00"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7018.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securemac.com/fileguard.php#disengage","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3213","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7018.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securemac.com/fileguard.php#disengage","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1166","sourceIdentifier":"cve@mitre.org","published":"2001-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7017.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3217","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7017.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1167","sourceIdentifier":"cve@mitre.org","published":"2001-08-28T04:00:00.000","lastModified":"2023-11-07T01:55:41.797","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2001-0976.  Reason: This candidate is a duplicate of CVE-2001-0976.  Notes: CVE-2001-0976 should be used instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2001-1168","sourceIdentifier":"cve@mitre.org","published":"2001-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"27B1E61D-C1D5-4AF3-A7A7-5027995A230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B8CD4D7-3F34-48B3-9311-A82B0A57D452"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4745A2F0-EBB2-4281-A9EC-16D9F4B46B65"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F5020BE6-7BE5-44C8-BB1E-A43DB4174311"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"91208DE7-1F67-407B-984E-C32B8C2978C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"788ED5E9-6A92-4AEA-8556-F11A5C08295D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_classic:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF0943C4-F5E6-4F4D-9555-E3D76974606A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyexplorer:phpmyexplorer_multiuser:1.0:*:*:*:*:*:*:*","matchCriteriaId":"95D46ACA-3359-4905-B108-16A905D58059"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0408.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0418.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1169","sourceIdentifier":"cve@mitre.org","published":"2001-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bell_communications_research:s_key:gold:*:*:*:*:*:*:*","matchCriteriaId":"3FD5B3D1-6E0F-48D7-B434-6B581AA79A1F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0441.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0441.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1170","sourceIdentifier":"cve@mitre.org","published":"2001-09-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amtote_international:homebet:*:*:*:*:*:*:*:*","matchCriteriaId":"D92CFCA0-9B78-4477-B260-C69152F2FFF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3370","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7186","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1171","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy."},{"lang":"es","value":"Chek Point Firewall-1 3.0b a 4.0 SP1 sigue enlaces simbólicos y crea un fichero temporal .cpp escribible por todos los usuarios cuando compila las reglas de seguridad, lo que permite a un usuario local obtener privilegios o modificar la política del web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:3.0b:*:*:*:*:*:*:*","matchCriteriaId":"26979D75-2E28-49FE-9ADB-F99A0A6DB479"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1172","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnisecure:httprotect:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1ADD4806-391B-4369-AB33-67ACD3CA26AB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0357.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.omnisecure.com/security-alert.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/5452","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6880","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0357.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.omnisecure.com/security-alert.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/5452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6880","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1173","sourceIdentifier":"cve@mitre.org","published":"2001-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"27A68123-4DD9-4830-AB08-22158B165D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3185B6E3-8461-433F-B99D-6317760BA39A"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE5BC49C-C86C-4DBB-8853-8838AF64C5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3A365F9D-D1F5-4809-94F5-CCE99ACBBC18"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"28DF3F37-A462-4765-AC57-86A012FB2BAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"17931E87-2BCB-4CF2-A018-3915538EFDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6FA5F557-B379-4817-8641-52166BF377BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C22543A3-50D9-40EE-8E38-DEB689979C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"57643AB3-E146-406B-9181-A1884154215B"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EC2E7934-3F5C-47F4-BBD9-8F28D15F77DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"45284864-C048-47CB-8605-D65F53573112"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"D4215BBC-2BF0-442E-BDCB-470A3BE41897"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"81BCBE50-F36D-4630-A232-C98E99A6149B"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"93C4DAE9-CF55-459A-8832-C83488617A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"624F1C66-698D-4DCD-82CC-737C41C8675D"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EA15EFE5-4CE4-4013-BB28-2D30A51170A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"96E25178-EA89-451C-84A2-0328190481F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F09AEBFD-021A-48E7-BC2F-4E2195D94BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"459FEC27-B87B-470A-944C-8B4DA453E8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FB11DE09-1622-4566-A1F8-0634F3D4CA4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"30ED9745-5B8D-4F2E-8904-00B8118CFEE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0623ADEA-8131-4BFD-9442-5837EE3C0C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"0FFECA71-AC24-48DA-9449-F1490AFC05A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"1A2FD795-09DB-46A1-87DD-6CA4D0865950"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"81B01E23-DD31-4786-9A03-67FD786681E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"894C3774-9ABD-4D66-840C-8599EB3B8889"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E90C5624-FF26-4AA9-B4B1-A4C397FDA67A"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.13:*:*:*:*:*:*:*","matchCriteriaId":"781B2305-B369-497F-B364-897CE7C805EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.14:*:*:*:*:*:*:*","matchCriteriaId":"7FE76015-7949-4ADF-B453-120311635F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.15:*:*:*:*:*:*:*","matchCriteriaId":"47C51DE5-5050-4D85-89A0-1C7B8AC57135"}]}]}],"references":[{"url":"ftp://innominate.org/oku/masqmail/ChangeLog-stable","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://innominate.org/oku/masqmail/ChangeLog-stable","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1174","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header."},{"lang":"es","value":"Desbordamiento de buffer en Elm 2.5.5 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante una cabecera de ID de mensaje larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elm_development_group:elm:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.5","matchCriteriaId":"C1630586-A361-41CF-90AC-39F918B8F9ED"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-067.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5451","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-091.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6852","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-067.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1175","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing."},{"lang":"es","value":"vipw en el paquete util-linux anteriores a 2.10 permite que /etc/shawow sea legible por todos los usuarios en algunos casos, lo que haría facil a usuarios locales realizar ataques de fuerza bruta para adivinar contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.10s:*:*:*:*:*:*:*","matchCriteriaId":"861DAF15-48B3-42C0-B747-76967AE1918D"},{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:2.11d:*:*:*:*:*:*:*","matchCriteriaId":"4276FFC9-0B2E-4235-9ACD-0CE2FB81CF5E"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2001-095.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-132.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3036","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6851","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-095.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-132.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1176","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"0219DD2D-A37D-4425-9436-4F3DA1B7F63D"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"7D2582AE-B67A-45DF-B798-8A0426613BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"B9754CCE-CEC5-4359-9C62-133885817DEF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0209.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.checkpoint.com/techsupport/alerts/format_strings.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/1901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3021","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6849","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.checkpoint.com/techsupport/alerts/format_strings.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/1901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1177","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samsung:ml-85g_gdi_printer_driver:*:*:*:*:*:*:*:*","matchCriteriaId":"378F5716-7205-4671-854C-093A324759C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samsung:ml-85p_printer_driver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E5749CFA-0886-48AE-BB32-DCFE5E80B488"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0284.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3008","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6845","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0284.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1178","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"23FF2D1C-D328-49BE-87CF-938FB533180B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0234.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6853","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1179","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"23FF2D1C-D328-49BE-87CF-938FB533180B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/197498","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/197498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1180","sourceIdentifier":"cve@mitre.org","published":"2001-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:42.signal.v1.1.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-111.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/943633","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1897","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3007","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6829","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:42.signal.v1.1.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-111.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/943633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/1897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1181","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0013.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-115.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6861","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5479","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-115.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1182","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0014.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5657","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1183","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ez:*:*:*:*:*:*:*","matchCriteriaId":"CF9F1E38-3482-4EAC-8654-EBC004B9344B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/PPTP-vulnerability-pub.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/656315","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/802","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3022","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6835","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/PPTP-vulnerability-pub.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/656315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1184","sourceIdentifier":"cve@mitre.org","published":"2001-12-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denicomp:winsock_rshd_nt:2.20:*:*:*:*:*:*:*","matchCriteriaId":"230C0F5A-0E19-4E42-B091-37E03A6BC2D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:denicomp:winsock_rshd_nt:2.21:*:*:*:*:*:*:*","matchCriteriaId":"A8A0F8CA-98F9-4796-A8AF-1CA5FB229166"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/245405","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.denicomp.com/rshdnt.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7694.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/244580","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3659","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/245405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.denicomp.com/rshdnt.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7694.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/244580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1185","sourceIdentifier":"cve@mitre.org","published":"2001-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges."},{"lang":"es","value":"Algunas operaciones AIO en FreeBSD 4.4 podrían ser retrasadas hasta la llamada a execve, lo cual, podría permitir a usuarios locales la sobreescritura en memorioa de nuevos procesos y la obtención de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7693.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/244583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3661","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7693.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/244583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1186","sourceIdentifier":"cve@mitre.org","published":"2001-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/244931","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/245100","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7691.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/244892","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3667","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/244931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/245100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7691.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/244892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1187","sourceIdentifier":"cve@mitre.org","published":"2001-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter."},{"lang":"es","value":"csvform.pl 0.1 permite a atacantes remotos la ejecución de comandos arbitrarios mediante el uso de metacaracteres en el fichero dado como parámetro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutasem_abudahab:csvform:0.1:*:*:*:*:*:*:*","matchCriteriaId":"C71A42C6-FF30-4D2C-9E4B-149E691B91A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutasem_abudahab:csvform_plus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"441DA5CA-F1FE-43F6-A347-DE22BB493FAA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/244908","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7692.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3668","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/244908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7692.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1188","sourceIdentifier":"cve@mitre.org","published":"2001-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields."},{"lang":"es","value":"mailto.exe en Brian Dorricott MAILTO 1.0.9 y versiones anteriores permite a atacantes remotos el envío de correos electrónicos de SPAM mediante servidores remotos, mediante la modificación de los campos del formulario sendto, email, server, subject, y resulturl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_dorricott:mailto:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EAC3836D-DDB4-440E-A1A2-DDB79F404F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_dorricott:mailto:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1ABC9709-4ADC-4699-8386-59BBB9514A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:brian_dorricott:mailto:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"42DBAE85-F7C3-44C8-8810-C8CDD14D8776"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/244909","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3669","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/244909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1189","sourceIdentifier":"cve@mitre.org","published":"2001-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script."},{"lang":"es","value":"IBM Websphere Application Server 3.5.3 y versiones anteriores almacenan una contraseña en formato textual en el fichero sas.server.props, lo que permite a usuarios locales la obtención de dicha contraseña mediante una rutina JSP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"85D0DA05-D76A-4623-B7EC-07A9D06E6E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FC25AE4-76D2-4FE6-8B33-7069322EBC5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A9595522-9627-467A-ACED-CCE6E07EB3EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C71B9C1D-0D89-4CEC-BF25-D4BF522E1697"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D85BD5A6-07AD-4C45-902C-BE1B25E4D924"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C237A08A-A789-4160-AD83-807D2DE6A2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"06D2CEBB-0CEB-4BD2-B3E7-657D26770597"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EEFFBEBF-C823-4A9E-B822-FC67A0209FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3101D0ED-9273-4403-A577-1A9F7DF396BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4DE2470B-C71D-4F86-A068-E6FB8ADB0329"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7698.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3682","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7698.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1190","sourceIdentifier":"cve@mitre.org","published":"2001-12-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7706.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-091.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3683","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7706.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-091.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1191","sourceIdentifier":"cve@mitre.org","published":"2001-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e."},{"lang":"es","value":"WebSeal en IBM Tivoli SecureWay Policy Director 3.8 permite a atacantes remotos causar la denegación de servicios (caida) mediante una URL que finalice con .."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_secureway_policy_director:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A8A0D65D-4DF7-4A95-81A9-8B97AA44A2D8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/245283","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3685","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1192","sourceIdentifier":"cve@mitre.org","published":"2001-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client."},{"lang":"es","value":"El cliente Citrix Independent Computing Architecture (ICA) para Windows 6.1 permite a sitios web remotos con intenciones maliciosas, la ejecución de código arbitrario mediante un fichero .ICA, que es descargado y automáticamente ejecutado por el cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:ica_client:6.1:*:*:*:*:*:*:*","matchCriteriaId":"56CD6D12-F4EE-4985-B142-41CD300193E9"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/245342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1193","sourceIdentifier":"cve@mitre.org","published":"2001-12-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command."},{"lang":"es","value":"Una vulnerabilidad de atravesamiento de directorios en EFTP 2.0.8.346 permite a usuarios locales la lectura de directorios mediante un  ... (punto punto modificado) en en comando CWD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khamil_landross_and_zack_jones:eftp:2.0.8.346:*:*:*:*:*:*:*","matchCriteriaId":"A79FBB59-BDCB-4990-AE80-B7B3C0925C8F"}]}]}],"references":[{"url":"http://www.eftp.org/releasehistory.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/413875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/2003","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3691","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7699","source":"cve@mitre.org"},{"url":"http://www.eftp.org/releasehistory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/413875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/2003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/245393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1194","sourceIdentifier":"cve@mitre.org","published":"2001-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly."},{"lang":"es","value":"Zyxel Prestige 681 y 1600 SDSL Routers permite a atacantes remotos causar una Denegación de Servicio (DoS) mediante la malformación de paquetes con:1: una longitud de IP menor que el tamaño real de los paquetes, 2: paquetes fragmentados cuyo tamaño excede los 64 kilobytes después haber sido reensamblados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_1600:*:*:*:*:*:*:*:*","matchCriteriaId":"97BCA6B1-0BD5-4211-ADAB-5DD40A2DC302"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige_681:*:*:*:*:*:*:*:*","matchCriteriaId":"DB416117-3C35-4B3F-A366-CDE49A5BC579"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0140.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0190.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3695","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7704","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1195","sourceIdentifier":"cve@mitre.org","published":"2001-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:enhancement_pack:*:*:*:*:*","matchCriteriaId":"E7F809F7-C72F-4869-BE95-EE8BF5F0E111"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"}]}]}],"references":[{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10067329.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7701.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245871","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3697","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10067329.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7701.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1196","sourceIdentifier":"cve@mitre.org","published":"2001-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument."},{"lang":"es","value":"Una vulnerabilidad de atravesamiento de directorios en edit_action.cgi de Webmin Directory 0.91 permite a atacantes remotos, la obtención de privilegios mediante el uso de '..' (punto punto) en el argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0B0813F3-1886-481E-8822-4BD199C4934F"}]}]}],"references":[{"url":"http://marc.info/?l=webmin-l&m=100865390306103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7711.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3698","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=webmin-l&m=100865390306103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7711.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1197","sourceIdentifier":"cve@mitre.org","published":"2001-12-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file."},{"lang":"es","value":"klprfax_filter en KDE2 KDEUtils permite a usuarios locales la sobreescritura de ficheros mediante un ataque de enlaces simbólicos (symlink attack) en el fichero temporal klprfax.filter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kdeutils:2.2:*:*:*:*:*:*:*","matchCriteriaId":"36D7C3AD-02EA-4F56-AD16-48C147319E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:kdeutils:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7EF2C776-DE8F-4368-8667-F532C67BAEF6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100837486611350&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245500","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3694","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7700","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100837486611350&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/245500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1198","sourceIdentifier":"cve@mitre.org","published":"2001-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option."},{"lang":"es","value":"RLPDaemon en HP-UX 10.20 y 11.0 permite a usuarios locales la sobreescritura de ficheros arbitrarios y la obtención de privilegios, especificando el fichero objeto en la opción '-L'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7729.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245690","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3701","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5763","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7729.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/245690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1199","sourceIdentifier":"cve@mitre.org","published":"2001-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en agora.cgi para las versiones de la 3.0a a la 4.0g de Agora, cuando el modo de depuración esta activado, permite a atacantes remotos la ejecución de Javascript en otros clientes mediante el uso del parámetro 'cart_id'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2:*:*:*:*:*:*:*","matchCriteriaId":"A7808DDA-412A-4798-B937-8FBA18A02CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2a:*:*:*:*:*:*:*","matchCriteriaId":"EA2735C8-D031-4820-A07F-EEF0DA42C88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2b:*:*:*:*:*:*:*","matchCriteriaId":"AF52B479-C94E-4EFB-86E2-D5F5EF72066E"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B2145D6-0650-431A-9E1F-851619E5BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2d:*:*:*:*:*:*:*","matchCriteriaId":"DD5925D7-F12E-4C04-A6F0-070D1BFDE13F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2e:*:*:*:*:*:*:*","matchCriteriaId":"F66BBAFC-CB62-481C-AAD9-AFBFC1570738"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2f:*:*:*:*:*:*:*","matchCriteriaId":"7CBE501A-DB0F-4FA0-80D9-45E0E3FFAB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"45F44DBA-A215-4A4B-9AC3-358AB61A1BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2h:*:*:*:*:*:*:*","matchCriteriaId":"599059EA-DA87-4B87-AE22-90628967A2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2i:*:*:*:*:*:*:*","matchCriteriaId":"802FE920-82B3-4D44-A449-736E009F53B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2j:*:*:*:*:*:*:*","matchCriteriaId":"62BAC6C3-923F-4869-AA2E-2E5BC8F3C568"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2ja:*:*:*:*:*:*:*","matchCriteriaId":"67275AFF-A988-447B-A15E-B725173BCE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2k:*:*:*:*:*:*:*","matchCriteriaId":"39F34030-D87B-491A-993A-E227ED99EF0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2l:*:*:*:*:*:*:*","matchCriteriaId":"3A6F3D9C-CF75-4E7B-A34D-5D515543E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2m:*:*:*:*:*:*:*","matchCriteriaId":"C6076E9F-CBBD-4AAC-94D9-AAB9B5F7D747"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2n:*:*:*:*:*:*:*","matchCriteriaId":"9641B186-4795-4A01-9A2E-0B6EAFBAA847"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2p:*:*:*:*:*:*:*","matchCriteriaId":"B43B8E13-15A8-4333-997B-A65D1F95120D"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2q:*:*:*:*:*:*:*","matchCriteriaId":"01CD9379-81D4-40E5-8712-C3ECC547BCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2r:*:*:*:*:*:*:*","matchCriteriaId":"3C01009C-8A0F-4145-AFCC-266E9AC9F38F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3a:*:*:*:*:*:*:*","matchCriteriaId":"7D182707-0550-4730-BCC6-8E73726ACCA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3b:*:*:*:*:*:*:*","matchCriteriaId":"131B3AC9-E1BE-474F-BF5A-EE3A2F3925DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3c:*:*:*:*:*:*:*","matchCriteriaId":"B64A8A45-C79E-4B40-A9E0-DBE59620B98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3d:*:*:*:*:*:*:*","matchCriteriaId":"C75EC15B-B1FB-4D25-8281-791628336B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3e:*:*:*:*:*:*:*","matchCriteriaId":"660D3973-C72E-419F-B258-099AFE7D17F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3f:*:*:*:*:*:*:*","matchCriteriaId":"52255955-5C2F-41CC-B1F6-9B14AE1FF08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3i:*:*:*:*:*:*:*","matchCriteriaId":"91E45149-B2BB-444F-ABF4-6FC8FF7DED13"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3j:*:*:*:*:*:*:*","matchCriteriaId":"CF7E4671-A0C9-449A-9CF6-9F5E5485DAC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CA62D301-78C5-4F44-9A54-E7BD860121DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0a:*:*:*:*:*:*:*","matchCriteriaId":"7BEF1EB8-7341-48AB-A220-6D1760B40A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"B7527F9F-EB74-40B3-82D0-952910C29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0c:*:*:*:*:*:*:*","matchCriteriaId":"3F67E952-4F8F-4C67-94B9-63097BF7B33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"D5308E74-F9CB-44D3-B89D-6D27266CD552"}]}]}],"references":[{"url":"http://www.agoracgi.com/security.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/7708.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/698","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/246044","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3702","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.agoracgi.com/security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/7708.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/246044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1200","sourceIdentifier":"cve@mitre.org","published":"2001-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys."},{"lang":"es","value":"Microsoft Windows XP permite a usuarios locales saltarse el bloqueo de pantalla y ejecutar ciertos programas asociados a 'Teclas Rápidas' (Hot Keys)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7713.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7713.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1201","sourceIdentifier":"cve@mitre.org","published":"2001-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file."},{"lang":"es","value":"Desbordamiento de búfer en wmcube-gdk de WMCube/GDK 0.98 permite a usuarios locales la ejecución de código arbitrario mediante lineas demasiado largas en su fichero de descrpción de objetos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:timecop:wmcube_gdk:0.98:*:*:*:*:*:*:*","matchCriteriaId":"DF228592-D4FC-469E-80C7-9F6B1CF0C88B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100863301405266&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/246273","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7720.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ne.jp/asahi/linux/timecop/software/wmcube-gdk-0.98p2.tar.gz","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3706","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100863301405266&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/246273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7720.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ne.jp/asahi/linux/timecop/software/wmcube-gdk-0.98p2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1202","sourceIdentifier":"cve@mitre.org","published":"2001-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a \"403 Forbidden\" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error."},{"lang":"es","value":"Vulnerabildad de secuencias de comandos en sitios cruzados (cross-site scripting) en DeleGate 7.7.0 y 7.7.1 no procesa las secuencias de comandos en una página de error '403 Forbidden', lo que permite a atacantes remotos ejecutar Javascript arbitrario en otros clientes mediante una URL que genera un error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9180C95-FF6F-4A0C-9DE0-DFF6D8387698"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"68FA1404-9FA2-4379-96BC-6D7970C0EAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*","matchCriteriaId":"EABEE7AB-7C45-473E-9873-0423F2249F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A1F66F57-6AEB-4E3C-B148-BC7D11E1EBEC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100956050432351&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7745.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3749","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100956050432351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7745.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1203","sourceIdentifier":"cve@mitre.org","published":"2001-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en gpm-root en gpm 1.17.8 a 1.17.18 permite a usuarios locales obtener privilegios de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:alessandro_rubini:gpm:1.17.8:*:*:*:*:*:*:*","matchCriteriaId":"30232D03-7FCB-4130-83C5-FD9564DA20D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:alessandro_rubini:gpm:1.17.18:*:*:*:*:*:*:*","matchCriteriaId":"EFB68FC1-7DE0-43FA-A70D-39DF5450C182"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-095","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3750","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7748","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1204","sourceIdentifier":"cve@mitre.org","published":"2001-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en phprocketaddin en 'Total PC Solutions PHP Rocket Add-in' para FrontPage 1.0 permite a atacantes remotos leer ficheros arbitrarios mediante .. (punto punto) en el parámetro página."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:total_pc_solutions:php_rocket_add-in:*:*:*:*:*:*:*:*","matchCriteriaId":"041EA9A8-B462-4B82-93E9-14C5A2A3336D"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/247559","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/247559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1205","sourceIdentifier":"cve@mitre.org","published":"2001-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en lastlines.cgi para Last Lines 2.0 permite a atacantes remotos la lectura arbitraria de ficheros mediante un ataque '..' (punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matrixs_cgi_vault:last_lines:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B70E430C-6E94-4C42-9FD5-D93461E1096F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100975978324723&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100975978324723&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1206","sourceIdentifier":"cve@mitre.org","published":"2001-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable."},{"lang":"es","value":"Matrix CGI vault Last Lines 2.0 permite a atacantes remotos ejecutar código arbitrario por fallo en la validación de metacarácteres de shell"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matrixs_cgi_vault:last_lines:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B70E430C-6E94-4C42-9FD5-D93461E1096F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100975978324723&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3755","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=100975978324723&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1207","sourceIdentifier":"cve@mitre.org","published":"2001-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA."},{"lang":"es","value":"Desbordamiento de buffer en DayDream BBS 2.9 a 2.13 posiblemente permite a atacantes remotos ejecutar código arbitrario mediante los códigos de control ~#MC~#TF~#RA"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.9:*:*:*:*:*:*:*","matchCriteriaId":"0B040C2C-F651-49D7-9076-57FED4CC67BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.10:*:*:*:*:*:*:*","matchCriteriaId":"4CD66B4B-F525-41F6-9DFE-7091D5B6C35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.12:*:*:*:*:*:*:*","matchCriteriaId":"03C58D69-B83E-48D8-81A8-0BCEB55CCADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.13:*:*:*:*:*:*:*","matchCriteriaId":"9EEF8749-70FC-46C7-9029-8C51510EFBC2"}]}]}],"references":[{"url":"http://www.cs.uku.fi/~hlyytine/daydream-2.11/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7755.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247708","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cs.uku.fi/~hlyytine/daydream-2.11/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7755.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1208","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code."},{"lang":"es","value":"Vulnerabilidad en el formateado de cadenas en DayDream BBS permite a atacantes remotos la ejecución de código arbitrario mediante la especificación del formato de cadena en un fichero que contiene los caracteres ~\\\\"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.9:*:*:*:*:*:*:*","matchCriteriaId":"0B040C2C-F651-49D7-9076-57FED4CC67BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.10:*:*:*:*:*:*:*","matchCriteriaId":"4CD66B4B-F525-41F6-9DFE-7091D5B6C35B"},{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.12:*:*:*:*:*:*:*","matchCriteriaId":"03C58D69-B83E-48D8-81A8-0BCEB55CCADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:daydream:daydream_bbs:2.13:*:*:*:*:*:*:*","matchCriteriaId":"9EEF8749-70FC-46C7-9029-8C51510EFBC2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100977623710528&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100977623710528&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1209","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en zml.cgi permite a atacantes remotos la lectura arbitraria de ficheros mediante un .. (punto punto) en el fichero parámetro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abe_timmerman:zml.cgi:0.0:*:*:*:*:*:*:*","matchCriteriaId":"C8C95B0B-B90F-4F49-9BBA-B0524E6CB48F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0086.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2001/Dec/0306.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7751.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.jero.cc/zml/zml.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3759","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2001/Dec/0306.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7751.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.jero.cc/zml/zml.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1210","sourceIdentifier":"cve@mitre.org","published":"2001-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings."},{"lang":"es","value":"Los routers Cisco serie ubr900 conformes al estándar 'Data-over-Cable Service Interface Specifications (DOCSIS) deben entregarse sin restricciones de acceso SNMP, lo que puede permitir a atacantes remotos leer y escribir información en la MIB usando cadenas de comunidad arbitrarias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ubr920:*:*:*:*:*:*:*:*","matchCriteriaId":"CA727862-77B9-4069-85F9-6152E0E9FB88"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ubr924:*:*:*:*:*:*:*:*","matchCriteriaId":"FF89B688-461A-41EE-A7C2-21A6D927B169"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ubr925:*:*:*:*:*:*:*:*","matchCriteriaId":"1227BD2F-D5E1-46EA-871D-242091C7598F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7806.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3758","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7806.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1211","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain."},{"lang":"es","value":"Ipswitch IMail 7.0.4 y versiones anteriores permiten a atacantes con privilegios de administrador, leer y modificar los alias de los usuarios y la información de las listas de correo de otros dominios albergados en el mismo servidor mediante:(1) aliasadmin o(2) programas CGI listadm1, los cuales no verifica adecuadamente que un administrador realmente lo es en ese dominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5700938-EE34-4A16-BE98-74EAA4A48249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF543E9-F893-4086-BD97-ECB43EEF26BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3818F47-0A00-4984-857D-DBF87DDB71B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://support.ipswitch.com/kb/IM-20011219-DM01.htm","source":"cve@mitre.org"},{"url":"http://support.ipswitch.com/kb/IM-20020301-DM02.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7752.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247786","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.ipswitch.com/kb/IM-20011219-DM01.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ipswitch.com/kb/IM-20020301-DM02.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7752.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1212","sourceIdentifier":"cve@mitre.org","published":"2001-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en catgy.cgi para Aktivate 1.03 permite a atacantes remotos la ejecución de código Javascript arbitrario mediante el parámetro 'desc'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aktivate:aktivate:1.03:*:*:*:*:*:*:*","matchCriteriaId":"4F4904B5-BECC-4488-9E2B-5800F0380784"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7717.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3714","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7717.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1213","sourceIdentifier":"cve@mitre.org","published":"2001-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder."},{"lang":"es","value":"La configuración por defecto de  DataWizard FtpXQ 2.0 y 2.1 incluye un usuario y una contraseña por defecto, que permite a atacantes remotos, la lectura y la escritura de ficheros arbitrarios en el directorio raíz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datawizard:ftpxq:2.0:*:*:*:*:*:*:*","matchCriteriaId":"096568E9-175F-43B2-B4EF-4F64EEB5BE61"},{"vulnerable":true,"criteria":"cpe:2.3:a:datawizard:ftpxq:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6D940C32-21D8-46F5-8D8E-7C20C8CA5DFF"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7715.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3716","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7715.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1214","sourceIdentifier":"cve@mitre.org","published":"2001-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters."},{"lang":"es","value":"manual.php en Marcus S. Xenakis Unix Manual 1.0 permite a atacantes remotos la ejecución de código arbitrario mediante una URL que contiene metacaracteres de shell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcus_s._xenakis:unix_manual:1.0:*:*:*:*:*:*:*","matchCriteriaId":"53F640F9-C3CA-43D3-9DBF-B1C47C993EE5"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7719.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/672419","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/247332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3718","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7719.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/672419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/247332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1215","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in PFinger 0.7.5 through 0.7.7 allows remote attackers to execute arbitrary code via format string specifiers in a .plan file."},{"lang":"es","value":"Vulnerabilidad de cadena formateada en PFinger 0.7.5 hasta 0.7.7 permite a atacantes remotos ejecutar código arbitrario a través de especificadores de cadena formateada en un fichero .plan."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_baumer:pfinger:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"5DE47BEB-B7F7-4FAD-AD0F-0FB6DFB03AC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_baumer:pfinger:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"8260B506-01F9-4DFB-B64D-7663F08F514A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_baumer:pfinger:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"E4891AC9-3471-4081-89F1-5D856BA15F49"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7742.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246656","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3725","source":"cve@mitre.org"},{"url":"http://www.xelia.ch/unix/pfinger/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7742.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xelia.ch/unix/pfinger/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1216","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page."},{"lang":"es","value":"Desbordamiento de buffer en el módulo de Apache PL/SQL en en Oracle 9i Application Server permite a atacantes remotos ejecutar código arbitrario mediante una petición larga a una página de ayuda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/modplsql.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7727.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/500203","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3726","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/modplsql.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7727.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/500203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1217","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences."},{"lang":"es","value":"Vulneravilidad de atravesamientod de directorios en el módulo de Apache PL/SQL en Oracle 9i Application Server permite a atacantes remotos obtener información sensible mediante una URL dóblemente codificada con secuencias .. (punto punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/modplsql.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7728.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/758483","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246663","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3727","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/modplsql.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7728.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/758483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1218","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window."},{"lang":"es","value":"MS Internet Explorer para Unix 5.0SP1 permite a usuarios locales forzar una denegración de servicio (crash) tanto en CDE como en servidor X de Solaris 2.6 a través de maximizar la ventana o mostrar rápidamente caracteres chinos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*","matchCriteriaId":"C26125C2-2476-43E8-8878-8C1A5A8B244F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/246611","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3729","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/246611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1219","sourceIdentifier":"cve@mitre.org","published":"2001-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location."},{"lang":"es","value":"MS Internet Explorer 6.0 y anteriores permite a webmasters maliciosos provocar una denegación de servicio por medio de JavaScript que continuamente refresca la ventana con self.location."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/246649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3730","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/246649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1220","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dwl-1000ap:3.2.28_483:*:*:*:*:*:*:*","matchCriteriaId":"B6ABFB25-143C-4A6D-A896-D6E8ADE9E3EF"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7733.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7733.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1221","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information."},{"lang":"es","value":"El punto de acceso a redes LAN sin cables D-Link DWL-1000AP Firmware 3.2.28 #483 usa por defecto la cadena \"public\" como comunidad SNMP, lo que permite a atacantes remotos obtener acceso a información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dwl-1000ap:3.2.28_483:*:*:*:*:*:*:*","matchCriteriaId":"B6ABFB25-143C-4A6D-A896-D6E8ADE9E3EF"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/246849","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3736","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1222","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain."},{"lang":"es","value":"Plesk Server Administrator (PSA) 1.0 permite a atacantes remotos obtener código fuente PHP mediante una petición HTTP conteniendo la IP del objetivo y un nombre de cuenta válido del dominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plesk:plesk_server_administrator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4415CF53-2391-4050-B599-A1F19ECC119A"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7735.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246861","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3737","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7735.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1223","sourceIdentifier":"cve@mitre.org","published":"2001-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server."},{"lang":"es","value":"El servidor de administración web de ELSA Lancom 1100 Office no requiere autenticación, lo que permite a atacantes remotos ganar privilegios administrativos conectándose al servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elsa:lancom_1100_office:0.0:*:*:*:*:*:*:*","matchCriteriaId":"DCF55E2A-6E39-43D3-AEAF-FC154746A334"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7739.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247274","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7739.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1224","sourceIdentifier":"cve@mitre.org","published":"2001-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack."},{"lang":"es","value":"get_input en adrotate.pm para Les VanBrunt AdRotate Pro 2.0 permite a atacantes remotos modificar la base de datos y posiblemente ejecutar comandos arbitrarios mediante un ataque de inyección de código SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:les_vanbrunt:adrotate_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"736E708B-AA50-4B9E-9C14-DA87DE5C779D"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7736.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3739","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7736.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/246994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1225","sourceIdentifier":"cve@mitre.org","published":"2001-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried."},{"lang":"es","value":"Hughes Technology SQL 2.0.10 a 2.0.12 permite a usuarios locales causar una denegación de servicio creando un array muy grande en una tabla, lo que causa que miniSQL se caiga (crash) cuando la tabla es consultada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"89EE371A-65B2-438B-9788-E4513E0D3461"},{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"4F2D54A4-BFAD-4C4E-B356-58FB6B850CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hughes:msql:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"7799DBBA-E542-434C-90F3-25C870747BDF"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7746.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247222","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7746.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1226","sourceIdentifier":"cve@mitre.org","published":"2001-12-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AdCycle 1.17 and earlier allow remote attackers to modify SQL queries, which are not properly sanitized before being passed to the MySQL database."},{"lang":"es","value":"AdCycle 1.17 y anteriores permite a atacantes remotos modificar consultas SQL, que no son adecuamente limpiadas antes de ser pasadas a la base de datos MySQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.12:*:*:*:*:*:*:*","matchCriteriaId":"51DED5F8-C6B7-4E83-99D1-68218AE93801"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D2E40848-FA86-4A13-BA3C-9E9F73918F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.14:*:*:*:*:*:*:*","matchCriteriaId":"DF746F4C-CD78-4900-9734-C0D44A3241BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.15:*:*:*:*:*:*:*","matchCriteriaId":"0760FC61-AF27-432E-9C85-84C81FED6B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.16:*:*:*:*:*:*:*","matchCriteriaId":"9A4CF293-B7EA-419B-BDB4-84BC4B7F5B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:adcycle:adcycle:1.17:*:*:*:*:*:*:*","matchCriteriaId":"C6F99172-E971-4873-BD2D-7A471F3D2E46"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7762.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247126","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3741","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7762.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1227","sourceIdentifier":"cve@mitre.org","published":"2001-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"15B80335-5F59-4530-A241-437367369BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53427D40-495B-4F37-95A5-6D069186CBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1DB2FC39-A95D-414E-A67E-66AF79A12CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"925BC42D-02B5-4B6F-ADC6-156407868276"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-072.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-115.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3425","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7271","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1228","sourceIdentifier":"cve@mitre.org","published":"2001-11-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0D50385A-1D5D-4517-B5FA-1BB60BA4C484"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:*","matchCriteriaId":"752BDD31-53A2-4246-8E95-77694548DB2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gzip:1.3:*:*:*:*:*:*:*","matchCriteriaId":"BCFD9CEE-AAB0-443E-A5C7-6805AFCCF6EB"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-002.txt.asc","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/247717","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7882.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3712","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-002.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/247717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7882.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1229","sourceIdentifier":"cve@mitre.org","published":"2001-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.9","matchCriteriaId":"91954D16-75EB-43E1-8F35-854C8B539C31"},{"vulnerable":true,"criteria":"cpe:2.3:a:libshout:libshout:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"C759592B-82BF-4496-B3FB-2A26FA3325FB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000387","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98438880622976&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.xiph.org/archives/icecast/0074.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98438880622976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xiph.org/archives/icecast/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1230","sourceIdentifier":"cve@mitre.org","published":"2001-03-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.10","matchCriteriaId":"52D067C1-0E3E-42AB-8FC7-71A35994CE31"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98455723123298&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-089","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98455723123298&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-063.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1231","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the \"Padlock\" fix."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"}]}]}],"references":[{"url":"http://support.novell.com/padlock/details.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/204672","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3189","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998","source":"cve@mitre.org"},{"url":"http://support.novell.com/padlock/details.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/204672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1232","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase \"get\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/204875","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3188","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6988","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/204875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1233","sourceIdentifier":"cve@mitre.org","published":"2001-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise_webaccess:5.5:*:*:*:*:*:*:*","matchCriteriaId":"6383EA13-A904-4550-B257-2D48D69C681B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/204875","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6987","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/204875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1234","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"28B41A2A-2AAD-4A5F-AEC6-1EF9EC92BDC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"70BCB01B-6F21-4DB0-8BFF-7DC9453E6B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99ADD772-9215-4C07-A3AD-CED6F605A426"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://prdownloads.sourceforge.net/gallery/gallery-1.2.5.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1967","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3397","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://prdownloads.sourceforge.net/gallery/gallery-1.2.5.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1235","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:derek_leung:pslash:0.70:*:*:*:*:*:*:*","matchCriteriaId":"BD4193E3-DAF0-4978-AE41-C8F0D145D429"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1236","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian_bunka:myphppagetool:0.4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3FDE68ED-BF51-4984-BF75-97A2FE998A31"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1237","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peaceworks_computer_consulting:phormation:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.1","matchCriteriaId":"E2BD9E7F-3F2A-4C20-A0A7-FF3288530BA3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.peaceworks.ca/phormation/phormation-0.9.2.tar.gz","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3393","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.peaceworks.ca/phormation/phormation-0.9.2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1238","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/197195","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3033","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6919","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/197195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1239","sourceIdentifier":"cve@mitre.org","published":"2001-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerNet IX allows remote attackers to cause a denial of service via a port scan."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:connect_inc.:powernet_ix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0E9122A1-5A6A-4866-A903-5E5C945086E2"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/2992","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1240","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79A6E38E-9BC6-4CD7-ABC6-754C9DB07DB2"}]}]}],"references":[{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1493.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1493.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1241","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with \"#!\"  and the desired program name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8EFF837-1B59-450D-B0E9-594093901168"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.1:*:*:*:*:*:*:*","matchCriteriaId":"05272766-A2E1-426B-AE77-3AF64AC7DAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.2:*:*:*:*:*:*:*","matchCriteriaId":"84EBDD40-DA8F-460B-A996-8019C0F719EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0B61DC67-7988-44C9-A9D4-9A3AEB1CCAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CAC08CF8-2899-40EF-B404-7B2A138E0755"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0F69BABC-DC25-45E6-B50E-27264C95FD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.6:*:*:*:*:*:*:*","matchCriteriaId":"993399AD-0A50-4DE3-8572-8805D9AEE386"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AF7B2908-19AA-49A8-A281-C470DCF159DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"ACC8093D-5A84-4003-8A74-2A12A0A761D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.7:*:*:*:*:*:*:*","matchCriteriaId":"03E2D80A-6448-40EC-B33E-1606BB27C319"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.8:*:*:*:*:*:*:*","matchCriteriaId":"17EDF72D-3553-45DC-8E3F-C3B7D2949DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.9:*:*:*:*:*:*:*","matchCriteriaId":"DFFDFDCC-04B6-4DC9-B2FB-1E33FBED2444"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6847.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.midwinter.com/~koreth/uncgi-changes.html","source":"cve@mitre.org"},{"url":"http://www.midwinter.com/~koreth/uncgi.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3057","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6847.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.midwinter.com/~koreth/uncgi-changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.midwinter.com/~koreth/uncgi.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1242","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8EFF837-1B59-450D-B0E9-594093901168"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.1:*:*:*:*:*:*:*","matchCriteriaId":"05272766-A2E1-426B-AE77-3AF64AC7DAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.2:*:*:*:*:*:*:*","matchCriteriaId":"84EBDD40-DA8F-460B-A996-8019C0F719EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0B61DC67-7988-44C9-A9D4-9A3AEB1CCAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CAC08CF8-2899-40EF-B404-7B2A138E0755"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0F69BABC-DC25-45E6-B50E-27264C95FD23"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.6:*:*:*:*:*:*:*","matchCriteriaId":"993399AD-0A50-4DE3-8572-8805D9AEE386"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"AF7B2908-19AA-49A8-A281-C470DCF159DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"ACC8093D-5A84-4003-8A74-2A12A0A761D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.7:*:*:*:*:*:*:*","matchCriteriaId":"03E2D80A-6448-40EC-B33E-1606BB27C319"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.8:*:*:*:*:*:*:*","matchCriteriaId":"17EDF72D-3553-45DC-8E3F-C3B7D2949DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_grimm:un-cgi:1.9:*:*:*:*:*:*:*","matchCriteriaId":"DFFDFDCC-04B6-4DC9-B2FB-1E33FBED2444"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6846.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.midwinter.com/~koreth/uncgi-changes.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3056","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6846.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.midwinter.com/~koreth/uncgi-changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1243","sourceIdentifier":"cve@mitre.org","published":"2001-07-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6800.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194919","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2973","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6800.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/194919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1244","sourceIdentifier":"cve@mitre.org","published":"2001-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB008E3-9A00-4D28-8826-A9FCC9F65314"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*","matchCriteriaId":"1D462D6F-EB68-4E31-87FD-D918F5DEF3FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:workstation:*:*:*:*:*","matchCriteriaId":"FE4E91DD-FA6B-4735-A07C-0A88BADCAFCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5BDCBCB8-DAA3-465F-ADDE-9143B8251989"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"B86E0671-ED68-4549-B3AC-FD8BD79B0860"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"BB76E7EC-C396-4537-9065-4E815DA7097C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4CD026E2-B073-40A6-AD4A-8C76B9169B01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"DBFB3E49-3FB5-4947-856D-727CBFFBA543"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"B9236480-6450-42E1-B1FF-F336488A683A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*","matchCriteriaId":"14F55877-A759-4C8A-84D5-70508E449799"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/195457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2997","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6824","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1245","sourceIdentifier":"cve@mitre.org","published":"2001-07-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:5.0:*:linux:*:*:*:*:*","matchCriteriaId":"F255D9FB-2C92-4B36-A19C-04A1C684991C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/196980","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6838.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3012","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/196980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6838.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1246","sourceIdentifier":"cve@mitre.org","published":"2001-06-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.5","versionEndIncluding":"4.1.0","matchCriteriaId":"AF5EFBC9-2F17-44CD-8298-3D0BA0B48F4C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/194425","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/6787.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-102.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-129.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2954","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/194425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/6787.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-129.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/2954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1247","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4pl1:*:*:*:*:*:*:*","matchCriteriaId":"E3A7253D-5C08-4170-9D65-6D460B076942"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/194425","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5440","source":"cve@mitre.org"},{"url":"http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-035.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/194425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1248","sourceIdentifier":"cve@mitre.org","published":"2001-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vwebserver:vwebserver:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"04BE5D27-A0D0-4903-A587-2F7B45951BED"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/194418","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6769.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2975","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/194418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6769.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1249","sourceIdentifier":"cve@mitre.org","published":"2001-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vwebserver:vwebserver:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"04BE5D27-A0D0-4903-A587-2F7B45951BED"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/194418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2978","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/194418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1250","sourceIdentifier":"cve@mitre.org","published":"2001-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vwebserver:vwebserver:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"04BE5D27-A0D0-4903-A587-2F7B45951BED"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/194418","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6771.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2979","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/194418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6771.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1251","sourceIdentifier":"cve@mitre.org","published":"2001-06-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:1.212:*:*:*:*:*:*:*","matchCriteriaId":"CE1E0EBE-710A-493A-98B1-D05B3CFD0007"},{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"82D993A9-83F8-410B-B2E3-00D5207CFD96"},{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:2.03:*:*:*:*:*:*:*","matchCriteriaId":"0011C1E5-B99E-41F7-B0A3-6B577955393E"},{"vulnerable":true,"criteria":"cpe:2.3:a:max_feoktistov:small_http_server:3.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"E09A70DD-511F-4641-BFAF-DB552A75DFB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vwebserver:vwebserver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7FD9F407-1ACD-44D7-94C8-668E1426B05E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/194418","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6771.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2980","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/194418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6771.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1252","sourceIdentifier":"cve@mitre.org","published":"2001-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:keyserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3E384BF4-9F99-4E86-9D4E-8588B47A0E2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:keyserver:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9B32025C-B847-4FAE-9944-B794B87BEFA3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7203.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1955","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4193","source":"cve@mitre.org"},{"url":"http://www.pgp.com/support/product-advisories/keyserver.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3375","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7203.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pgp.com/support/product-advisories/keyserver.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1253","sourceIdentifier":"cve@mitre.org","published":"2001-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:com2001:alexis_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C59FCC8C-B4C4-4EB9-9F80-8E72B77CAF76"},{"vulnerable":true,"criteria":"cpe:2.3:a:com2001:alexis_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E99E5A8E-23FE-474F-AA5A-57FF39D4A61F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/217200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7205.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/217200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7205.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1254","sourceIdentifier":"cve@mitre.org","published":"2001-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:com2001:alexis_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C59FCC8C-B4C4-4EB9-9F80-8E72B77CAF76"},{"vulnerable":true,"criteria":"cpe:2.3:a:com2001:alexis_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E99E5A8E-23FE-474F-AA5A-57FF39D4A61F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/217200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3373","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/217200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1255","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:winmysqladmin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DE178319-7AEA-490F-A648-1BDDB17B8F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*","matchCriteriaId":"48DBBAC9-AA05-409F-82B2-A552A3417E45"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/217848","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7206.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3381","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/217848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7206.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1256","sourceIdentifier":"cve@mitre.org","published":"2001-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-093.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/3354","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/127435","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/188568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2821","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6656","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5628","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-093.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/3354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/127435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/188568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1257","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D11E08A4-79D6-46FE-880F-66E9778C298E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55A3894F-2E3F-49CA-BEE5-759D603F6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3B52D447-8E56-4E04-9650-38D222DA8D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1C455353-0401-4975-89BC-C23D32A684F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-073","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6905.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3082","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6905.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1258","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D11E08A4-79D6-46FE-880F-66E9778C298E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55A3894F-2E3F-49CA-BEE5-759D603F6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3B52D447-8E56-4E04-9650-38D222DA8D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1C455353-0401-4975-89BC-C23D32A684F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-073","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6906.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3083","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6906.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1259","sourceIdentifier":"cve@mitre.org","published":"2001-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:argent_office:*:*:*:*:*:*:*:*","matchCriteriaId":"B3E8E29D-8249-456B-942B-8284A1E23627"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/202344","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6953.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/202344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6953.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1260","sourceIdentifier":"cve@mitre.org","published":"2001-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:argent_office:*:*:*:*:*:*:*:*","matchCriteriaId":"B3E8E29D-8249-456B-942B-8284A1E23627"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/202344","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6954.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/202344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6954.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1261","sourceIdentifier":"cve@mitre.org","published":"2001-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:argent_office:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7A680F9-75E3-40DA-86BA-2D133FC48A3A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/202344","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6956.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/202344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6956.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1262","sourceIdentifier":"cve@mitre.org","published":"2001-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:argent_office:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7A680F9-75E3-40DA-86BA-2D133FC48A3A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/202344","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6955.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/202344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6955.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1263","sourceIdentifier":"cve@mitre.org","published":"2001-06-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:interaccess:4.0_build_5:*:*:*:*:*:*:*","matchCriteriaId":"07E29192-8B49-45F5-879D-05AE6731A3D3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/189327","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2834","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6658","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/189327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1264","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"23EB7024-F73B-459A-9054-84DE34013841"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:4.5:*:*:*:*:*:*:*","matchCriteriaId":"801D6635-807A-4749-915C-7DFEB3C57A5C"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-119.shtml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/420475","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/3459","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6867","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-119.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/420475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/3459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1265","sourceIdentifier":"cve@mitre.org","published":"2001-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:alphaworks_tftp_server:1.21:*:*:*:*:*:*:*","matchCriteriaId":"D46B86F3-9D71-48C9-A839-42EB766E6E89"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/198297","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6864","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1266","sourceIdentifier":"cve@mitre.org","published":"2001-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:doug_neal:dnhttpd:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7660C13D-1BDB-4C41-9CB2-1DE49585DCBD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://dnhttpd.sourceforge.net/changelog.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://dnhttpd.sourceforge.net/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1267","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*","versionEndIncluding":"1.13.19","matchCriteriaId":"8A64172D-7262-45D4-8EA5-9707FAC3ABD7"}]}]}],"references":[{"url":"ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4514","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/196445","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10224.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-096.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-138.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-218.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3024","source":"cve@mitre.org"},{"url":"ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/196445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10224.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-138.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1268","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:info-zip:unzip:*:*:*:*:*:*:*:*","versionEndIncluding":"5.42","matchCriteriaId":"88716483-E970-4A5F-9BDE-0CAD40AC630E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/196445","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1","source":"cve@mitre.org"},{"url":"http://www.info-zip.org/pub/infozip/UnZip.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/196445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info-zip.org/pub/infozip/UnZip.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1269","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:info-zip:unzip:*:*:*:*:*:*:*:*","versionEndIncluding":"5.42","matchCriteriaId":"88716483-E970-4A5F-9BDE-0CAD40AC630E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/196445","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1","source":"cve@mitre.org"},{"url":"http://www.info-zip.org/pub/infozip/UnZip.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/196445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info-zip.org/pub/infozip/UnZip.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1270","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pkware:pkzip:*:*:*:*:*:*:*:*","versionEndIncluding":"4.00","matchCriteriaId":"93559A5D-2B01-44BB-B77C-18DD4561B4A5"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/196445","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.security.nnov.ru/advisories/archdt.asp","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/196445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.security.nnov.ru/advisories/archdt.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1271","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a ..  (dot dot) attack on archived filenames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rarsoft:rar:*:*:*:*:*:*:*:*","versionEndIncluding":"2.02","matchCriteriaId":"4B6AA90C-574D-47F5-B92C-6195DA108815"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/196445","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.security.nnov.ru/advisories/archdt.asp","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/196445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.security.nnov.ru/advisories/archdt.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1272","sourceIdentifier":"cve@mitre.org","published":"2001-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wliang:wmtv:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.5","matchCriteriaId":"196C6051-ABAE-4841-9F65-352132EB832D"}]}]}],"references":[{"url":"http://www.debian.org/security/2001/dsa-092","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7669.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7669.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1273","sourceIdentifier":"cve@mitre.org","published":"2001-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"mxcsr P4\" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:pre14:*:*:*:*:*:*","versionEndIncluding":"2.2.17","matchCriteriaId":"F01389CC-17DD-4C7F-9A67-A7E84F5CD3D5"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-045.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-013.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-045.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1274","sourceIdentifier":"cve@mitre.org","published":"2001-01-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"3.23.31","matchCriteriaId":"855E9D1D-FA02-458F-8207-5ACC3C0A68CB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000375","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98089552030459&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-013","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3","source":"cve@mitre.org"},{"url":"http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-003.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98089552030459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2001/dsa-013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1275","sourceIdentifier":"cve@mitre.org","published":"2001-01-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"3.23.31","matchCriteriaId":"855E9D1D-FA02-458F-8207-5ACC3C0A68CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98089552030459&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98089552030459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1276","sourceIdentifier":"cve@mitre.org","published":"2001-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:itcorp:ispell:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.20","matchCriteriaId":"CAA312B7-FEDC-4BFE-8B34-1A05946A6244"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/6.2/updates/IMNX-2001-62-004-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99317439131174&w=2","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-058.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-074.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://download.immunix.org/ImmunixOS/6.2/updates/IMNX-2001-62-004-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99317439131174&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-058.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1277","sourceIdentifier":"cve@mitre.org","published":"2001-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_schneider:makewhatis:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5i2","matchCriteriaId":"FAA46DAF-F37C-4EC7-B7A6-8353D5D23163"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99227597227747&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-072.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=41805","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99227597227747&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=41805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1278","sourceIdentifier":"cve@mitre.org","published":"2001-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"15B80335-5F59-4530-A241-437367369BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53427D40-495B-4F37-95A5-6D069186CBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1DB2FC39-A95D-414E-A67E-66AF79A12CEB"}]}]}],"references":[{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-115.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3425","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1279","sourceIdentifier":"cve@mitre.org","published":"2001-07-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C3214AA7-1EB2-4EC8-96AA-2A9985A5EB8A"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:48.tcpdump.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000480","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7006.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/797201","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-032.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-089.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3065","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:48.tcpdump.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7006.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/797201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-032.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1280","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3424","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1281","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the \"Change User Information\" web form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3429","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1282","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3426","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1283","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2) printmail.cgi, possibly due to a buffer overflow that may allow execution of arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3427","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1284","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3428","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1285","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3432","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1286","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/261096","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3432","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/261096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1287","sourceIdentifier":"cve@mitre.org","published":"2001-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0083.html","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3431","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/IMail/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1288","sourceIdentifier":"cve@mitre.org","published":"2001-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99640583014377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=99651044701417&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/200118","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/200985","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/201151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3115","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99640583014377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=99651044701417&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/200118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/200985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/201151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1289","sourceIdentifier":"cve@mitre.org","published":"2001-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_3_arena:1.29f:*:*:*:*:*:*:*","matchCriteriaId":"F01D477A-EC3A-4C41-A5EF-209FE700C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_3_arena:1.29g:*:*:*:*:*:*:*","matchCriteriaId":"FE3CFF45-6304-4817-90D6-BC1EEC7ACFF1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0748.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3123","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0748.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1290","sourceIdentifier":"cve@mitre.org","published":"2001-06-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:active_web_suite_technologies:active_classifieds:1.0:*:free:*:*:*:*:*","matchCriteriaId":"D075532C-C528-46A7-BBE5-B80A804059CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0386.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12326","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2942","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6754","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0386.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1291","sourceIdentifier":"cve@mitre.org","published":"2001-07-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:3com:superstack_ii_ps_hub_40_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F49F33A2-9F45-483D-ACB2-1D3458F7E1A6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:3com:superstack_ii_ps_hub_40:-:*:*:*:*:*:*:*","matchCriteriaId":"682AE800-EC04-4A5B-BE9A-46D788654775"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/196957","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3034","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6855","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/196957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1292","sourceIdentifier":"cve@mitre.org","published":"2001-08-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"79D8D4CB-F8D3-4DDC-A1B7-A94B4356F534"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A167B292-3A6A-4C8D-BABD-7ACAD9D7149C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.1:site2:*:*:*:*:*:*","matchCriteriaId":"7D55CE5A-87D6-4D44-9314-C840F00B4EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.1:site3:*:*:*:*:*:*","matchCriteriaId":"32095930-CBE4-490C-A26F-5FA6EEBF62BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.2:beta2:*:*:*:*:*:*","matchCriteriaId":"E72C0D4A-1A9A-4D41-B0A2-6519B5BD53B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.2:beta3:*:*:*:*:*:*","matchCriteriaId":"449D64EE-59A4-491B-8208-45AAEF010C94"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0160.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6973.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0160.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6973.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1293","sourceIdentifier":"cve@mitre.org","published":"2001-09-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cr29223:*:*:*:*:*:*:*:*","matchCriteriaId":"5882C671-F809-4F7E-86CF-9863FC3080FA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0217.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/500027","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3366","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/500027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1294","sourceIdentifier":"cve@mitre.org","published":"2001-08-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avtronics:inetserv:3.0:*:*:*:*:*:*:*","matchCriteriaId":"24C3634B-FD67-441D-A0C9-C274B5DB4409"},{"vulnerable":true,"criteria":"cpe:2.3:a:avtronics:inetserv:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8DA11568-5B64-4632-A9D4-6D53F44172B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avtronics:inetserv:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9639C9CB-7D57-4F51-AC19-B8BFE3A52163"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7022.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0001&L=ntbugtraq&F=P&S=&P=4592","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3224","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7022.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0001&L=ntbugtraq&F=P&S=&P=4592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1295","sourceIdentifier":"cve@mitre.org","published":"2001-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grant_averett:cerberus_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"92A6EFA8-5F22-48AA-8F13-17ACC0987531"}]}]}],"references":[{"url":"http://www.greenepa.net/~averett/cerberus-releasenotes.htm#ReleaseNotes","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7004.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP0M0055W.html","source":"cve@mitre.org"},{"url":"http://www.greenepa.net/~averett/cerberus-releasenotes.htm#ReleaseNotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7004.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP0M0055W.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1296","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_logemann:more.groupware:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"061F26E4-9FA0-4365-98B8-62C985AF0040"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.moregroupware.org/index.php?action=detail&news_id=24","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.moregroupware.org/index.php?action=detail&news_id=24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1297","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:actionpoll:actionpoll:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.1","matchCriteriaId":"8BE5FF82-E758-49AC-BB60-13AEA8410853"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=58331","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1960","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3384","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=58331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/1960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1298","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grant_horwood:webodex:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"45FB8C19-2801-41CC-B66B-FF9C7F7EC962"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3385","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1299","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zorbat:zorbstats:0.8:*:*:*:*:*:*:*","matchCriteriaId":"368C1441-6573-468B-8D37-C198B3F5D768"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"cve@mitre.org"},{"url":"http://www.come.to/zorbat/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-53RJKV","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.come.to/zorbat/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7215.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/847803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-53RJKV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1300","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dynu_systems_inc.:dynu_ftp_server:1.04:*:*:*:*:*:*:*","matchCriteriaId":"7D5D9780-2162-4150-9168-24AD45660623"},{"vulnerable":true,"criteria":"cpe:2.3:a:dynu_systems_inc.:dynu_ftp_server:1.05:*:*:*:*:*:*:*","matchCriteriaId":"513B7581-4420-4A31-B3C0-98DCA3710482"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7045.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5KP0N0A55M.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7045.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5KP0N0A55M.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1301","sourceIdentifier":"cve@mitre.org","published":"2001-08-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*","matchCriteriaId":"9571E866-AB82-4B95-8097-ED0DA038331F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xemacs:xemacs:21.1.10:*:*:*:*:*:*:*","matchCriteriaId":"2AA513F9-7E08-4239-8707-42A0C2DB8F57"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/11210.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/11210.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1302","sourceIdentifier":"cve@mitre.org","published":"2001-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1911","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3063","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6876","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1303","sourceIdentifier":"cve@mitre.org","published":"2001-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"60536AAF-76BC-4773-98FA-5F01E2D231FB"}]}]}],"references":[{"url":"http://www.osvdb.org/588","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/197566","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6857","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/197566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1304","sourceIdentifier":"cve@mitre.org","published":"2001-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"51161B33-A3F8-438B-99C7-9AE57A13FA72"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0048.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6938.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6938.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1305","sourceIdentifier":"cve@mitre.org","published":"2001-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2000.0a:*:*:*:*:*:*:*","matchCriteriaId":"1C7B95B0-8CCB-4561-B354-80925B9769D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2000.0b_build3278:*:*:*:*:*:*:*","matchCriteriaId":"9C1E49E4-1BB4-40BF-AB6F-829ACAEDC581"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*","matchCriteriaId":"2BEA5FE1-267D-41B3-AA41-794DA021C4A1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99851887024728&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7028.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3226","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99851887024728&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7028.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1306","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_directory_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"25828EDD-776B-4164-96A0-351A987D2FB6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/276944","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESMM","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/276944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESMM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2001-1307","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_directory_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"25828EDD-776B-4164-96A0-351A987D2FB6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/276944","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESMM","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3038","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6893","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/276944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESMM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1308","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_directory_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.4","matchCriteriaId":"25828EDD-776B-4164-96A0-351A987D2FB6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/276944","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESMM","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6898","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/276944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESMM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1309","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:secureway_directory:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AD69BFC-052B-4CFB-A3BF-9AB1BF387548"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/505564","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CFCR-4YQ33Y","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3040","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6894","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/505564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CFCR-4YQ33Y","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1310","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:secureway_directory:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AD69BFC-052B-4CFB-A3BF-9AB1BF387548"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/505564","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CFCR-4YQ33Y","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6894","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/505564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CFCR-4YQ33Y","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1311","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_r5:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7a","matchCriteriaId":"60D4B93B-2276-406E-84A0-7325E2A23C52"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/583184","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/314909/30/25520/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6895","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/583184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/314909/30/25520/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1312","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_r5:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7a","matchCriteriaId":"60D4B93B-2276-406E-84A0-7325E2A23C52"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/583184","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3042","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6896","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/583184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1313","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_r5:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.7a","matchCriteriaId":"60D4B93B-2276-406E-84A0-7325E2A23C52"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/583184","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/583184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.notes.net/r5fixlist.nsf/Search%21SearchView&Query=DWUU4W6NC8","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1314","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"18175867-AEDC-4FF4-AA55-CA92910F6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4738835B-320B-47EE-9E03-812876840821"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2D812A47-65DA-4041-B729-F3DD61783B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"AE5F9868-86F2-4A3E-8F71-59057692A6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDDA181-C931-43A4-87EC-ACE55947FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:livecontent_directory:8a3:*:*:*:*:*:*:*","matchCriteriaId":"7CAEA97E-030E-48F8-9C76-FF5023B30C3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/657547","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/657547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1315","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"18175867-AEDC-4FF4-AA55-CA92910F6623"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4738835B-320B-47EE-9E03-812876840821"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2D812A47-65DA-4041-B729-F3DD61783B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"AE5F9868-86F2-4A3E-8F71-59057692A6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDDA181-C931-43A4-87EC-ACE55947FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:livecontent_directory:8a3:*:*:*:*:*:*:*","matchCriteriaId":"7CAEA97E-030E-48F8-9C76-FF5023B30C3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/657547","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/657547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4ZKLEM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2001-1316","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B432D43D-F2AE-4DBA-AD76-5ABCEAB5539A"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.1:*:*:*:*:*:*:*","matchCriteriaId":"0CF3F199-AB5C-48AA-9EDC-B20E11269F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.2:*:*:*:*:*:*:*","matchCriteriaId":"96CEBA16-C0FD-4533-9357-B5300FE7226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.3:*:*:*:*:*:*:*","matchCriteriaId":"21DD5BBB-4C52-41C2-BDEE-CEF74C121CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.4:*:*:*:*:*:*:*","matchCriteriaId":"704E05FC-AC0F-41E2-A55C-61E0B1D82DE6"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/688960","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNA","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3044","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6897","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/688960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1317","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B432D43D-F2AE-4DBA-AD76-5ABCEAB5539A"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.1:*:*:*:*:*:*:*","matchCriteriaId":"0CF3F199-AB5C-48AA-9EDC-B20E11269F69"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.2:*:*:*:*:*:*:*","matchCriteriaId":"96CEBA16-C0FD-4533-9357-B5300FE7226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.3:*:*:*:*:*:*:*","matchCriteriaId":"21DD5BBB-4C52-41C2-BDEE-CEF74C121CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:teamware:teamware_office:5.4:*:*:*:*:*:*:*","matchCriteriaId":"704E05FC-AC0F-41E2-A55C-61E0B1D82DE6"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/688960","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNA","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/688960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2001-1318","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora_worldmail_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B40FACA0-FF9F-488C-AE0B-99AFD105E756"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/717380","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNA","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3043","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/717380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1319","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/763400","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CFCN-4YAQC7","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3045","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6899","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/763400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CFCN-4YAQC7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1320","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:keyserver:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3E384BF4-9F99-4E86-9D4E-8588B47A0E2C"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/765256","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNK","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6900","source":"cve@mitre.org"},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/765256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNK","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1321","sourceIdentifier":"cve@mitre.org","published":"2001-07-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1E2C1A6E-C778-4DE0-BFBE-8C60E0A655F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:internet_directory:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8040429D-3179-4E63-B897-F39F12B508CC"}]}]}],"references":[{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/869184","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNV","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://ciac.llnl.gov/ciac/bulletins/l-116.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2001-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/869184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JPLA-4WESNV","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2001-1322","sourceIdentifier":"cve@mitre.org","published":"2001-07-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"6C378594-2892-4A0E-807D-D5201E6D465F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.8_pre3:*:*:*:*:*:*:*","matchCriteriaId":"5B2FE666-D220-40DB-9CCC-9D5978F077A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3BD1A836-2393-47A6-A333-F753955CAE45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre2:*:*:*:*:*:*:*","matchCriteriaId":"F9F7C502-3D84-43FC-8633-393FA7B34B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre3:*:*:*:*:*:*:*","matchCriteriaId":"7BBBC08F-6400-4EFE-ACA8-906D2DFBFAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre4:*:*:*:*:*:*:*","matchCriteriaId":"D7C5181F-9846-4963-B7E0-5F05B4A89E2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre5:*:*:*:*:*:*:*","matchCriteriaId":"DBE2F81B-0F25-49A8-8FFD-A57336BB7AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre7:*:*:*:*:*:*:*","matchCriteriaId":"B05D59F2-E5C6-4F44-A0F1-DFC721537329"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre8:*:*:*:*:*:*:*","matchCriteriaId":"35256395-7F58-49A4-A0BE-B15E91AAE0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre9:*:*:*:*:*:*:*","matchCriteriaId":"5D829D13-3A94-4453-8879-1022D2C9DCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre10:*:*:*:*:*:*:*","matchCriteriaId":"1701D2B9-C710-4DA8-B495-DD06B3832C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre11:*:*:*:*:*:*:*","matchCriteriaId":"31F86093-41F8-42C5-872A-50F4FB2BF55F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre12:*:*:*:*:*:*:*","matchCriteriaId":"14574242-9C09-4E11-B4AF-18D7BF1860FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre13:*:*:*:*:*:*:*","matchCriteriaId":"6EFCE997-358F-4ACF-B979-C20826D883C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre14:*:*:*:*:*:*:*","matchCriteriaId":"EA6A1F6C-29CC-453A-9F71-5DA6DD406F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre15:*:*:*:*:*:*:*","matchCriteriaId":"20DDE939-F6B8-48A8-BA60-EE381EE0657C"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000404","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-024-01","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-063","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6657.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-055.php3","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1469.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-075.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2826","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-024-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6657.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-055.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1469.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1323","sourceIdentifier":"cve@mitre.org","published":"2001-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.2","matchCriteriaId":"D786DF24-D490-4E62-8CEA-5E504935B388"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98826223517788&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-060.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=98826223517788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2001-1324","sourceIdentifier":"cve@mitre.org","published":"2001-06-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_jarc:idtools:2001-05-31:*:*:*:*:*:*:*","matchCriteriaId":"95DC2863-6A5B-42C8-9AC0-7835B2D1FEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_jarc:idtools:2001-06-08:*:*:*:*:*:*:*","matchCriteriaId":"58FF4F6E-F692-4A24-9810-915FAC819B60"}]}]}],"references":[{"url":"http://multivac.cwru.edu/idtools/admin_idtools.tar.bz2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1001839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2934","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://multivac.cwru.edu/idtools/admin_idtools.tar.bz2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1001839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1325","sourceIdentifier":"cve@mitre.org","published":"2001-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2633","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6448","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1326","sourceIdentifier":"cve@mitre.org","published":"2001-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 5.1 allows remote attackers to execute arbitrary code when the \"Use Microsoft Viewer\" option is enabled and the \"allow executables in HTML content\" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E129DE88-C286-41CC-B82F-C80718E19701"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/187128","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2796","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/187128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1327","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berkeley_softworks:pmake:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.35","matchCriteriaId":"52EC3D1B-6D8B-40EE-B385-46B1D1A5A19C"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9988.php","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2001-May/000313.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9988.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/pipermail/tl-security-announce/2001-May/000313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1328","sourceIdentifier":"cve@mitre.org","published":"2001-06-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7AAC8954-74A8-4FE3-ABE7-57DA041D9D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.4:*:x86:*:*:*:*:*","matchCriteriaId":"D1DEB967-BD3E-4CCF-B53F-3927454FA689"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:x86:*:*:*:*:*","matchCriteriaId":"5E938921-A452-4333-B587-31A1A5999747"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:x86:*:*:*:*:*","matchCriteriaId":"F4A01E03-2ACC-471E-B778-89EF01B23B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:x86:*:*:*:*:*","matchCriteriaId":"BC05D524-BAEF-450D-B904-C11C9DF1192D"}]}]}],"references":[{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2001.03","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/203","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/l-103.shtml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6828","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1844","source":"cve@mitre.org"},{"url":"ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2001.03","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/l-103.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1329","sourceIdentifier":"cve@mitre.org","published":"2001-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5CD507AC-A6D2-48AA-B6BB-9220AD85DC00"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1330","sourceIdentifier":"cve@mitre.org","published":"2001-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5CD507AC-A6D2-48AA-B6BB-9220AD85DC00"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1331","sourceIdentifier":"cve@mitre.org","published":"2001-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:progeny:debian:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8D4AC156-3AB1-4A07-AE5E-8DCEFF4FA5B4"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/3307","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-056","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2720","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1332","sourceIdentifier":"cve@mitre.org","published":"2001-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"6847F6D8-C39B-4C6A-B055-96D4EA6A2D5F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386","source":"cve@mitre.org"},{"url":"http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1333","sourceIdentifier":"cve@mitre.org","published":"2001-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"6847F6D8-C39B-4C6A-B055-96D4EA6A2D5F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386","source":"cve@mitre.org"},{"url":"http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-048.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1334","sourceIdentifier":"cve@mitre.org","published":"2002-05-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"DC8FB8A1-BE41-4E62-88E9-AB15246AB0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpslash:phpslash:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C9493398-C12A-439A-9836-0D62F6510D0B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0126.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=phpslash&m=99029398904419&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9990.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2724","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=phpslash&m=99029398904419&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9990.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1335","sourceIdentifier":"cve@mitre.org","published":"2001-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aclogic:cesarftp:0.98b:*:*:*:*:*:*:*","matchCriteriaId":"C9E01331-AB2C-4A40-BB5F-E7409079C6A8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6606.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2786","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6606.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1336","sourceIdentifier":"cve@mitre.org","published":"2001-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aclogic:cesarftp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.98b","matchCriteriaId":"5670E7B9-C02B-43E1-A43D-B4FAA20330F9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6608.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2785","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6608.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1337","sourceIdentifier":"cve@mitre.org","published":"2001-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beck_ipc_gmbh:ipc_at_chip_embedded-webserver:*:*:*:*:*:*:*:*","matchCriteriaId":"F2F9DC4E-550A-4CC2-BCE9-B16B68DF1AE5"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6594.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6594.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1338","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beck_ipc_gmbh:ipc_at_chip_telnetd_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AED15C78-3C55-42BA-A97B-2AEC0BBABBE5"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6595.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/198979","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2773","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6595.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/198979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1339","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-307"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:anybus:ipc\\@chip_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F2C352B1-002E-4AC1-A5A0-2B5689EAE01A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:anybus:ipc\\@chip:-:*:*:*:*:*:*:*","matchCriteriaId":"28349ED6-BC75-4682-80DC-1FFA0B70DBF3"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/6605.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/198979","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2771","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/6605.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/198979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1340","sourceIdentifier":"cve@mitre.org","published":"2002-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beck_ipc_gmbh:ipc_at_chip_telnetd_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AED15C78-3C55-42BA-A97B-2AEC0BBABBE5"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6596.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/756019","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2772","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6596.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/756019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1341","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beck_ipc_gmbh:ipc_at_chip_embedded-webserver:*:*:*:*:*:*:*:*","matchCriteriaId":"F2F9DC4E-550A-4CC2-BCE9-B16B68DF1AE5"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6600.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/574739","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2767","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6600.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/574739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1342","sourceIdentifier":"cve@mitre.org","published":"2001-05-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.20:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:win32:*:*:*:*:*","matchCriteriaId":"F9778DCA-00B3-4C15-B1B7-05738CD61E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:win32:*:*:*:*:*","matchCriteriaId":"14E06755-5DEB-450C-A718-D1531E9986F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.15:*:win32:*:*:*:*:*","matchCriteriaId":"8F572870-41BF-40B5-B202-136449814A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.16:*:win32:*:*:*:*:*","matchCriteriaId":"E593B74E-894C-4286-8F41-69C3435D9F2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:win32:*:*:*:*:*","matchCriteriaId":"780FEC59-8720-4C81-8924-F25577633B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:win32:*:*:*:*:*","matchCriteriaId":"A6938AFA-D836-4F85-9595-27799D476F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:win32:*:*:*:*:*","matchCriteriaId":"46B27279-DB34-4B9C-A84C-3ED872A43599"}]}]}],"references":[{"url":"http://bugs.apache.org/index.cgi/full/7522","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99054258728748&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/176144","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/01-05-25","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6527.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2740","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://bugs.apache.org/index.cgi/full/7522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99054258728748&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/176144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/01-05-25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6527.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1343","sourceIdentifier":"cve@mitre.org","published":"2001-06-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgicentral:webstore_400:4.14:*:*:*:*:*:*:*","matchCriteriaId":"EE8EA8C3-E645-4B0D-8D2A-CB66D25C0E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgicentral:webstore_400cs:4.14:*:*:*:*:*:*:*","matchCriteriaId":"4269B266-3C5E-459F-928F-62DDDAD553F1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2861","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6685","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1344","sourceIdentifier":"cve@mitre.org","published":"2001-06-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgicentral:webstore_400:4.14:*:*:*:*:*:*:*","matchCriteriaId":"EE8EA8C3-E645-4B0D-8D2A-CB66D25C0E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgicentral:webstore_400cs:4.14:*:*:*:*:*:*:*","matchCriteriaId":"4269B266-3C5E-459F-928F-62DDDAD553F1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2860","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6685","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1345","sourceIdentifier":"cve@mitre.org","published":"2001-06-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetico:bestcrypt:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"9B05E700-5357-4D7C-A616-61386C36478C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0005.html","source":"cve@mitre.org"},{"url":"http://www.jetico.com/index.htm#/linux.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2820","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6648","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-06/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jetico.com/index.htm#/linux.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1346","sourceIdentifier":"cve@mitre.org","published":"2001-05-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:arcserve_backup:6.61:*:*:*:*:*:*:*","matchCriteriaId":"7028C0CF-9C60-4493-BABE-CCF4F62372D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:arcserve_backup:6.63:*:*:*:*:*:*:*","matchCriteriaId":"C370051A-C390-41E7-99B9-556D28D04F68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2741","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2748","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1347","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0232.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6590.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2764","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0232.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6590.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1348","sourceIdentifier":"cve@mitre.org","published":"2001-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E52E6095-11E9-4F10-B5AF-31AC6A341ACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAA7AEAA-CC8B-4F20-8E5E-9D6B02A16F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7C13213F-F2AB-4A35-BC22-0E0E43D40839"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"81901D2D-3DD9-4FB2-B6C7-591466D5FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"9091ED0C-751D-4684-992A-3BCE67E4E794"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"BD98A4BF-5E15-4A06-9B67-77358DA15E00"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"FF517806-6D20-4343-AF31-754D066CE9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E026D28-09C6-474F-9C8A-E2A1FA2AEBA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A09E0C30-075E-428E-B659-42C0FB6BAA9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.2:*:*:*:*:*:*:*","matchCriteriaId":"F3529742-F04A-4DC3-891A-BB87D5BBC5D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F4E0537-DF2A-417A-9525-C789AFB5418F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5068EDE0-6EFD-49BE-A53B-895F7110D844"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80290125-0FF3-4530-88B7-E52427D42E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6399C82F-3ABD-49AE-A78E-510B2B9DF43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D9A95D3-ED42-4391-BAD6-26679F0D0B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E70BEC86-20B5-42BD-A99B-3033F4922F12"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.4:*:*:*:*:*:*:*","matchCriteriaId":"5F9B8E5A-C5D3-4989-A2B4-7B8B4642F7B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.5:*:*:*:*:*:*:*","matchCriteriaId":"049C2393-BE28-45C2-AD4C-929DD3A73EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C69CBC4B-9E86-41CF-AECF-BCE1FD1A58CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F5C803DB-A3CF-478A-BBA5-81F11B7DE32F"},{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA2FEFE-D604-4421-A8EC-ADA8D60A0CF6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html","source":"cve@mitre.org"},{"url":"http://twig.screwdriver.net/index.php3","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6619.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2791","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://twig.screwdriver.net/index.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6619.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1349","sourceIdentifier":"cve@mitre.org","published":"2001-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*","matchCriteriaId":"76A60742-7815-4658-A6F7-147AA48C24B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*","matchCriteriaId":"9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*","matchCriteriaId":"120271B8-08A9-4C21-A108-0DA61095A006"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA859AF-4E4E-4077-8E98-523E617A1DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*","matchCriteriaId":"A9791650-C367-43B6-A0F4-5BB56CE10778"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*","matchCriteriaId":"8340DDA8-77DD-4AEB-B267-F86F64A851B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*","matchCriteriaId":"8F81A2AD-90A0-4B97-86A3-92690A0FCA71"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm8120.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-106.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6633.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/187127","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2794","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razor.bindview.com/publish/advisories/adv_sm8120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6633.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/187127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1350","sourceIdentifier":"cve@mitre.org","published":"2001-11-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.7","matchCriteriaId":"57EAE8EC-B5E2-45A6-87C3-15A88AA384C8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b","source":"cve@mitre.org"},{"url":"http://search.namazu.org/ml/namazu-devel-ja/msg02114.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://search.namazu.org/ml/namazu-devel-ja/msg02114.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1351","sourceIdentifier":"cve@mitre.org","published":"2001-12-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.8","matchCriteriaId":"B63CB3EF-BFDD-43A9-A997-7DB29F121EF0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5690","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1352","sourceIdentifier":"cve@mitre.org","published":"2001-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.9","matchCriteriaId":"ECC217CB-23A3-457D-81B5-368B62F06E0E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100947261916155&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101060476404565&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101068116016472&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5691","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100947261916155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101060476404565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101068116016472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1353","sourceIdentifier":"cve@mitre.org","published":"2001-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"6.51","matchCriteriaId":"398E988F-4725-409E-94D2-270333D76F2D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0069.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=lprng&m=100083210910857&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-112.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-138.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=lprng&m=100083210910857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-138.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1354","sourceIdentifier":"cve@mitre.org","published":"2001-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.5d:*:*:*:*:*:*:*","matchCriteriaId":"EF456029-C817-4FC5-AFE2-9637219E220C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"60C72EA3-5D19-44B7-AB3D-99122A470205"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7q:*:*:*:*:*:*:*","matchCriteriaId":"316BCDB3-3762-436F-91B2-41231A55CB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7r:*:*:*:*:*:*:*","matchCriteriaId":"AD266925-B677-4462-9BF6-0828FD5CBF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8e:*:*:*:*:*:*:*","matchCriteriaId":"A5BD3CC6-5E2C-4534-925E-B81D92F18A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8f:*:*:*:*:*:*:*","matchCriteriaId":"C25AB545-FCF5-42FB-801E-07DF0ADC4865"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8g:*:*:*:*:*:*:*","matchCriteriaId":"EF6F3B04-6DA7-42F8-8873-7625B93523ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8h:*:*:*:*:*:*:*","matchCriteriaId":"F44C662D-58ED-41E0-8718-259321F9F9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8i:*:*:*:*:*:*:*","matchCriteriaId":"CEE745C7-C370-44FF-BAC4-EE93EE6AFC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"BE4FD50F-DDFA-40AD-BFCC-F606CEF450F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"AC94C372-7536-4692-AEA7-B58B32E2A5F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"59DB045D-91F6-4AFC-8331-F2155D38D5FE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/198293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3075","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6866","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1355","sourceIdentifier":"cve@mitre.org","published":"2001-07-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.5d:*:*:*:*:*:*:*","matchCriteriaId":"EF456029-C817-4FC5-AFE2-9637219E220C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"60C72EA3-5D19-44B7-AB3D-99122A470205"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7q:*:*:*:*:*:*:*","matchCriteriaId":"316BCDB3-3762-436F-91B2-41231A55CB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.7r:*:*:*:*:*:*:*","matchCriteriaId":"AD266925-B677-4462-9BF6-0828FD5CBF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8e:*:*:*:*:*:*:*","matchCriteriaId":"A5BD3CC6-5E2C-4534-925E-B81D92F18A1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8f:*:*:*:*:*:*:*","matchCriteriaId":"C25AB545-FCF5-42FB-801E-07DF0ADC4865"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8g:*:*:*:*:*:*:*","matchCriteriaId":"EF6F3B04-6DA7-42F8-8873-7625B93523ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8h:*:*:*:*:*:*:*","matchCriteriaId":"F44C662D-58ED-41E0-8718-259321F9F9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:dmail:2.8i:*:*:*:*:*:*:*","matchCriteriaId":"CEE745C7-C370-44FF-BAC4-EE93EE6AFC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"BE4FD50F-DDFA-40AD-BFCC-F606CEF450F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"AC94C372-7536-4692-AEA7-B58B32E2A5F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"59DB045D-91F6-4AFC-8331-F2155D38D5FE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/198293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3077","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6865","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1356","sourceIdentifier":"cve@mitre.org","published":"2001-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"AC94C372-7536-4692-AEA7-B58B32E2A5F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"59DB045D-91F6-4AFC-8331-F2155D38D5FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"C38E3BA1-DD78-4CB8-A680-B7D99CAD84B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*","matchCriteriaId":"283FCBC2-3C13-491C-A145-4177F7C37EA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"2DE7C06B-1376-4095-A284-14F310D7AA5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*","matchCriteriaId":"9C2BB9D2-70AE-4684-B4E7-32610DD9DDC1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/201951","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6961.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3157","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/201951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6961.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1357","sourceIdentifier":"cve@mitre.org","published":"2001-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpheaven:phpmychat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.14.5","matchCriteriaId":"A272D41D-842A-4F43-91D1-750A17276D07"}]}]}],"references":[{"url":"http://www.phpheaven.net/projects/phpMyChat/changes.php3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpheaven.net/projects/phpMyChat/changes.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1358","sourceIdentifier":"cve@mitre.org","published":"2001-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpheaven:phpmychat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.14.4","matchCriteriaId":"F9629517-2243-418C-9396-AD4CF4D6A708"}]}]}],"references":[{"url":"http://www.phpheaven.net/projects/phpMyChat/changes.php3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpheaven.net/projects/phpMyChat/changes.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1359","sourceIdentifier":"cve@mitre.org","published":"2001-06-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:volution:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7EAB3336-FEA0-4CCF-AF1B-5DC43634BBF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:volution:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A4A94517-C4E2-4032-8395-919B798A862C"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:volution:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1EBBC944-E23D-4445-90B2-AF5D6B31288D"}]}]}],"references":[{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-021.0.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2850","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6672","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2001-021.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1360","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mostang:sane:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"49FD3223-4C8F-469D-AD1F-3794742F6352"}]}]}],"references":[{"url":"ftp://ftp.mostang.com/pub/sane/sane-1.0.8/sane-backends-1.0.8.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.mostang.com/pub/sane/sane-1.0.8/sane-backends-1.0.8.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1361","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twig_development_team:twig:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"21CDB9DE-8590-44DB-A43F-4E68A3C00399"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://twig.screwdriver.net/file.php3?file=CHANGELOG","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://twig.screwdriver.net/file.php3?file=CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1362","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the server for nPULSE before 0.53p4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horsburgh:npulse:*:*:*:*:*:*:*:*","versionEndIncluding":"0.53p4","matchCriteriaId":"FDDCD978-0F86-4AE0-B8E4-A24A63FA7095"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/releases/51981/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://freshmeat.net/releases/51981/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1363","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite_development_team:phpwebsite:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.9","matchCriteriaId":"149FD0BE-82FC-4666-9D08-B5B5D9EC606D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org"},{"url":"http://phpwebsite.appstate.edu/downloads/0.7.9/phpWebSite-en-0.7.9.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpwebsite.appstate.edu/downloads/0.7.9/phpWebSite-en-0.7.9.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1364","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:project_purple:autodns:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.4","matchCriteriaId":"537A8A99-9E3B-4721-BA8D-8200C30CD3BF"}]}]}],"references":[{"url":"ftp://ftp.earth.li/pub/projectpurple/autodns-0.0.4.tar.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org"},{"url":"ftp://ftp.earth.li/pub/projectpurple/autodns-0.0.4.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1365","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in IntraGnat before 1.4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osi_codes_inc.:intragnat:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"4B8A7EF6-8BE6-44C8-8A22-4460FD959243"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0011.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1366","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscript_project:netscript:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"07CA8C03-4945-4AE5-AADA-A05B6BECE00E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://netscript.sourceforge.net/netscript-1.6.2.tgz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://netscript.sourceforge.net/netscript-1.6.2.tgz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1367","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpslice:phpslice:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.6","matchCriteriaId":"696EAECF-AC0F-48F6-8324-057BCD1CC283"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://phpslice.org/comments.php?aid=1031&","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9649","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://phpslice.org/comments.php?aid=1031&","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1368","sourceIdentifier":"cve@mitre.org","published":"2001-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BFFA76CB-1C2B-4AA0-86C0-FFD30905A360"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0059.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6697","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q2/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1369","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leon_j_breedt:pam-pgsql:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B87A103C-CCA5-4B76-AE27-D3FF8D6AA05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:leon_j_breedt:pam-pgsql:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"78A50CF7-C027-46B5-9975-B5B2C7BE99EF"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:14.pam-pgsql.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7110.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3319","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:14.pam-pgsql.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7110.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1370","sourceIdentifier":"cve@mitre.org","published":"2001-07-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplib_team:phplib:7.2:*:*:*:*:*:*:*","matchCriteriaId":"D0FE0678-B66B-470D-8541-D76BACBA4E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplib_team:phplib:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8359F6CF-017A-4DC6-A9CA-8A7F6BF4CDBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplib_team:phplib:7.2b:*:*:*:*:*:*:*","matchCriteriaId":"A64F1247-13DB-48A2-9E9F-C33CC791B365"},{"vulnerable":true,"criteria":"cpe:2.3:a:phplib_team:phplib:7.2c:*:*:*:*:*:*:*","matchCriteriaId":"3DACBE05-AE41-49ED-8F27-0D836A190859"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99616122712122&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-073","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6892.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/198768","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3079","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99616122712122&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/198495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6892.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/198768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1371","sourceIdentifier":"cve@mitre.org","published":"2002-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://technet.oracle.com/deploy/security/pdf/ias_soap_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8449.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/736923","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4289","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://technet.oracle.com/deploy/security/pdf/ias_soap_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8449.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/736923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1372","sourceIdentifier":"cve@mitre.org","published":"2002-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100074087824021&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100119633925473&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/jspexecute_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/278971","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nii.co.in/research.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3341","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7135","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100074087824021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100119633925473&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/jspexecute_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/278971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nii.co.in/research.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1373","sourceIdentifier":"cve@mitre.org","published":"2001-07-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EDDB6978-A1C6-4DCD-86F0-55005D4CF292"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AE79F675-8577-45AC-A1EB-34C8805CC802"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6B7CA67C-34AC-4717-8E86-1A8D3D00046B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.4:*:*:*:*:*:*:*","matchCriteriaId":"2180CF4C-5124-4097-B7DE-C5C5F38E0B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.4:*:pro:*:*:*:*:*","matchCriteriaId":"161A802C-60DE-4A8E-BDBA-771C3123AEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8FE589FD-0C87-4057-BA5E-326727E0EDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.6:*:*:*:*:*:*:*","matchCriteriaId":"44DD1537-11DD-4C7F-810A-674245E7EAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.6:*:pro:*:*:*:*:*","matchCriteriaId":"2F35E472-2E14-4F37-9D2C-BFBA543184AD"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/197681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zonelabs.com/products/zap/rel_history.html#2.6.362","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/197681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zonelabs.com/products/zap/rel_history.html#2.6.362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1374","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:0:*:*:*:*:*:*:*","matchCriteriaId":"C3DE5021-6C95-42B9-A2F1-2416E1DFFDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:1:*:*:*:*:*:*:*","matchCriteriaId":"F0B34078-6C72-4160-8C06-CE8DF05F90CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:2:*:*:*:*:*:*:*","matchCriteriaId":"40F92B64-2FC2-494B-80A7-C13799BB0C02"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:3:*:*:*:*:*:*:*","matchCriteriaId":"68CC2FFF-8CA6-4610-82F4-13C91CCBFF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:4:*:*:*:*:*:*:*","matchCriteriaId":"AE85170E-C60D-4A51-BFD0-A08E0F16266B"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5E7522C4-5B5B-49CB-A612-2D3719669EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.1:*:*:*:*:*:*:*","matchCriteriaId":"022D0F6C-2EC7-4193-A3F8-DB9968A453EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.2:*:*:*:*:*:*:*","matchCriteriaId":"95B5F3CA-557A-4389-B1F1-4DF2598B3DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.3:*:*:*:*:*:*:*","matchCriteriaId":"8AB3F7AB-F00B-424B-9F94-93736B8AC4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.4:*:*:*:*:*:*:*","matchCriteriaId":"06C6F995-58CC-405B-A11A-225249131FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.5:*:*:*:*:*:*:*","matchCriteriaId":"EA9D4278-7E36-4704-9709-9F18DD202459"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.6:*:*:*:*:*:*:*","matchCriteriaId":"E1BBDD23-C9D2-4EC7-A377-D7CCBE5BFB83"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.7:*:*:*:*:*:*:*","matchCriteriaId":"29CCE2DF-8B6D-4736-BBE9-87E8D9562542"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.8:*:*:*:*:*:*:*","matchCriteriaId":"0BEB2EE9-C619-4E4A-A89A-A035674ED821"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.9:*:*:*:*:*:*:*","matchCriteriaId":"2959FA2C-08CD-42A9-A5D5-15568F1E570C"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FC361FE5-B35A-454F-B860-B07E85135764"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.11:*:*:*:*:*:*:*","matchCriteriaId":"27488026-A7C7-4691-BD8E-4082947D39D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.12:*:*:*:*:*:*:*","matchCriteriaId":"D61E571C-24E6-48AF-B82E-4ABE258AF422"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.13:*:*:*:*:*:*:*","matchCriteriaId":"8995324B-665B-435D-9F80-F0A3A7EC5D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.14:*:*:*:*:*:*:*","matchCriteriaId":"784F1220-1D89-4AC5-B9FC-F6E53B4997E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.15:*:*:*:*:*:*:*","matchCriteriaId":"0ED3433E-5FAD-4643-A000-5830D2841B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.16:*:*:*:*:*:*:*","matchCriteriaId":"ACAEE414-0038-457C-9E56-19B1F32E1322"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.17:*:*:*:*:*:*:*","matchCriteriaId":"D1EDC1A7-8AC3-4329-9574-28F9D62B4BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.18:*:*:*:*:*:*:*","matchCriteriaId":"41697D90-1B8F-4C8E-BDF9-6478F052CC97"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.19:*:*:*:*:*:*:*","matchCriteriaId":"F51F3D11-4B37-4E3A-9DA0-A1E5D8D66283"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.20:*:*:*:*:*:*:*","matchCriteriaId":"74DD6439-CB30-4156-9853-08AD5ECC7B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.21:*:*:*:*:*:*:*","matchCriteriaId":"FB58864B-CEA9-4E1C-A016-23BB377FEE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.22:*:*:*:*:*:*:*","matchCriteriaId":"868C41FB-05DD-4C44-880B-2D88B44787C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.23:*:*:*:*:*:*:*","matchCriteriaId":"965E4608-9A40-4018-91DB-1D3CACF64FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.24:*:*:*:*:*:*:*","matchCriteriaId":"378B08A0-001C-4A1F-9D6D-F32CF4483C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.25:*:*:*:*:*:*:*","matchCriteriaId":"D6812A69-900D-44A0-8916-1DA12696D72C"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.26:*:*:*:*:*:*:*","matchCriteriaId":"EDB1C0AF-8C61-49C4-8F12-EEDE26556B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.27:*:*:*:*:*:*:*","matchCriteriaId":"7131D6F4-DD3D-4E51-BE00-CE8A44011B05"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.28:*:*:*:*:*:*:*","matchCriteriaId":"1C29001E-4771-4737-A5FD-DDD14573B361"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.29:*:*:*:*:*:*:*","matchCriteriaId":"B429DFA8-29BA-4F08-BA7D-0A3A5FF1B606"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.30:*:*:*:*:*:*:*","matchCriteriaId":"94C6A9E5-0FF5-4254-ABAD-D784419AF0A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.31:*:*:*:*:*:*:*","matchCriteriaId":"ED82C82B-2227-4C64-A4B0-B597E97E7168"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97177EF7-8FC4-4D4D-A8D9-3628AA0035FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-148.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3074","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22187","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28224","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6870","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1375","sourceIdentifier":"cve@mitre.org","published":"2001-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97177EF7-8FC4-4D4D-A8D9-3628AA0035FB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6869.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-148.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3073","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28226","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6869.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1376","sourceIdentifier":"cve@mitre.org","published":"2002-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ascend:radius:1.16:*:*:*:*:*:*:*","matchCriteriaId":"C0717614-9C92-4C20-9D65-0E488C97FAD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5AEDD86F-92B9-43EC-80E3-54010E249FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDB110B-4057-4BA4-993A-9DA14888A093"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"F5B0DFDC-913E-4358-9BF1-6AA1F871CB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.93:*:*:*:*:*:*:*","matchCriteriaId":"F332DA97-B327-45E0-8948-18C2C7278757"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.94:*:*:*:*:*:*:*","matchCriteriaId":"67632403-328E-4149-B0EC-2B563DDD7FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.95:*:*:*:*:*:*:*","matchCriteriaId":"0F6945F8-EB40-4205-9585-3BF9A132406E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.14:*:*:*:*:*:*:*","matchCriteriaId":"2A28A174-45A4-4886-8C87-2D475F9ABF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.15:*:*:*:*:*:*:*","matchCriteriaId":"A949E3FF-5360-4FC1-95E5-AB5080156D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.16:*:*:*:*:*:*:*","matchCriteriaId":"D000F534-1BF0-40A8-BD2B-9EBAF71D6FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.17:*:*:*:*:*:*:*","matchCriteriaId":"15253C62-0FCC-4699-9CC5-486F23CDD1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.17b:*:*:*:*:*:*:*","matchCriteriaId":"D01B8A1D-A4EC-4B92-A9EC-BECB35185ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.18:*:*:*:*:*:*:*","matchCriteriaId":"10DD81E4-732C-4F23-80A7-987FCC0511D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"28A5F502-7DA3-44E2-AEFB-6D1FD7121F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8C2894BE-AE8B-491C-A776-5D2821D4DFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92CD1A39-33F6-47C3-8899-286C07C9C219"},{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E3133364-7726-4BFA-A552-03533F762161"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96927B69-BA71-460B-8A59-CF3FC93C9661"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"056AD200-84E8-4B99-863F-C1D61A6B4C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FCE2BA9-35E0-410A-B9CC-C77C9D95338E"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4999A95F-9124-4585-B78C-34B8CDA87250"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"28DC815B-6648-4C3A-A66C-264EE6903CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"627CD710-183C-433B-9CC6-804C8A726FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"FA442BB3-4DAE-402C-8F3C-DFCA4C3EE63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"DE605C8B-316E-4C04-B5D1-97A0E2719DBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6_.0:*:*:*:*:*:*:*","matchCriteriaId":"13CF26C7-90DB-46FB-AE08-936FF7C324F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.8:*:*:*:*:*:*:*","matchCriteriaId":"15B965F5-E32D-4824-9A4B-0A2507CD167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C211927E-DE7F-450F-918B-DC3EAF6C5743"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6A74F1BA-3E1A-4073-A290-C086B6388F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"CDDB28FF-D0B4-45A4-A2E7-C56B4D660204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5263133F-0C92-4C16-B933-71AEAE9C33BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:radiusclient:radiusclient:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ACE414B4-5E23-4DE9-AD86-8FE51CCE723B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xtradius:xtradius:1.1_pre1:*:*:*:*:*:*:*","matchCriteriaId":"F6713B65-D941-4DCE-AA63-FE0B408E575B"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7326E7C2-F310-4820-A36D-C7045E6ED721"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C37D50E1-E8E1-4D07-93D2-D8DEE13872D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"792AB6F5-0916-482B-A868-BC41B7A6EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0_pre13:*:*:*:*:*:*:*","matchCriteriaId":"F4A295E4-7D6D-4906-84D4-BB80AF58422E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0_pre14:*:*:*:*:*:*:*","matchCriteriaId":"9A1FEC14-198C-46D1-8F96-9D91B9733A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0_pre15:*:*:*:*:*:*:*","matchCriteriaId":"DB2830F3-FB3A-4833-9027-B4933BA813ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius_project:yard_radius:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"95CC863F-9448-4692-AB9C-BA218D2313CF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101537153021792&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/239784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/589523","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-030.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3530","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7534","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101537153021792&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/239784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/589523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1377","sourceIdentifier":"cve@mitre.org","published":"2002-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5AEDD86F-92B9-43EC-80E3-54010E249FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:0.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDB110B-4057-4BA4-993A-9DA14888A093"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"F5B0DFDC-913E-4358-9BF1-6AA1F871CB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.93:*:*:*:*:*:*:*","matchCriteriaId":"F332DA97-B327-45E0-8948-18C2C7278757"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.94:*:*:*:*:*:*:*","matchCriteriaId":"67632403-328E-4149-B0EC-2B563DDD7FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.95:*:*:*:*:*:*:*","matchCriteriaId":"0F6945F8-EB40-4205-9585-3BF9A132406E"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.14:*:*:*:*:*:*:*","matchCriteriaId":"2A28A174-45A4-4886-8C87-2D475F9ABF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.15:*:*:*:*:*:*:*","matchCriteriaId":"A949E3FF-5360-4FC1-95E5-AB5080156D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.16:*:*:*:*:*:*:*","matchCriteriaId":"D000F534-1BF0-40A8-BD2B-9EBAF71D6FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.17:*:*:*:*:*:*:*","matchCriteriaId":"15253C62-0FCC-4699-9CC5-486F23CDD1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.17b:*:*:*:*:*:*:*","matchCriteriaId":"D01B8A1D-A4EC-4B92-A9EC-BECB35185ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.18:*:*:*:*:*:*:*","matchCriteriaId":"10DD81E4-732C-4F23-80A7-987FCC0511D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icradius:icradius:0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"28A5F502-7DA3-44E2-AEFB-6D1FD7121F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8C2894BE-AE8B-491C-A776-5D2821D4DFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92CD1A39-33F6-47C3-8899-286C07C9C219"},{"vulnerable":true,"criteria":"cpe:2.3:a:livingston:radius:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E3133364-7726-4BFA-A552-03533F762161"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96927B69-BA71-460B-8A59-CF3FC93C9661"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"056AD200-84E8-4B99-863F-C1D61A6B4C7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:radius:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FCE2BA9-35E0-410A-B9CC-C77C9D95338E"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4999A95F-9124-4585-B78C-34B8CDA87250"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"28DC815B-6648-4C3A-A66C-264EE6903CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"627CD710-183C-433B-9CC6-804C8A726FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"FA442BB3-4DAE-402C-8F3C-DFCA4C3EE63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"DE605C8B-316E-4C04-B5D1-97A0E2719DBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6_.0:*:*:*:*:*:*:*","matchCriteriaId":"13CF26C7-90DB-46FB-AE08-936FF7C324F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.8:*:*:*:*:*:*:*","matchCriteriaId":"15B965F5-E32D-4824-9A4B-0A2507CD167E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9:*:*:*:*:*:*:*","matchCriteriaId":"C211927E-DE7F-450F-918B-DC3EAF6C5743"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6A74F1BA-3E1A-4073-A290-C086B6388F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"CDDB28FF-D0B4-45A4-A2E7-C56B4D660204"},{"vulnerable":true,"criteria":"cpe:2.3:a:openradius:openradius:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5263133F-0C92-4C16-B933-71AEAE9C33BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:radiusclient:radiusclient:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ACE414B4-5E23-4DE9-AD86-8FE51CCE723B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xtradius:xtradius:1.1_pre1:*:*:*:*:*:*:*","matchCriteriaId":"F6713B65-D941-4DCE-AA63-FE0B408E575B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xtradius:xtradius:1.1_pre2:*:*:*:*:*:*:*","matchCriteriaId":"43B671B4-7B26-4F43-A477-1EE7F1E74245"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"7326E7C2-F310-4820-A36D-C7045E6ED721"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C37D50E1-E8E1-4D07-93D2-D8DEE13872D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"792AB6F5-0916-482B-A868-BC41B7A6EFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0_pre13:*:*:*:*:*:*:*","matchCriteriaId":"F4A295E4-7D6D-4906-84D4-BB80AF58422E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0_pre14:*:*:*:*:*:*:*","matchCriteriaId":"9A1FEC14-198C-46D1-8F96-9D91B9733A55"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius:yard_radius:1.0_pre15:*:*:*:*:*:*:*","matchCriteriaId":"DB2830F3-FB3A-4833-9027-B4933BA813ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:yard_radius_project:yard_radius:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"95CC863F-9448-4692-AB9C-BA218D2313CF"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101537153021792&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-06.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8354.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/936683","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-030.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4230","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101537153021792&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8354.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/936683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1378","sourceIdentifier":"cve@mitre.org","published":"2001-09-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.7.2","matchCriteriaId":"90833323-1385-45AB-946D-ABD73B1FF15C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"}]}]}],"references":[{"url":"http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-103.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1379","sourceIdentifier":"cve@mitre.org","published":"2001-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AE78D77C-F0BD-4FF8-8DA1-CE24E5F7A3F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:guiseppe_tanzilli_and_matthias_eckermann:mod_auth_pgsql:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"7E359EC4-D0C3-43DE-9C7A-33ADB10ACEAB"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:03.mod_auth_pgsql.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0040.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000427","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99911895901812&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-124.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7054.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3253","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7059","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:03.mod_auth_pgsql.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99911895901812&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-124.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7054.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1380","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the \"from\" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.9","matchCriteriaId":"689B5DE2-D3F3-49D6-8C80-AFE4EAFEE092"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100154541809940&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-114.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-010.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/905795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-081.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/642","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3369","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7179","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100154541809940&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-010.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/905795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-081.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1382","sourceIdentifier":"cve@mitre.org","published":"2001-09-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"echo simulation\" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9.9p2","matchCriteriaId":"D9DC327A-FD39-4A92-A9BF-CD2A12499D32"}]}]}],"references":[{"url":"http://www.openwall.com/Owl/CHANGES-stable.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5408","source":"cve@mitre.org"},{"url":"http://www.openwall.com/Owl/CHANGES-stable.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1383","sourceIdentifier":"cve@mitre.org","published":"2001-09-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2001-110.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7177.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3367","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7177.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1384","sourceIdentifier":"cve@mitre.org","published":"2001-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100343090106914&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100350685431610&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3713","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7311.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1650.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-129.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-130.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3447","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100343090106914&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100350685431610&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7311.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-079.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1650.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-130.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1385","sourceIdentifier":"cve@mitre.org","published":"2001-01-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=97957961212852","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-020","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/5939.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-136.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2205","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=97957961212852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/5939.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2000-136.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1386","sourceIdentifier":"cve@mitre.org","published":"2001-07-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a \".lnk.\" extension, which bypasses WFTPD's check for a \".lnk\" extension."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texasimperialsoftware:wftpd:3.00:r5:*:*:pro:*:*:*","matchCriteriaId":"12A21C8C-E924-4643-939F-BFD31BFDA1B4"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/194442","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2957","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6760","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/194442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/2957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1387","sourceIdentifier":"cve@mitre.org","published":"2001-11-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iptables-save in iptables before 1.2.4 records the \"--reject-with icmp-host-prohibited\" rule as \"--reject-with tcp-reset,\" which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netfilter:iptables:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.4","matchCriteriaId":"C1419F54-6B02-4A7D-AEE1-03E51E97DD43"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-144.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1388","sourceIdentifier":"cve@mitre.org","published":"2001-11-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netfilter:iptables:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.4","matchCriteriaId":"C1419F54-6B02-4A7D-AEE1-03E51E97DD43"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=53325","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-144.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=53325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2001-144.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1389","sourceIdentifier":"cve@mitre.org","published":"2001-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"6C378594-2892-4A0E-807D-D5201E6D465F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.8_pre3:*:*:*:*:*:*:*","matchCriteriaId":"5B2FE666-D220-40DB-9CCC-9D5978F077A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3BD1A836-2393-47A6-A333-F753955CAE45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre2:*:*:*:*:*:*:*","matchCriteriaId":"F9F7C502-3D84-43FC-8633-393FA7B34B9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre3:*:*:*:*:*:*:*","matchCriteriaId":"7BBBC08F-6400-4EFE-ACA8-906D2DFBFAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre5:*:*:*:*:*:*:*","matchCriteriaId":"DBE2F81B-0F25-49A8-8FFD-A57336BB7AFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre7:*:*:*:*:*:*:*","matchCriteriaId":"B05D59F2-E5C6-4F44-A0F1-DFC721537329"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre8:*:*:*:*:*:*:*","matchCriteriaId":"35256395-7F58-49A4-A0BE-B15E91AAE0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre9:*:*:*:*:*:*:*","matchCriteriaId":"5D829D13-3A94-4453-8879-1022D2C9DCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre10:*:*:*:*:*:*:*","matchCriteriaId":"1701D2B9-C710-4DA8-B495-DD06B3832C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre11:*:*:*:*:*:*:*","matchCriteriaId":"31F86093-41F8-42C5-872A-50F4FB2BF55F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre12:*:*:*:*:*:*:*","matchCriteriaId":"14574242-9C09-4E11-B4AF-18D7BF1860FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre13:*:*:*:*:*:*:*","matchCriteriaId":"6EFCE997-358F-4ACF-B979-C20826D883C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre14:*:*:*:*:*:*:*","matchCriteriaId":"EA6A1F6C-29CC-453A-9F71-5DA6DD406F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.1.8.9_pre15:*:*:*:*:*:*:*","matchCriteriaId":"20DDE939-F6B8-48A8-BA60-EE381EE0657C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3D29D598-7150-46E8-B199-A70116EEA742"}]}]}],"references":[{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-033-01","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99913751525583&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-109.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-076.php3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3257","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-033-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99913751525583&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2001-109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-076.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1390","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1391","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.19","matchCriteriaId":"97E2B094-820F-4AA6-B648-257FBA39E2EE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11162","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1392","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1393","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1394","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1395","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to \"boundary cases,\" with unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1396","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1397","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1398","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1399","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka \"User access asm bug on x86.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1400","sourceIdentifier":"cve@mitre.org","published":"2001-04-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.19","matchCriteriaId":"94EC6E59-F40D-4499-9EB3-7D7E175ABDE9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"cve@mitre.org"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=98575345009963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98637996127004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98653252326445&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98684172109474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98759029811377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=98775114228203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99013830726309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux.org.uk/VERSION/relnotes.2219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2001/dsa-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1401","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39524","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39526","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39527","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39531","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39533","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=70189","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=82781","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=70189","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=82781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1402","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting (CSS) and possibly SQL injection attacks on (1) the product or output form variables for reports.cgi, (2) the voteon, bug_id, and user variables for showvotes.cgi, (3) an invalid email address in createaccount.cgi, (4) an invalid ID in showdependencytree.cgi, (5) invalid usernames and other fields in process_bug.cgi, and (6) error messages in buglist.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=38854","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=38855","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=38859","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39536","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=87701","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=95235","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=38854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=38855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=38859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=39536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=87701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=95235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1403","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by \"shoulder-surfing\" and observing the web browser's location bar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=15980","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=15980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1404","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=74032","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=74032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1405","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=54556","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=54556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1406","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"process_bug.cgi in Bugzilla before 2.14 does not set the \"groupset\" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=66235","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10478.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=66235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10478.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1407","sourceIdentifier":"cve@mitre.org","published":"2001-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view the bug."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=96085","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10479.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=96085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=99912899900567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10479.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2001-107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1408","sourceIdentifier":"cve@mitre.org","published":"2001-07-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cobalt:qube:3.0:*:*:*:*:*:*:*","matchCriteriaId":"17068923-0D3A-441A-ACDE-19BCB188530E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cobalt:webmail:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C4BCCB6-A8A9-48D3-92B5-0479EBE3E7F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0092.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0245.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6805","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1414","sourceIdentifier":"cve@mitre.org","published":"2001-10-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-40521-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7396","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11841","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-40521-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1415","sourceIdentifier":"cve@mitre.org","published":"2001-11-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/016_recover.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/191675","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10149","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/016_recover.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/191675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1416","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4a:*:*:*:*:*:*:*","matchCriteriaId":"3E32896E-5207-489A-BEBD-4636E03833A8"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/541384","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-56TPBQ","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.windowsitpro.com/Articles/Index.cfm?ArticleID=19811&DisplayTab=Article","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/541384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-56TPBQ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.windowsitpro.com/Articles/Index.cfm?ArticleID=19811&DisplayTab=Article","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1417","sourceIdentifier":"cve@mitre.org","published":"2001-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/710347","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-56TQEN","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/218920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/247707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3408","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7255","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/710347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-56TQEN","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/218920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/247707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1418","sourceIdentifier":"cve@mitre.org","published":"2001-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Fixed in Win AIM Beta 4.8.2540 posted Nov. 19th.","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/990451","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-569M8X","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/218920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10686","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/990451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-569M8X","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/218920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1419","sourceIdentifier":"cve@mitre.org","published":"2001-10-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorComment":"Fixed in Win AIM Beta 4.8.2540 posted Nov. 19th.","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of \"<!--\" HTML comments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E00F0805-8C73-43B1-87AC-744434046E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3098DC2A-6A68-4160-9DAC-8F31A49BA45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D7577EED-D28B-430A-B554-CE40D9154893"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E81E472E-45B5-465B-B2D7-40F906AC31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*","matchCriteriaId":"50A04B5F-F17B-4177-861B-66DFD4FBE225"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0014.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/507771","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-56TPTN","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/247707","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3398","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7233","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/507771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-56TPTN","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/247707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1421","sourceIdentifier":"cve@mitre.org","published":"2001-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:*:*:*:*:*:*:*:*","versionEndIncluding":"4.7","matchCriteriaId":"936003CD-D839-4C67-9D2A-F0C29AED50B1"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/530299","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-569MD7","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/218920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/247707","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3756","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7757","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/530299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-569MD7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/218920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/247707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1422","sourceIdentifier":"cve@mitre.org","published":"2001-01-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3","matchCriteriaId":"EFABAC7C-B650-4B95-A7E3-D058E28B1FDF"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/303080","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2275","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www1.corest.com/common/showdoc.php?idxseccion=10&idx=117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5992","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/303080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www1.corest.com/common/showdoc.php?idxseccion=10&idx=117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1423","sourceIdentifier":"cve@mitre.org","published":"2001-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advanced_poll:advanced_poll:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"5DAD5350-C9EF-426B-94C6-58AA72D8A87E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1002516","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/140723","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7861","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1002516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/140723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1424","sourceIdentifier":"cve@mitre.org","published":"2001-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108:*:*:*:*:*:*:*","matchCriteriaId":"91040F84-5FFF-455F-B81A-EE2F450E878B"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132:*:*:*:*:*:*:*","matchCriteriaId":"5983F496-F470-4347-95DA-CF59EB3956E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133:*:*:*:*:*:*:*","matchCriteriaId":"13D1F571-1947-4FDB-AE33-D1FD86E9116B"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134:*:*:*:*:*:*:*","matchCriteriaId":"10C8A4DE-F452-4063-A82E-0033190C490A"}]}]}],"references":[{"url":"http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/212088","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/175229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2568","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6335","source":"cve@mitre.org"},{"url":"http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/212088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/175229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1425","sourceIdentifier":"cve@mitre.org","published":"2001-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108:*:*:*:*:*:*:*","matchCriteriaId":"91040F84-5FFF-455F-B81A-EE2F450E878B"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132:*:*:*:*:*:*:*","matchCriteriaId":"5983F496-F470-4347-95DA-CF59EB3956E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133:*:*:*:*:*:*:*","matchCriteriaId":"13D1F571-1947-4FDB-AE33-D1FD86E9116B"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134:*:*:*:*:*:*:*","matchCriteriaId":"10C8A4DE-F452-4063-A82E-0033190C490A"}]}]}],"references":[{"url":"http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/243592","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/175229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2568","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6354","source":"cve@mitre.org"},{"url":"http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/243592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/175229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1426","sourceIdentifier":"cve@mitre.org","published":"2001-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108:*:*:*:*:*:*:*","matchCriteriaId":"91040F84-5FFF-455F-B81A-EE2F450E878B"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132:*:*:*:*:*:*:*","matchCriteriaId":"5983F496-F470-4347-95DA-CF59EB3956E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133:*:*:*:*:*:*:*","matchCriteriaId":"13D1F571-1947-4FDB-AE33-D1FD86E9116B"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134:*:*:*:*:*:*:*","matchCriteriaId":"10C8A4DE-F452-4063-A82E-0033190C490A"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/490344","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/175229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2566","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6336","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/490344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/175229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1427","sourceIdentifier":"cve@mitre.org","published":"2001-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D58FB93F-72B9-4BD5-96A2-D020D9D3C41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5121E7B7-361C-4215-AAAA-58EC931A96D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8582CBB9-8FD7-4D4F-8571-BB936B534D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:3.1:*:*:*:*:*:*:*","matchCriteriaId":"12D55F6C-3507-4104-8506-4EB13F854338"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"26C78335-C88E-47FC-BCAB-F64572FAA634"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3EFCF7D1-1D5F-4C01-A345-E20F3000BD10"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B7690D5C-2915-4542-A5C0-12A156BB328B"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1B473376-4C38-4187-9D7A-E4E99C91426A"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.5:*:*:*:*:*:*:*","matchCriteriaId":"C3B6D7A2-1B87-49B6-A677-221F3E823FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E42D03D9-36FF-4538-A15C-FA4837B2E4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"BC24C1FB-A0B3-4DCF-84AB-FEBB55813FD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AAB6DA41-FA98-4A60-AC3D-44A57AB1F442"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/321475","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb01-07.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3023","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6840","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/321475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb01-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1428","sourceIdentifier":"cve@mitre.org","published":"2001-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) FTP and (2) Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beck_ipc_gmbh:ipc_at_chip_embedded-webserver:*:*:*:*:*:*:*:*","matchCriteriaId":"F2F9DC4E-550A-4CC2-BCE9-B16B68DF1AE5"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/426459","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/46219","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2769","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6597","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6598","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/426459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/46219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/186418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1429","sourceIdentifier":"cve@mitre.org","published":"2001-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"0F767927-D2B8-447B-834B-38EC1DC9D9D6"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/203203","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10630","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/203203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1430","sourceIdentifier":"cve@mitre.org","published":"2001-06-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cayman:3220-h_dsl_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F0C4894F-C634-4830-B0D8-F6158C074A89"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/557136","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-4ZTKY9","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/196083","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6841","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/557136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JARL-4ZTKY9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/196083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1431","sourceIdentifier":"cve@mitre.org","published":"2001-10-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nokia Firewall Appliances running IPSO 3.3 and VPN-1/FireWall-1 4.1 Service Pack 3, IPSO 3.4 and VPN-1/FireWall-1 4.1 Service Pack 4, and IPSO 3.4 or IPSO 3.4.1 and VPN-1/FireWall-1 4.1 Service Pack 5, when SYN Defender is configured in Active Gateway mode, does not properly rewrite the third packet of a TCP three-way handshake to use the NAT IP address, which allows remote attackers to gain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"60536AAF-76BC-4773-98FA-5F01E2D231FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1E4206C4-05A7-46D1-90C7-6BA7744C7AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"B9754CCE-CEC5-4359-9C62-133885817DEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"C65FC343-69C9-4B70-8149-42297B47C813"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:firewall_appliance:ipso_3.3:*:*:*:*:*:*:*","matchCriteriaId":"8B11266A-90C4-47B9-B6DD-77F1B4701708"},{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:firewall_appliance:ipso_3.4:*:*:*:*:*:*:*","matchCriteriaId":"E24EF8C6-E623-4B37-96D6-D514ECE365B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:nokia:firewall_appliance:ipso_3.41:*:*:*:*:*:*:*","matchCriteriaId":"9F781F5B-B875-4119-937B-97286E746C91"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/258731","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8293","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/258731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1432","sourceIdentifier":"cve@mitre.org","published":"2001-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*","matchCriteriaId":"457F777C-8D4C-452D-99CA-0E4CFC138329"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"94AA7EEB-1C4B-46AB-AD24-BE9792C25EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F0683D6F-D6D9-4FC2-9998-75835360BC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*","matchCriteriaId":"59A280D4-7FD9-4304-8C3C-2C0B2056D652"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C05C1EF5-92D1-4CA2-99F9-BF51B5435028"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7C954154-BADA-4C53-A957-A118747C503A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"05E355F5-54EB-4C99-B1F6-CEE94F023155"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/464827","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3772","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7799","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/464827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1433","sourceIdentifier":"cve@mitre.org","published":"2001-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*","matchCriteriaId":"457F777C-8D4C-452D-99CA-0E4CFC138329"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"94AA7EEB-1C4B-46AB-AD24-BE9792C25EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F0683D6F-D6D9-4FC2-9998-75835360BC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*","matchCriteriaId":"59A280D4-7FD9-4304-8C3C-2C0B2056D652"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C05C1EF5-92D1-4CA2-99F9-BF51B5435028"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7C954154-BADA-4C53-A957-A118747C503A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/245795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3771","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7797","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/245795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1434","sourceIdentifier":"cve@mitre.org","published":"2001-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an \"snmp-server host\" command, which creates a readable \"community\" community string if one has not been previously created."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5CFBBDA3-8A5E-407D-8608-45C1BD56BF58"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)w:*:*:*:*:*:*:*","matchCriteriaId":"53D87AC5-0F63-4AE8-AC05-FCEC98D18BDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xa3:*:*:*:*:*:*:*","matchCriteriaId":"AE210B04-7ECD-419C-9258-0F619A353A8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xb:*:*:*:*:*:*:*","matchCriteriaId":"3B467741-B277-4128-9804-E13ED23FD310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(1\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"5E7EE856-9CE7-49FD-8ADC-05C580CD54A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"77DDC99D-8B73-452C-94A7-A9A48F2F379B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xc:*:*:*:*:*:*:*","matchCriteriaId":"5145C737-2D5E-4BD4-BA9F-66ED2887A4DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"C48466C4-5A1E-4C71-8822-32D387B36B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"12551307-4D72-4D24-BA0D-07235EB762AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"08E23131-D207-4D98-96D5-2B71FF792604"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2\\)xg:*:*:*:*:*:*:*","matchCriteriaId":"1BFB5A8C-BF1B-4111-9E6A-F8D8FE1476AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(2b\\):*:*:*:*:*:*:*","matchCriteriaId":"593E5730-3777-4DEF-A1D3-73AF0B98448B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FF2207E5-7458-40C5-AEF4-73B271EAB3C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"E7109585-1433-4940-B7C9-C561DEAF1498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(3d\\):*:*:*:*:*:*:*","matchCriteriaId":"32B93745-F14C-428E-9A90-47ACE43451EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"E9D1F7A6-6DB3-41D1-BD87-DE1898EC91A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"4F1B2747-4A9C-44FC-BBA8-39E338B30417"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"65176343-0120-4038-844E-FDE48A920270"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xe1:*:*:*:*:*:*:*","matchCriteriaId":"EAE67104-9212-4E28-886B-ADFA9503DBBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xm:*:*:*:*:*:*:*","matchCriteriaId":"01F9B9CF-787B-4BE0-988C-669531BFFAA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(4\\)xm1:*:*:*:*:*:*:*","matchCriteriaId":"43D88280-5701-45EF-99CA-3056AD2216F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t:*:*:*:*:*:*:*","matchCriteriaId":"3BCEE111-BEFA-4285-B892-58DE3964F497"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"EA263B60-E7C0-4374-96DF-6E4EB9C16743"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc:*:*:*:*:*:*:*","matchCriteriaId":"2E17E7C3-53FE-424F-8F47-7B8C70C9807E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc2:*:*:*:*:*:*:*","matchCriteriaId":"47E6CE0D-852B-4169-9849-98CDC91E3118"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc2b:*:*:*:*:*:*:*","matchCriteriaId":"DD620020-D5B4-4FE3-AEA5-C43686992F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc3:*:*:*:*:*:*:*","matchCriteriaId":"5B4705F7-8E36-4C2D-A23C-E6002E459F5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wc3b:*:*:*:*:*:*:*","matchCriteriaId":"D2A0DF3A-430D-444F-BD02-D18D10245138"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)wx:*:*:*:*:*:*:*","matchCriteriaId":"F92CF99B-5043-4EDA-965F-3D8F32F9D742"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"15295BD6-CC76-41BE-B5A0-A08888207011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"1423776F-1C73-4872-81F6-29C411B6E545"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xk2:*:*:*:*:*:*:*","matchCriteriaId":"06FA18C8-0152-4035-8C6F-9AAC4B1985B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xn:*:*:*:*:*:*:*","matchCriteriaId":"49DB7F15-B0C2-4EF0-A3E7-6DFD03C0A25E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xn1:*:*:*:*:*:*:*","matchCriteriaId":"6AE88EB7-215B-4FCA-82DD-AC2A9D243323"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xs:*:*:*:*:*:*:*","matchCriteriaId":"763A8E4B-B394-4EB2-829D-70A030551D36"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)xu:*:*:*:*:*:*:*","matchCriteriaId":"198E5016-4494-4BA0-BC9A-C588264F79E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5\\)yb4:*:*:*:*:*:*:*","matchCriteriaId":"83B3A893-6322-4E04-803E-1D18224E7AF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.1\\)xp:*:*:*:*:*:*:*","matchCriteriaId":"AEB89FCC-6602-4B41-9BFA-91B0B48827A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.2\\)xu:*:*:*:*:*:*:*","matchCriteriaId":"D5DF5835-5DE4-4C4E-BFF3-2B15B01771B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.3\\)wc1:*:*:*:*:*:*:*","matchCriteriaId":"238DCBE2-E511-42D1-B938-3FA15E4969E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(5.4\\)wc1:*:*:*:*:*:*:*","matchCriteriaId":"10065276-0C45-4B35-8ACC-9EB8A73E5739"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(6b\\):*:*:*:*:*:*:*","matchCriteriaId":"C575430A-762A-405F-95DA-92589BF4C611"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)db2:*:*:*:*:*:*:*","matchCriteriaId":"1AA412BD-1EFD-4FE2-AC6D-E9AC93B1F750"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)dc1:*:*:*:*:*:*:*","matchCriteriaId":"D9E45CDF-F745-4336-B5D2-0917C66C1D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"AE808362-AFA6-4270-8ECE-8FFD10EE3678"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)sc:*:*:*:*:*:*:*","matchCriteriaId":"6CA0B5C8-9BB3-40BC-ADED-3A21DD019A83"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"FA654CE6-82C3-43D0-BAED-70E88A740BF1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"1720AE47-5ED4-4E5D-AF25-F9FD7E43F6D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)wx5\\(15a\\):*:*:*:*:*:*:*","matchCriteriaId":"2318131B-BA10-4C44-8F90-215CDA28576D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xe:*:*:*:*:*:*:*","matchCriteriaId":"E83EFCCC-D01E-4F0E-9990-1F323167B430"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xe2:*:*:*:*:*:*:*","matchCriteriaId":"9E737A2B-8B1A-4F53-B1AA-ECB354D10D50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xf:*:*:*:*:*:*:*","matchCriteriaId":"0C977C71-7F61-444C-A0E4-14E5269E6B4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xf1:*:*:*:*:*:*:*","matchCriteriaId":"533BD959-48CF-4664-B4EC-37314AB93EFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"5EC5E6E9-E639-424B-963D-2760B2C38D8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xk3:*:*:*:*:*:*:*","matchCriteriaId":"4ED4869D-EB53-4A7B-A630-69B8D76D48DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7\\)xv:*:*:*:*:*:*:*","matchCriteriaId":"9B5AE2F8-53B5-4B13-A1DB-57E2531943A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7.4\\)s:*:*:*:*:*:*:*","matchCriteriaId":"EB26AA22-D05C-4B88-8E1B-63A8EFE6A841"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"D6833BBD-CB8C-40E3-BCB1-193E0E03A95F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"387FCCC1-B05D-4493-9F05-BAC5A0E57F15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"33E0F459-8A71-4FAE-BE7A-6C56E28988BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8.0.2\\)s:*:*:*:*:*:*:*","matchCriteriaId":"F7976536-FD4C-4AE7-8838-6E28E0CFE740"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8.3\\)sc:*:*:*:*:*:*:*","matchCriteriaId":"D7D2F695-9A42-4425-8CA6-63CB8E99F893"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(8a\\):*:*:*:*:*:*:*","matchCriteriaId":"4E63F87A-7BBB-4619-935E-F1F0C3C7E322"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"1B6ABDAE-182B-4367-80B6-B8C8ABF92059"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\)s:*:*:*:*:*:*:*","matchCriteriaId":"C4EB360F-7BAE-4BB5-BB55-E3FFC567A1E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"EAA03CF9-26C6-4621-B73C-EBABB20CB250"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(9a\\):*:*:*:*:*:*:*","matchCriteriaId":"0B94014A-8415-4174-AF4B-C9026C6EC559"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"14E5113C-945B-40CB-9F5C-0B7063704364"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5:*:*:*:*:*:*:*","matchCriteriaId":"75528B66-3966-4299-B9BD-69B039AB2F02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18f\\):*:*:*:*:*:*:*","matchCriteriaId":"09DFBF77-BBE3-41BA-A6C6-32DD555F0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10\\)w5\\(18g\\):*:*:*:*:*:*:*","matchCriteriaId":"77D178AF-15CB-4352-8193-741F8B49688A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(10a\\):*:*:*:*:*:*:*","matchCriteriaId":"1863F9E2-9FFB-4C19-92E3-15DD9ED72608"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(11\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"403EE717-FD69-405C-9544-6349CBE09D1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(11\\)st4:*:*:*:*:*:*:*","matchCriteriaId":"4CF987B2-BA35-4933-85F7-7F3F2C732961"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(11a\\):*:*:*:*:*:*:*","matchCriteriaId":"D77A942A-4A2C-4A87-A866-12B758DB645B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(12\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"07E0B16B-D4C1-4140-830F-4F5C0D90AD42"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(12a\\):*:*:*:*:*:*:*","matchCriteriaId":"2B3C8355-42F3-43DE-A2D9-0B77138461FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"C9BD6B1C-DDA0-4C64-84C5-68F51BFAB457"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)w5\\(19c\\):*:*:*:*:*:*:*","matchCriteriaId":"B92AE5F7-DD9A-486C-AB39-580E8E29EB75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13\\)wt6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"45246611-F8E6-4DD5-967B-815048CCAC65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"3572607D-5E92-4706-8B83-C5CF01E63416"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)s7:*:*:*:*:*:*:*","matchCriteriaId":"5D7B8E04-A044-4A32-ADB7-9C25B32E9F1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)st:*:*:*:*:*:*:*","matchCriteriaId":"353010B4-3E37-4451-9B17-EF5701DCE9B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)st3:*:*:*:*:*:*:*","matchCriteriaId":"828D84E5-E8E4-4425-9E35-B1EBDBE245BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14\\)w5\\(20\\):*:*:*:*:*:*:*","matchCriteriaId":"4BC109F5-0907-4CDB-90BD-61788921DABC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(14a\\):*:*:*:*:*:*:*","matchCriteriaId":"279DBE65-0402-4205-8820-48EB20386DB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)s3:*:*:*:*:*:*:*","matchCriteriaId":"9AC97D92-C82C-4CBF-93E3-4215B11FD896"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15\\)s6:*:*:*:*:*:*:*","matchCriteriaId":"295B139A-50F6-48E7-B42D-9A53BCA3777F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(15a\\):*:*:*:*:*:*:*","matchCriteriaId":"6E93E4A5-6D2B-4E79-B713-7CA1BEE0E36C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)s8:*:*:*:*:*:*:*","matchCriteriaId":"2657AD4D-F324-4527-9C4F-360946FE0D89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)sc3:*:*:*:*:*:*:*","matchCriteriaId":"DD766E23-7CA6-4CC3-9CFF-4E81E370CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)st1:*:*:*:*:*:*:*","matchCriteriaId":"39C3D66E-C49F-4A41-B67E-D9DE768356FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16\\)w5\\(21\\):*:*:*:*:*:*:*","matchCriteriaId":"09D35D67-529A-425D-800A-D986297D42C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16.06\\)s:*:*:*:*:*:*:*","matchCriteriaId":"AC8BD083-812F-414A-8E21-A8119D3ADE7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(16a\\):*:*:*:*:*:*:*","matchCriteriaId":"DD09CC38-FBBD-44DD-8322-F642DC8B6F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"6342713F-C4C6-4451-9637-B744311EC287"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)s:*:*:*:*:*:*:*","matchCriteriaId":"F95185E5-65CF-478B-B450-2FA9C05E4A13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"D281BAB0-994A-418A-8FB9-C8F6509DC56E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)sl2:*:*:*:*:*:*:*","matchCriteriaId":"C4444CF9-66F8-4941-8300-4547BA7C164B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)sl6:*:*:*:*:*:*:*","matchCriteriaId":"33C204A1-935D-4CFF-8FBA-9A6E37597E6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)st1:*:*:*:*:*:*:*","matchCriteriaId":"6CA42C30-EB70-4030-9D02-0F3635C980EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17\\)st5:*:*:*:*:*:*:*","matchCriteriaId":"4A4EE26C-9B9D-41B5-9E0D-46D599EDE8B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(17a\\):*:*:*:*:*:*:*","matchCriteriaId":"A3F7B649-548F-46B5-BC0C-AB4013CF290F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)s:*:*:*:*:*:*:*","matchCriteriaId":"3E4D37B0-460F-4F16-B4F4-33A4DB80FC79"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"6018992E-1FB3-4ED8-ADC3-3BA49B76165D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)st1:*:*:*:*:*:*:*","matchCriteriaId":"2BEE0CBD-9810-46D0-87B8-0B46926C2F67"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18\\)w5\\(22b\\):*:*:*:*:*:*:*","matchCriteriaId":"C6710AB1-42BC-4612-99EB-4E3C9A811E30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(18b\\):*:*:*:*:*:*:*","matchCriteriaId":"8BDD3722-C5FC-4AD0-83D3-7E5D2F4B51E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sx:*:*:*:*:*:*:*","matchCriteriaId":"5C11A2BE-19E7-4148-B3CC-B4956B07273E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0w5:*:*:*:*:*:*:*","matchCriteriaId":"5A92DCEF-C205-4145-91B0-DB9991130457"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wc:*:*:*:*:*:*:*","matchCriteriaId":"C8B5CC91-144D-4818-871E-E6120A7E1050"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wt:*:*:*:*:*:*:*","matchCriteriaId":"23E5F43E-20DA-4C5C-B8C5-1A5512CA07B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0wx:*:*:*:*:*:*:*","matchCriteriaId":"C6333F9A-2605-41EE-9AB4-1D04C5825BAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*","matchCriteriaId":"DDBE69A0-85B1-423B-88FB-CDA80E9186EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*","matchCriteriaId":"E2606209-91BE-4BEB-A163-0D3873A033FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*","matchCriteriaId":"4D0082D5-CE3E-433A-84E9-1311C8B7899A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e:*:*:*:*:*:*:*","matchCriteriaId":"D0C3B6E2-3D33-457E-B85D-8C2FC9DA2FE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"C41AB141-A566-4738-8E07-E6410590FB0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e2:*:*:*:*:*:*:*","matchCriteriaId":"F074DF74-81FA-4F09-A6E5-18DD9A4E76C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"E4041EB0-F402-4C01-9337-212E3E461AF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"0DEB16EF-D0C1-4C56-85B1-3C07D8CFD493"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec1:*:*:*:*:*:*:*","matchCriteriaId":"DFCFD88F-4320-4F4F-9CAD-BA8A5AA5D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"379E0F70-EE01-48F9-A4F0-BFCF9BDAB4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew1:*:*:*:*:*:*:*","matchCriteriaId":"17CD0C63-7500-4A32-BD85-27E6C2F70FB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ax:*:*:*:*:*:*:*","matchCriteriaId":"442972CD-50D3-4C46-AB73-44AED94B9F88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ay:*:*:*:*:*:*:*","matchCriteriaId":"19077C39-A27B-4EC3-A882-9AC826E61570"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ev:*:*:*:*:*:*:*","matchCriteriaId":"896A71EC-9508-406F-8DE8-58953D9A30FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ey:*:*:*:*:*:*:*","matchCriteriaId":"C6330829-9A7B-479D-B38B-BC64148EC172"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1m:*:*:*:*:*:*:*","matchCriteriaId":"E6B13CDA-C376-412A-AF5D-8FC25C74A0A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*","matchCriteriaId":"8A11AF3F-C82F-4431-9CF1-84FDAD388D04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yh:*:*:*:*:*:*:*","matchCriteriaId":"F88DCCDE-6A81-473F-B4FE-95A84F8DF964"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yj:*:*:*:*:*:*:*","matchCriteriaId":"4F7C6FB8-8393-4916-BB2B-3097B1995C23"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/848944","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6178","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/848944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1435","sourceIdentifier":"cve@mitre.org","published":"2001-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/880624","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/165535","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/165535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6157","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/880624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/165535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/165535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1436","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"New version DS1963S corrects problem.","cveTags":[],"descriptions":[{"lang":"en","value":"Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:dallas_semiconductor:ibutton:ds1991:*:*:*:*:*:*:*","matchCriteriaId":"A1EDB796-0619-47EB-ADB0-927D23C18515"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2001/a011801-1.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/178560","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10625","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2001/a011801-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/178560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1437","sourceIdentifier":"cve@mitre.org","published":"2001-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyscripts:easynews:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"333FB0B8-EBEE-4152-A18D-2FB6C3684E17"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/597795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3649","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7660","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/597795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1438","sourceIdentifier":"cve@mitre.org","published":"2001-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:palm:palm_os:*:*:*:*:*:*:*:*","matchCriteriaId":"643CFD6B-6D24-46AA-8EE3-8A6CB1AB4654"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:handspring:visor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9267E168-5B93-4BEC-A008-2C22C258C5B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:handspring:visor:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"402A23E1-9CEF-4F0A-9EF7-37898B1E1D9A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/222739","source":"cve@mitre.org","tags":["Exploit","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/82/222110","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10637","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/222739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/82/222110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1439","sourceIdentifier":"cve@mitre.org","published":"2001-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service (\"system availability\") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"}]}]}],"references":[{"url":"http://www.auscert.org.au/render.html?it=1176","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/268848","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/163910","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6111","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=1176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/268848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/163910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1440","sourceIdentifier":"cve@mitre.org","published":"2001-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*","matchCriteriaId":"43E38D56-80BA-460C-A296-ED7F506E4364"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003038","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY26302&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249491","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8269","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY26302&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/249491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1441","sourceIdentifier":"cve@mitre.org","published":"2001-07-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:visualage_for_java:3.5:*:pro:*:*:*:*:*","matchCriteriaId":"2E41F4EF-8843-4350-9812-8225AFFA568E"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/270083","source":"cve@mitre.org","tags":["Exploit","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6793","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/270083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6793","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1442","sourceIdentifier":"cve@mitre.org","published":"2001-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"INN 2.3.0 fixes problem.","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the \"news\" group to gain privileges via a long -c command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2480B45-A626-49F5-A48B-BA6DFAA4411B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21969A37-9F10-4D70-AC73-F3DB4D169AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*","matchCriteriaId":"94FD2948-EF52-464B-A605-DA3806037762"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1CC41E6D-B892-4888-8AEE-12287935F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7DED2B74-71B6-467C-8B07-F6F728AD7BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"862E58CF-7194-421D-9E7D-60DB8AA1F9CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0311.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1001353","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/943536","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/178011","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/2620","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6398","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0311.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1001353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/943536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/178011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/2620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1443","sourceIdentifier":"cve@mitre.org","published":"2001-08-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"A04BDD12-4421-49FA-9322-25F00B0402F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:5:*:*:*:*:*:*:*","matchCriteriaId":"41503E3C-1233-4DFB-9436-C17A4A336630"}]}]}],"references":[{"url":"http://josefsson.org/ktelnet/kerberos-telnet.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/390280","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10640","source":"cve@mitre.org"},{"url":"http://josefsson.org/ktelnet/kerberos-telnet.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/390280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1444","sourceIdentifier":"cve@mitre.org","published":"2001-08-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4:*:*:*:*:*:*:*","matchCriteriaId":"A04BDD12-4421-49FA-9322-25F00B0402F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:5:*:*:*:*:*:*:*","matchCriteriaId":"41503E3C-1233-4DFB-9436-C17A4A336630"}]}]}],"references":[{"url":"http://josefsson.org/ktelnet/kerberos-telnet.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/774587","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10640","source":"cve@mitre.org"},{"url":"http://josefsson.org/ktelnet/kerberos-telnet.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/774587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1445","sourceIdentifier":"cve@mitre.org","published":"2001-03-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to R5.0.8 to resolve the problem.","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in \"RCPT TO\" commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"13E85CA7-323F-4640-8D3C-42024A32F213"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EF6E13D4-7764-4A02-B599-B68BB45F4AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"55BC4294-9363-406C-8C64-964A95DA2052"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"F9C6D1AA-ABEE-4491-828F-3AE3E6D3A029"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DB86430D-3A2D-4A07-A94B-731640E24269"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"9D480F91-6FEE-4675-8AE8-B0A20803B382"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8434C566-4B7C-4F89-9AB3-2167090C29FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CCFECB42-36AE-43EC-9C9B-5A8C8D627C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_mail_server:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"74E507F9-92E5-4AF0-BA96-2D31B5D75E41"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21085603","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/176972","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6591","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21085603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/176972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1446","sourceIdentifier":"cve@mitre.org","published":"2001-09-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"It is reported that this issue is addressed in the Apple Mac OS X and Mac OS X Server release versions 10.2 and above. This is not confirmed.","cveTags":[],"descriptions":[{"lang":"en","value":"Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0085.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/177243","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3325","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7103","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/177243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1447","sourceIdentifier":"cve@mitre.org","published":"2001-10-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) \"recent items\" and (2) \"services\" menus, which causes the applications to run with root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0121.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0130.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-007.shtml","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/945747","source":"cve@mitre.org","tags":["Exploit","Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3439","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7303","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-007.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/945747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1448","sourceIdentifier":"cve@mitre.org","published":"2001-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:magic:edeveloper:*:*:enterprise:*:*:*:*:*","versionEndIncluding":"8.30.5","matchCriteriaId":"D993DF83-0C3E-43F5-BEB1-4F09DF0382EC"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/157795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246343","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10616","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/157795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/246343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1449","sourceIdentifier":"cve@mitre.org","published":"2001-11-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*","matchCriteriaId":"7A188467-3856-4599-A2CD-BD2655974B63"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"B58D49AA-BBA0-4496-9A52-3D5C9DAEB58B"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/913704","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8029","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/913704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1450","sourceIdentifier":"cve@mitre.org","published":"2001-05-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as \"/.#./\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/vuln-dev/2001/05/msg00029.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/199408","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10117","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/vuln-dev/2001/05/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/199408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1451","sourceIdentifier":"cve@mitre.org","published":"2002-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/887393","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6030","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10431","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/887393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1452","sourceIdentifier":"cve@mitre.org","published":"2001-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/109475","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6791","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3675","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/109475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/3675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1453","sourceIdentifier":"cve@mitre.org","published":"2001-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to the latest version of MySQL (3.23.33 or later) for fix.","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*","matchCriteriaId":"EA2F4EA8-64A3-4E11-A6A3-5179738157D2"}]}]}],"references":[{"url":"http://dev.mysql.com/doc/mysql/en/news-3-23-33.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/123384","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/161917","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6418","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/mysql/en/news-3-23-33.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/123384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/161917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1454","sourceIdentifier":"cve@mitre.org","published":"2001-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"3.23.32","matchCriteriaId":"FA7460C7-3377-46EE-8194-05DC7B98744E"}]}]}],"references":[{"url":"http://dev.mysql.com/doc/mysql/en/news-3-23-33.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/367320","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/161917","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6419","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/mysql/en/news-3-23-33.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/367320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/161917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1455","sourceIdentifier":"cve@mitre.org","published":"2001-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:siteminder:3.6:*:*:*:*:*:*:*","matchCriteriaId":"2837196C-771B-46EA-9176-D450C6046503"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:siteminder:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0D23E120-0D4A-426E-84B9-075EF715E3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:siteminder:4.5:*:*:*:*:*:*:*","matchCriteriaId":"DAF8763D-ED1C-4BE1-9E59-DF61D865E4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:siteminder:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F94E338A-2DC5-4A63-A940-1C666024F694"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/837419","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10497","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/837419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1456","sourceIdentifier":"cve@mitre.org","published":"2001-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:webshield_smtp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4DB55CC6-B578-4D2C-8AD8-3913DF079A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:webshield_smtp:4.1:*:*:*:*:*:*:*","matchCriteriaId":"ABCB467C-524E-4365-9805-170B7CF5C109"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:4.2:*:*:*:*:*:*:*","matchCriteriaId":"342EA025-24C8-440F-9D63-B6808198C444"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:unix_5.0:*:*:*:*:*:*:*","matchCriteriaId":"C124496E-66B9-4D3B-B503-D581DD682AE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:unix_5.5:*:*:*:*:*:*:*","matchCriteriaId":"731DA8F0-EE5F-4002-A26C-D6C19CC22647"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:gauntlet_firewall:unix_6.0:*:*:*:*:*:*:*","matchCriteriaId":"6E3C4FFE-CF16-4753-8D1E-7B39212BA999"},{"vulnerable":true,"criteria":"cpe:2.3:h:pgp:e-ppliance_300:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5ED73199-35D9-41B2-967B-4F1005760A50"},{"vulnerable":true,"criteria":"cpe:2.3:h:pgp:e-ppliance_300:1.5:*:*:*:*:*:*:*","matchCriteriaId":"892C2AA4-AC22-499F-8352-910142836135"},{"vulnerable":true,"criteria":"cpe:2.3:h:pgp:e-ppliance_300:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F596836C-32B7-4BEE-99F1-161A82E35EA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:network_associates:mcafee_e-ppliance:100_series:*:*:*:*:*:*:*","matchCriteriaId":"0B1CD2D8-D04B-4D21-B7FF-059007DEC0B3"},{"vulnerable":true,"criteria":"cpe:2.3:h:network_associates:mcafee_e-ppliance:120_series:*:*:*:*:*:*:*","matchCriteriaId":"82D3B1B4-4D4A-4208-BF38-DD7C9F4BA48C"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011104-01-I","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-2001-25.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/206723","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3290","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7088","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20011104-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cert.org/advisories/CA-2001-25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/206723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1457","sourceIdentifier":"cve@mitre.org","published":"2002-01-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:2000lep5:*:*:*:*:*:*:*","matchCriteriaId":"7FEB8279-507E-4DD5-A738-3CCF4CD81CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nobreak_technologies:crazywwwboard:2000p4:*:*:*:*:*:*:*","matchCriteriaId":"B57DFD8F-1B24-4D94-AE2E-2BD4198479A0"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/229955","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/173050","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10110","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/229955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/173050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1458","sourceIdentifier":"cve@mitre.org","published":"2001-10-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains \"../\" (dot dot) sequences and a null character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:enhancement_pack:*:*:*:*:*","matchCriteriaId":"E7F809F7-C72F-4869-BE95-EE8BF5F0E111"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/220667","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2960443","source":"cve@mitre.org"},{"url":"http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/advisories_template.htm%3Findexid%3D12","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/341539","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.novell.com/coolsolutions/gwmag/features/a_webaccess_security_gw.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7287","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/220667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/servlet/tidfinder/2960443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/advisories_template.htm%3Findexid%3D12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/341539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.novell.com/coolsolutions/gwmag/features/a_webaccess_security_gw.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1459","sourceIdentifier":"cve@mitre.org","published":"2001-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F2EDC0-3189-4523-882B-9188C852F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2991C07-5486-4590-A74E-46A379DD3339"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EB9BE06-0A36-4853-ADF4-9C1A1854278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC57F38-6545-497B-B6DA-FCAF51755988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*","matchCriteriaId":"EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99324968918628&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/797027","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2917","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6757","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=99324968918628&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/797027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1460","sourceIdentifier":"cve@mitre.org","published":"2001-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.62:*:*:*:*:*:*:*","matchCriteriaId":"DB291E9E-3002-4A68-A3E8-B3A6FF4D4E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.63:*:*:*:*:*:*:*","matchCriteriaId":"8738C97F-A6A7-4EC6-84A6-D38A7D2E4E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DD378628-2AA0-4244-A4D7-8591BEB7A926"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/921547","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3435","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7280","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/921547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1461","sourceIdentifier":"cve@mitre.org","published":"2001-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \\.. sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rsa:securid:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A00A9D51-90B1-4D58-839F-AD93AD015B80"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/348040","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7397","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/348040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1462","sourceIdentifier":"cve@mitre.org","published":"2001-10-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rsa:securid:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A00A9D51-90B1-4D58-839F-AD93AD015B80"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/609840","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3462","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7399","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/609840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1463","sourceIdentifier":"cve@mitre.org","published":"2001-11-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) authentication is enabled, which allows remote attackers to sniff passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0CB703F7-4806-4E3F-850E-ACC127892899"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"D6E3F784-86CB-46FC-97FB-1F43F140C9ED"}]}]}],"references":[{"url":"http://securitytracker.com/id?1002882","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/279763","source":"cve@mitre.org","tags":["Exploit","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7925","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1002882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/279763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1464","sourceIdentifier":"cve@mitre.org","published":"2001-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_reports:*:*:*:*:*:*:*:*","matchCriteriaId":"83BE8A19-C454-4594-B168-39616DE7CCFA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/403307","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7928","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/403307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1465","sourceIdentifier":"cve@mitre.org","published":"2002-02-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:*:*:*:*:*:*:*:*","matchCriteriaId":"ED3FB3DC-7354-4118-A63C-B759F80E8E04"}]}]}],"references":[{"url":"http://securitytracker.com/id?1001801","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/139315","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://securitytracker.com/id?1001801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/139315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2001-1466","sourceIdentifier":"cve@mitre.org","published":"2001-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.1","matchCriteriaId":"00C43052-CBB3-440C-8872-88D6380F8BF8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/216227","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10111","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/216227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1467","sourceIdentifier":"cve@mitre.org","published":"2001-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:don_libes:expect:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"F981BF07-D0F3-48D8-88A9-ABD67ACE48E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0173.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0192.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1001303","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/527736","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2632","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6382","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0173.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-04/0192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1001303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/527736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6382","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1468","sourceIdentifier":"cve@mitre.org","published":"2001-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.11_beta:*:*:*:*:*:*:*","matchCriteriaId":"039E1A02-C2D5-44EE-BF21-5534DE5BF965"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.12_beta:*:*:*:*:*:*:*","matchCriteriaId":"317871E0-8C5F-4F23-A42E-A7CCC4CC4228"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.13_beta:*:*:*:*:*:*:*","matchCriteriaId":"725E97D6-D50A-4301-A9CA-84BEE2E01997"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.14_beta:*:*:*:*:*:*:*","matchCriteriaId":"A5514AF7-1F42-43A7-A2C3-21A4B48F316A"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.15_beta:*:*:*:*:*:*:*","matchCriteriaId":"227194A8-E005-41A4-A31F-275B401141C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.16_beta:*:*:*:*:*:*:*","matchCriteriaId":"3CF7AC7E-1DCD-40D1-818E-BBD8701988E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.17_beta:*:*:*:*:*:*:*","matchCriteriaId":"80661A8D-D2A7-4CE5-A1C0-6B07E9C47751"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.18_beta:*:*:*:*:*:*:*","matchCriteriaId":"3DDBE8FF-3A12-4EAE-BC01-F79BE6E1941E"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.19_beta:*:*:*:*:*:*:*","matchCriteriaId":"A40AC697-4EC4-4286-A53C-6B9BD1676B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.20_beta:*:*:*:*:*:*:*","matchCriteriaId":"391C1EB3-4EE8-4FEC-9F72-AADF62EFB6E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.21_beta:*:*:*:*:*:*:*","matchCriteriaId":"5563861B-AFFE-4729-9AA1-86673C66D0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.22_beta:*:*:*:*:*:*:*","matchCriteriaId":"8E7DC8AC-BE3C-4ED0-AB37-3FC58130FCA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.23_beta:*:*:*:*:*:*:*","matchCriteriaId":"13436D19-DC78-426D-835E-C83476BC7B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:secure_reality:phpsecurepages:0.24_beta:*:*:*:*:*:*:*","matchCriteriaId":"DB5EBCFD-4E69-40EB-AAA8-39BB988E9958"}]}]}],"references":[{"url":"http://securitytracker.com/id?1001408","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/391347","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2970","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6774","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1001408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/391347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/2970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1469","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/25309","source":"cve@mitre.org","tags":["Exploit","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6449","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/25309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1470","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check (CRC) to match the modifications to the message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/315308","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6472","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/315308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1471","sourceIdentifier":"cve@mitre.org","published":"2001-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-665"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.0","matchCriteriaId":"4176B2DC-A6FF-4A1C-ADC4-39F1D403FD73"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/920931","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3167","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6944","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/920931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1472","sourceIdentifier":"cve@mitre.org","published":"2001-08-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E3575646-AF8E-4D33-97DE-E6EA468D9973"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/314347","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/201715","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3142","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6944","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/314347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/201715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1473","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/684820","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6603","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/684820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1474","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/786900","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6604","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/786900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1475","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/665372","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6490","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/665372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1476","sourceIdentifier":"cve@mitre.org","published":"2001-01-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH before 2.0, with RC4 encryption and the \"disallow NULL passwords\" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user sessions with certain modifications, which trigger different messages depending on whether the guess is correct or not."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/565052","source":"cve@mitre.org","tags":["Exploit","Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6490","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/565052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1477","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:tuxedo:7.1:*:*:*:*:*:*:*","matchCriteriaId":"EC74F617-4CA9-4B0C-87C7-C49A73934CEE"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA00-08.jsp","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6326","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA00-08.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1478","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA04F71A-0CBA-4479-A5BA-58AED5F67B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.34/CSSA-2001-SCO.34.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3555","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7573","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.34/CSSA-2001-SCO.34.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1479","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:management\\+center:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B7F83FF5-AE3D-4172-9258-1280C6C7611D"}]}]}],"references":[{"url":"http://www.securiteam.com/unixfocus/6K00S203FC.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3763","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7756","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/6K00S203FC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1480","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:mac_os_runtime_for_java:2.2.4:*:java:*:*:*:*:*","matchCriteriaId":"313DBD28-4706-4B25-9A1E-76F5EB47E6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2_07:*:linux:*:*:*:*:*","matchCriteriaId":"81AB2311-E954-4C9B-AA58-325BFE4AA462"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2_07:*:solaris:*:*:*:*:*","matchCriteriaId":"F025A5AC-B889-4222-892E-14E56511D53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2_07:*:windows:*:*:*:*:*","matchCriteriaId":"25384CDB-C72C-4E05-ADB5-7FFFB5F8573C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.2.2_07a:*:solaris:*:*:*:*:*","matchCriteriaId":"66F63131-9892-4245-B024-89B17654FA20"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_02:*:linux:*:*:*:*:*","matchCriteriaId":"74D5059B-CF4F-4EEE-99B4-B3052831F2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_02:*:solaris:*:*:*:*:*","matchCriteriaId":"633A6610-1537-480A-90F5-72234612FDC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.3.0_02:*:windows:*:*:*:*:*","matchCriteriaId":"1F601DB9-596C-4922-AAA1-601B7DF82AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2:*:linux_production:*:*:*:*:*","matchCriteriaId":"BDE26D56-B648-495A-8AE4-AA13E362672C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_003:*:linux_production:*:*:*:*:*","matchCriteriaId":"9FE7B776-637C-4A50-AD7E-6B8BA35CEA26"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_004:*:linux:*:*:*:*:*","matchCriteriaId":"4F4A92F0-E99D-4371-A057-DFE71B4022A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_005:*:linux:*:*:*:*:*","matchCriteriaId":"159943E1-6C93-4ABE-A0A0-A5BFC6C9675A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_006:*:linux:*:*:*:*:*","matchCriteriaId":"80D5D36B-BA95-4BB4-95BE-0A3211E0C24F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_007:*:linux:*:*:*:*:*","matchCriteriaId":"DD993FD0-D4AD-4508-8E61-4E7C01F80C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_007:*:solaris:*:*:*:*:*","matchCriteriaId":"11AB5D3D-87D3-4724-892F-44B899698078"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_07:*:solaris:*:*:*:*:*","matchCriteriaId":"412D11FD-D230-4514-A58A-266B6264C158"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2_007:*:windows:*:*:*:*:*","matchCriteriaId":"E1E759FE-328B-4F89-8E8D-7C8FE4863209"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:*:linux:*:*:*:*:*","matchCriteriaId":"C80967B2-546E-4C20-8B0D-2B9BA0D5FE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update1:linux:*:*:*:*:*","matchCriteriaId":"51BB57BF-7996-45FE-A406-309ADEC4A052"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update2:linux:*:*:*:*:*","matchCriteriaId":"6B3248A9-A42D-47D7-9EF6-A68BB3F55096"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update2:solaris:*:*:*:*:*","matchCriteriaId":"5F54BFB9-ACE4-4C70-9D5E-C964A37B49D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update2:windows:*:*:*:*:*","matchCriteriaId":"F2255FF1-CD7F-416E-82CE-727A0D9B9B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"D2E1380C-EE76-4BA9-8F88-BD5DA3A25BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6718104E-82B3-4160-9968-4980C309EC8B"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/10/msg00120.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/208&type=0&nav=sec.sba","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3617","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3441","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7333","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/10/msg00120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/208&type=0&nav=sec.sba","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1481","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xitami:xitami:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4","versionEndIncluding":"2.5","matchCriteriaId":"55683377-9A11-4C09-836A-72C525E9C7C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xitami:xitami:2.5:beta4:*:*:*:*:*:*","matchCriteriaId":"D0B58243-45AD-4E73-B790-557648A88D45"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/242375","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3582","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7600","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/242375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1482","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B4E7219-C05D-4269-990B-4B523564BF71"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/219178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3411","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/219178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1483","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nrl.navy:one-time_passwords_in_everything:2.4:*:*:*:*:*:*:*","matchCriteriaId":"30EBC335-4A60-4049-ACE6-43A5EF24ADB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nrl.navy:one-time_passwords_in_everything:2.32:*:*:*:*:*:*:*","matchCriteriaId":"B142FD11-18C8-4BF3-AC54-8F9563BDA558"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3549","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7572","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1484","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:adsl_modem_1000:*:*:*:*:*:*:*:*","matchCriteriaId":"85D2D0E8-EA9D-417C-A69A-12178DFFFB57"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_adsl_modem:home:*:*:*:*:*:*:*","matchCriteriaId":"24596FD2-53EA-4D6E-9307-926AEC83F447"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/211736","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6336","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2001-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/211736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1487","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"DD0BF3CB-FEE2-421E-9C60-5C2B74F4443B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/246069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7707","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/246069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1488","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet.  NOTE: a followup post suggests that this is not an issue in the daemon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_projects_network:open_projects_network_ircd:u2.10.05.18:*:*:*:*:*:*:*","matchCriteriaId":"759BA209-27FF-4CE6-9310-92FAEF9ADD18"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/219388/2003-04-27/2003-05-03/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/220380","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7283","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/219388/2003-04-27/2003-05-03/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/220380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1489","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/245152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3684","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1490","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/245152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3684","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1491","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:5.1.1:*:win32:*:*:*:*:*","matchCriteriaId":"9B7E4550-5179-4C4C-B028-F850690930A6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/245152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3684","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/245152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1492","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2023-11-07T01:55:44.577","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2001-1460.  Reason: This candidate is a refinement duplicate of CVE-2001-1460.  Notes: All CVE users should reference CVE-2001-1460 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2001-1494","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*","versionEndExcluding":"2.11n","matchCriteriaId":"A58DA98E-6F4E-4B84-B04A-0F9630FD91E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:cvlan:*:*:*:*:*:*:*:*","matchCriteriaId":"2FE82341-3E73-4F5B-BD9E-06C83F22E831"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:integrated_management_suit:*:*:*:*:*:*:*:*","matchCriteriaId":"6055A272-7156-4E26-8250-EC067C5B1864"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:interactive_response:*:*:*:*:*:*:*:*","matchCriteriaId":"6EE68944-C31D-4B49-BC8F-07944E0E82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_lx:*:*:*:*:*:*:*:*","matchCriteriaId":"A1169C59-054C-4EFB-B549-C0AB97F2DF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*","matchCriteriaId":"3D8F6982-2F4D-4D78-92C1-97689D59F3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*","matchCriteriaId":"EFB58B84-4CAA-4BE6-943D-2F53F7B8A568"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2001/Dec/0122.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Dec/0123.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/16785","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18502","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-782.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16280","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7718","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://seclists.org/bugtraq/2001/Dec/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/bugtraq/2001/Dec/0123.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/16785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-782.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1495","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freshmeat:network_query_tool:1.0:*:*:*:*:*:*:*","matchCriteriaId":"96449604-EE4B-4D7D-820B-9EF64BCE331E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freshmeat:network_query_tool_phpnuke:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F39A3F07-7032-4FFF-8C21-2F16333021F4"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-10/0179.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3455","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7322","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-10/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1496","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme:thttpd:*:*:*:*:*:*:*:*","versionStartIncluding":"1.95","versionEndIncluding":"2.20","matchCriteriaId":"EB1BE21D-3776-41F1-9055-AFC420B5348B"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/241310","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/241953","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3562","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7595","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/241310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/241953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1497","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:windows_nt:*:*:*:*:*","matchCriteriaId":"077B638C-F14D-4048-86C8-B62517C5182F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"ACC3A8B3-4E8C-46BD-965C-4EF655B9018D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"F7739338-DAE1-403F-B22C-2CFAC884E09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"D45C47A8-8B5F-4A49-8B36-FCBA09029375"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"0CFF1B46-BEDD-4D96-90EA-EE4376AFCAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"84730D4D-7887-4A64-8C76-F50C85309FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7592.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/241323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/241400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3563","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7592.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/241323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/241400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1498","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markus_kliegl:mod_bf:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0EABF78D-0575-40AC-9D28-0037D753DADF"}]}]}],"references":[{"url":"http://www.bugtraq.org/advisories/GOBBLES-15.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3713","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7730","source":"cve@mitre.org"},{"url":"http://www.bugtraq.org/advisories/GOBBLES-15.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1499","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"C65FC343-69C9-4B70-8149-42297B47C813"}]}]}],"references":[{"url":"http://www.osvdb.org/20210","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/222366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/222479","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3470","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7343","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/20210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/222366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/222479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1500","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CE2243B4-8E0C-46BC-A003-EF52C30A030E"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"33E7C8D7-5F57-4B49-B404-DB4DAE273926"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B8BBF8B2-02E6-4A53-A5FC-DA8D39171753"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C9280692-0AB9-4C1F-804C-CB088E5E4483"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F108D73C-1107-41DE-9DDB-505ABAF6E34D"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"BD7D3BDE-2200-4A5A-B149-DF4D52145A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"CE1015CB-9A33-48D5-861A-A1FC0D8D0FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre2:*:*:*:*:*:*:*","matchCriteriaId":"66C825FE-91EC-43A2-9EEA-65A31DF46570"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre3:*:*:*:*:*:*:*","matchCriteriaId":"1C563389-39DB-45BA-9C84-DD6837900440"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre4:*:*:*:*:*:*:*","matchCriteriaId":"E2ABE74B-3D17-45D9-A87A-CE562DDB4454"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre5:*:*:*:*:*:*:*","matchCriteriaId":"9166C42C-340D-4E7E-915C-BC2E4A373ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre6:*:*:*:*:*:*:*","matchCriteriaId":"25C586B4-670E-448B-8DFD-EE08F530BC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre7:*:*:*:*:*:*:*","matchCriteriaId":"C9AED91C-8428-40F0-9E47-FF3FE7CAB067"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre8:*:*:*:*:*:*:*","matchCriteriaId":"114C3C5D-B227-4DE7-8485-1AE4B5E5E232"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre9:*:*:*:*:*:*:*","matchCriteriaId":"0825C72A-DF19-44E4-9DCF-7F7047C1C582"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre10:*:*:*:*:*:*:*","matchCriteriaId":"CB8D658A-726D-4CB2-A07B-287A8EB3CB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2_pre11:*:*:*:*:*:*:*","matchCriteriaId":"C3ED09E8-2852-464B-9721-340F8F8C3B2E"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/212805","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3310","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7126","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/212805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7126","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1501","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) \"*/..\", (2) \"*/.*\", or (3) \".*./*?/\" sequences in the argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B8BBF8B2-02E6-4A53-A5FC-DA8D39171753"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/169395","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:005","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/169395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1502","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mountain_network_systems:webcart:8.4:*:*:*:*:*:*:*","matchCriteriaId":"322FA851-BF58-41B3-9F3E-9EE982CC0288"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/221688","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3453","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7315","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/221688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1503","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*","matchCriteriaId":"200D8CB2-0D52-40A8-9CD9-6E4513605201"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:x86:*:*:*:*:*","matchCriteriaId":"1C89DF53-2038-487A-A08F-8D705B7BFB27"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"C82E90A7-C5D7-4DFC-8FF5-4EFAF30C790B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:x86:*:*:*:*:*","matchCriteriaId":"5E938921-A452-4333-B587-31A1A5999747"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:x86:*:*:*:*:*","matchCriteriaId":"F4A01E03-2ACC-471E-B778-89EF01B23B92"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:x86:*:*:*:*:*","matchCriteriaId":"BC05D524-BAEF-450D-B904-C11C9DF1192D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0016.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-27116-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3457","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7334","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-27116-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1504","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:4.6:*:*:*:*:*:*:*","matchCriteriaId":"2A697B26-0600-416A-B0FA-BE031EB6D8A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1D5D749-546A-4655-A0BF-0A2D4E9F51A1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/221986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/222212","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3458","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7323","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/221986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/222212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1505","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinc:tinc:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"97B33973-2F05-43B8-B3C1-3E35AF66DE57"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinc:tinc:1.0pre4:*:*:*:*:*:*:*","matchCriteriaId":"52995A7F-640A-4953-BF49-3E4E21DA3F64"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/249142","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7870","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/249142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1506","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"B345284D-6842-47C0-B823-B5DDC30CC8A6"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/3618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3468","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7342","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1507","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of OpenSSH as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F639-31A0-4026-B6D4-51BA79FB1D20"}]}]}],"references":[{"url":"http://msgs.securepoint.com/cgi-bin/get/bugtraq0111/114.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7598.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata30.html#sshd","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3560","source":"cve@mitre.org"},{"url":"http://msgs.securepoint.com/cgi-bin/get/bugtraq0111/114.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7598.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/errata30.html#sshd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3560","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1508","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2C19F7B3-9043-4E53-90DE-92A4387858A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74C1B49F-9EEF-4857-B444-840F91E2B40A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0169CBF5-9301-42D2-A6DA-73393BD986D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6236FA51-E996-4E84-A8CC-2635A814CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"035FBF8B-EB91-4211-9979-8A9E913A54A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"BBC635C0-2B09-41F5-8160-365EC8642F89"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.38/CSSA-2001-SCO.38.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2597","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6413","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.38/CSSA-2001-SCO.38.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/2597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1509","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.20:*:*:*:*:*:*:*","matchCriteriaId":"6AB76FE0-BEF3-40D4-B362-0C95CA625A71"}]}]}],"references":[{"url":"http://hp.cso.uiuc.edu/ftp/pub/hp/patches/11.20/PHSS_25454","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7324.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3606","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3452","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5364","source":"cve@mitre.org"},{"url":"http://hp.cso.uiuc.edu/ftp/pub/hp/patches/11.20/PHSS_25454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7324.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1510","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) \"%3f.jsp\", (2) \"?.jsp\" or (3) \"?\" to the requested URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DA955BB7-2B8A-4534-A0F6-AEBD6875EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/243203","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7623.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22262&Method=Full","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/243636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3592","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/243203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7623.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22262&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/243636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1511","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) \"jsp%00\" or (2) \"js%2570\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7676.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22288&Method=Full","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7676.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22288&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1512","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7677.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22287","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3662","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7677.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1513","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7680.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22260&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3600","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7680.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22260&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1514","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to \"operating system,\" does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:4.5:*:*:*:*:*:*:*","matchCriteriaId":"C3B6D7A2-1B87-49B6-A677-221F3E823FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C0B3D372-BD14-4FF9-802B-116CAE39E596"}]}]}],"references":[{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=22263","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=22263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1515","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the directories to have less restrictive permissions than intended."},{"lang":"es","value":"Los clientes Macintosh, al utilizar volúmenes del sistema de archivos NT en Windows 2000 SP1, crean subdirectorios y modifican automáticamente los permisos NTFS heredados, lo que puede hacer que los directorios tengan permisos menos restrictivos que los previstos."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-281"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp1:*:*:*:*:*:*","matchCriteriaId":"A23A90DA-6E38-4479-926A-BD29F438F602"}]}]}],"references":[{"url":"http://securitytracker.com/id?1002626","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3479","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1002626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1516","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hans_wolters:phpreview:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2DAE2C55-FD61-4F23-A821-9EDC6AD2D98E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_wolters:phpreview:0.2:*:*:*:*:*:*:*","matchCriteriaId":"B89735E9-71B7-431A-9EBA-5D52D7A1935B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_wolters:phpreview:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B5E88994-8B51-4F17-B858-287C5197BE89"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_wolters:phpreview:0.9_final:*:*:*:*:*:*:*","matchCriteriaId":"AAEFC833-9776-4BCC-804F-F215CE49F4BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_wolters:phpreview:0.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"EBBE9775-F165-4999-8899-E829BE02D3E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hans_wolters:phpreview:0.9_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6C329042-E782-4F90-8396-190053C9A537"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7218.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3380","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7218.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1517","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command.  NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0041.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7531.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3184","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7531.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1518","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service.  NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/236113","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7533.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3291","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/236113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7533.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1519","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service.  NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/236111","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/240136","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7532.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3185","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/236111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/240136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7532.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1520","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:xircom_rex_6000:*:*:*:*:*:*:*:*","matchCriteriaId":"DD242E82-44BA-47C5-B20D-AA06B561F5D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:xircom_rex_6000:1:*:*:*:*:*:*:*","matchCriteriaId":"00390217-CCAE-47BE-BE3C-CCB6E8146142"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0187.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7584.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3574","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0187.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7584.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1521","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.62:*:*:*:*:*:*:*","matchCriteriaId":"DB291E9E-3002-4A68-A3E8-B3A6FF4D4E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.63:*:*:*:*:*:*:*","matchCriteriaId":"8738C97F-A6A7-4EC6-84A6-D38A7D2E4E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DD378628-2AA0-4244-A4D7-8591BEB7A926"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/245691","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/243545","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7654.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3609","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/245691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/243545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7654.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1522","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0848.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0851.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0848.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0851.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1523","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmozgateway:dmozgateway:*:*:*:*:*:*:*:*","matchCriteriaId":"3DCD5648-8489-43C8-9DB1-93BB58B1CD30"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0853.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0853.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1524","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CB52E20-9A87-4CE4-9E75-B0833F083845"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E87A3E6-935F-4569-8B5F-70A88442FD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D7E4C570-648F-48EF-B965-16C5878A0CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EC3CBB92-6A11-4B5B-A910-B0287AB12846"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C17255B-64E1-4DFF-8C21-8BB1D78A5256"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"E3ED3BFC-C8CF-4537-832C-0D00400AC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/245691","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/245875","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/243545","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/246603","source":"cve@mitre.org"},{"url":"http://prdownloads.sourceforge.net/phpnuke/PHP-Nuke-5.5.tar.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7654.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3609","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/245691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/245875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/243545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/246603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://prdownloads.sourceforge.net/phpnuke/PHP-Nuke-5.5.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7654.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1525","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a \"..\" in the cid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyscripts:easynews:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E3A6C02F-100C-4B36-BABE-4F9CFE9CB336"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7657.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3643","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7657.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1526","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyscripts:easynews:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E3A6C02F-100C-4B36-BABE-4F9CFE9CB336"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7658.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7658.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1527","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyscripts:easynews:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E3A6C02F-100C-4B36-BABE-4F9CFE9CB336"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7659.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7659.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1528","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amtote:homebet:-:*:*:*:*:*:*:*","matchCriteriaId":"D1BE5F47-8EFE-4AD2-9D5D-7FEA3D428C4F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7185.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3371","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7185.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1529","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string.  NOTE: due to lack of details in the vendor advisory, it is not clear if this is the same issue as CVE-2001-0779."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1530","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*","matchCriteriaId":"23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DBB86BC7-4A99-4C5B-9460-CDDA7C4E4041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0015.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6R00M0K2UC.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6R00M0K2UC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1531","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:claris_emailer:2.0v2:*:*:*:*:*:*:*","matchCriteriaId":"FC7BB675-7E52-471F-9756-2B5E0DCDC09C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0162.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7314.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3454","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7314.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1532","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_crossing:webx:*:*:*:*:*:*:*:*","matchCriteriaId":"7F5B5CB0-3176-4049-952A-1E6E9A56CFA1"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7458.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/223799","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7458.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/223799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1533","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets.  NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability.  Therefore this \"laws of physics\" issue might not be included in CVE"}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"80744BD9-85A9-4E33-8C35-59C8C112AC62"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00031.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7446.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3501","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7446.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1534","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication."}],"vendorComments":[{"organization":"Red Hat","comment":"This is not a security issue.  The mod_usertrack cookies are not designed to be used for authentication.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3.11","versionEndIncluding":"1.3.20","matchCriteriaId":"D967723E-8D18-4C07-BA5C-D484E68DCB11"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/7494.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3521","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/7494.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1535","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.0:*:*:*:*:*:*:*","matchCriteriaId":"77BC88D3-88A6-4C97-8463-F78BC0A9C4F1"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7493.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3519","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7493.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1536","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:audiogalaxy:audiogalaxy:-:*:*:*:*:*:*:*","matchCriteriaId":"794C95F8-73A1-486B-A37D-1F765E75A2D8"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/7621.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3587","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/7621.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1537","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default \"basic\" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symfony:twig:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.4","matchCriteriaId":"70F56BAA-E4DF-49D6-950D-073A728B97C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0245.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/7619.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3591","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/7619.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1538","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SpeedXess HA-120 DSL router has a default administrative password of \"speedxess\", which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:speedxess:ha-120_dsl_router:*:*:*:*:*:*:*:*","matchCriteriaId":"28986D90-5EC1-42CE-8456-5F758899A6E9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0032.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7655.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3617","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7655.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1539","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to cause a denial of service (crash) via the JavaScript settimeout function.  NOTE: the vendor could not reproduce the problem."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0008.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0034.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7661.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7661.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1540","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_f._mischler:iproute:0.973:*:*:*:*:*:*:*","matchCriteriaId":"ECF7DCCA-C4CD-4891-B1B7-930065D6872D"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_f._mischler:iproute:0.974:*:*:*:*:*:*:*","matchCriteriaId":"6E6DFB82-C820-403C-B58B-10104D8AD989"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_f._mischler:iproute:1.18:*:*:*:*:*:*:*","matchCriteriaId":"65803727-25BA-4880-AF76-EC89D1AFE95F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0047.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7664.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7664.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1541","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"99235B00-0050-42BF-99EF-FCDD72D8627D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"950CE88E-E396-4D32-AC9D-B76EB2B537C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7ECF99E9-1C3B-4D8F-A52E-28D0BFEB2E9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A37687D5-1239-474B-994C-C638AB9B105B"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E0D6DE57-1B0D-4F40-9E9F-CB72BAC0201F"},{"vulnerable":true,"criteria":"cpe:2.3:o:bsdi:bsd_os:4.2:*:*:*:*:*:*:*","matchCriteriaId":"7267B83B-1DC7-4A38-9338-B3BC3B2ECD74"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7633.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/243096","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7633.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/243096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1542","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5:*:*:*:*:*:*:*","matchCriteriaId":"27DD72FC-3FEF-43BC-8A68-3299213151F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5_mr1a:*:*:*:*:*:*:*","matchCriteriaId":"45CAE019-A5BE-451D-953C-CAA5DA703E70"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7637.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3601","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7637.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1543","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password \"pass\", which allows remote attackers to gain access to the camera."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:*:*:*:*:*:*:*:*","matchCriteriaId":"B973F5FD-AA57-498F-A3AA-A32EA6487738"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:*:*:*:*:*:*:*:*","matchCriteriaId":"EC6BCFB1-CD3D-4DAB-B8B4-BF3FDA37747E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:*:*:*:*:*:*:*:*","matchCriteriaId":"5B9B7A07-8E5D-4207-890A-01E3AEDD98F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:neteye_200:*:*:*:*:*:*:*:*","matchCriteriaId":"445FDFE9-2E6C-455F-9D04-26A733B70657"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:neteye_200\\+:*:*:*:*:*:*:*:*","matchCriteriaId":"47CA2A9C-44C9-4BBB-8281-B27466F71DF9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0050.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0061.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7665.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3640","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7665.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1544","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DA955BB7-2B8A-4534-A0F6-AEBD6875EB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7678.php","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22290&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3666","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7678.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22290&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1545","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7679.php","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22291&Method=Full","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3665","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7679.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22291&Method=Full","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1546","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mckesson:pathways_homecare:6.5:*:*:*:*:*:*:*","matchCriteriaId":"72D82B95-09B7-4129-A62C-6BD715240E9E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7682.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/244367","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3653","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/7682.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/244367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1547","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 6.0, with \"Do not allow attachments to be saved or opened that could potentially be a virus\" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7670.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/243869","source":"cve@mitre.org"},{"url":"http://www.windows-help.net/microsoft/oe6-attach.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7670.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/243869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.windows-help.net/microsoft/oe6-attach.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1548","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EDDB6978-A1C6-4DCD-86F0-55005D4CF292"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AE79F675-8577-45AC-A1EB-34C8805CC802"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6B7CA67C-34AC-4717-8E86-1A8D3D00046B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.4:*:*:*:*:*:*:*","matchCriteriaId":"2180CF4C-5124-4097-B7DE-C5C5F38E0B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.4:*:pro:*:*:*:*:*","matchCriteriaId":"161A802C-60DE-4A8E-BDBA-771C3123AEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8FE589FD-0C87-4057-BA5E-326727E0EDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.6:*:*:*:*:*:*:*","matchCriteriaId":"44DD1537-11DD-4C7F-810A-674245E7EAFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.6:*:pro:*:*:*:*:*","matchCriteriaId":"2F35E472-2E14-4F37-9D2C-BFBA543184AD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0065.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7671.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3647","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7671.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1549","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiny_software:tiny_personal_firewall:1.0:*:*:*:*:*:*:*","matchCriteriaId":"04AB01D0-A0F5-47C0-922E-A73108861B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiny_software:tiny_personal_firewall:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0E89C4E1-2590-4CCB-9777-75F6A9C9D630"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7671.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3647","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7671.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1550","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:centra:asp:*:*:*:*:*:*:*:*","matchCriteriaId":"3BC218AC-2C9D-4257-A85F-565BB2BF1829"},{"vulnerable":true,"criteria":"cpe:2.3:a:centra:centraone:5.2:*:*:*:*:*:*:*","matchCriteriaId":"31C45454-5953-4052-A878-E825CC35B4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:centra:smart_connect:cen5.2-03:*:*:*:*:*:*:*","matchCriteriaId":"DA90AE60-D4BA-43BD-AE1C-7C897FCB5273"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3704","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7820","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1551","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1552","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) message.  NOTE: multiple replies to the original post state that the problem could not be reproduced."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0133.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7318.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3442","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7318.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1553","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_passwd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be included in CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_california:seti_at_home:3.03:*:*:*:*:*:*:*","matchCriteriaId":"88D22B13-107D-4F86-A46A-010948903A05"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0662.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0662.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1554","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:430:*:*:*:*:*:*:*","matchCriteriaId":"D2A70A22-0453-4885-9FCB-F197EC844265"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0009.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2001-q4/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1555","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://securitytracker.com/id?1002732","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1004035","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-43929-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3522","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1002732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1004035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-43929-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1556","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep."}],"vendorComments":[{"organization":"Red Hat","comment":"This is a duplicate CVE name and is a combination of CVE-2003-0020 and CVE-2003-0083.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-532"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3.0","versionEndExcluding":"1.3.31","matchCriteriaId":"44B59C66-C5B3-4682-BB43-A390B4093828"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.49","matchCriteriaId":"28A956D5-032E-4DBE-8201-B60B44BDCF01"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0231.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://httpd.apache.org/docs/logs.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7363.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://httpd.apache.org/docs/logs.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7363.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1557","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY20486&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY23674&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY20486&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY23674&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1558","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"AB872377-FADD-4603-8B5E-B07FB623303F"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"12D3E0FE-0557-4B8F-A97B-1FBE6030C8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:snort:snort:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B1FB45D9-AD03-43F0-8349-48E22BEB4CCD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/snort/2001-11/0990.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/snort/2001-11/0990.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1559","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://monkey.org/openbsd/archive/tech/0112/msg00015.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.iss.net/security_center/static/7690.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://monkey.org/openbsd/archive/tech/0112/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.iss.net/security_center/static/7690.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2001-1560","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2001-10/0066.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7409.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2001-10/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7409.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2001-1561","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_bovey:xvt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"76A10EDF-B2B4-4E81-85EB-57B3960E0C7A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0024.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2001/dsa-082","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6781.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2955","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2964","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2001/dsa-082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6781.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1562","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bsd:nvi:1.79:*:*:*:*:*:*:*","matchCriteriaId":"BF2DFF58-054A-4F03-83D2-8EA18E932E4A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=100526142205694&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2001/dsa-085","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7317.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3456","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100526142205694&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2001/dsa-085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7317.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1563","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.  NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7079F63C-7CA8-4909-A9C8-45C4C1C1C186"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"B345284D-6842-47C0-B823-B5DDC30CC8A6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0062.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42892","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q4/0062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1564","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0000.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6810.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3416","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5159","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2001-q3/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6810.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1565","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7750.php","source":"cve@mitre.org"},{"url":"http://www.macsecurity.org/pipermail/macsec/2001-December/000299.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3753","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7750.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macsecurity.org/pipermail/macsec/2001-December/000299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1566","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vanessa:vanessa_logger:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"02DFC805-0681-422A-AEE7-A5E8975F450F"},{"vulnerable":true,"criteria":"cpe:2.3:a:verge:perdition:0.1.8:*:*:*:*:*:*:*","matchCriteriaId":"EAD6A7AA-F178-4850-82F5-7EA4219BB37C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3740","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vergenet.net/linux/perdition/string_format.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vergenet.net/linux/perdition/string_format.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1567","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of \"+\" characters before the .nsf file extension, which are converted to spaces by Domino."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3264F8E8-C40A-4C5C-BF2C-BD4690FE7EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF9513C4-3F02-4C32-AD91-C4A5941A5A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E570AFE6-CEAF-4F6F-81D3-CFFAAA8D5109"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CF6B527E-B1FE-41A3-A274-7BE2E893E6AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.4:*:solaris:*:*:*:*:*","matchCriteriaId":"1D2DC637-4AEA-412D-A2B2-723C4ED21C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"986B8670-2341-474D-8477-47627DF1ED02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"908E6F9A-FCE7-48C2-A307-057536944313"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.7:*:solaris:*:*:*:*:*","matchCriteriaId":"10D90491-68DD-44FA-9B5A-81CF19896F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"78DCE051-78E2-4F35-9598-98C19110ECE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A80A1E8B-43C8-449F-9B16-01F30D23E3D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F49E352F-35C5-4C9A-9B3D-C8C6FC128B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.9a","matchCriteriaId":"E3698BF6-D4A1-4247-9CB6-4259F2CE6F85"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101284222932568&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101285903120879&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101286525008089&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8072.php","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/papers/hpldws.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4022","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101284222932568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101285903120879&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101286525008089&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8072.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/papers/hpldws.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1568","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmg:wap_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"7E748076-109F-46E6-A699-8B784FBC4311"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0127.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6814.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-07/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/6814.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1569","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmg:openwave_wap_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"D4F6242C-FEE5-4124-BA47-64301E4DB56E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/6814.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/195619","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/6814.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/195619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1570","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user (self) multiple times, which causes other accounts to be locked out."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7731.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3717","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7731.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1571","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7732.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3720","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7732.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1572","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0057.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7267.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3418","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-10/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7267.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2001-1573","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.51:*:windows_nt:*:*:*:*:*","matchCriteriaId":"15B05F1A-7AA1-46E5-947B-C422F9618F9F"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00407.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00407.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1574","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5E5E6B2D-197D-4F4B-925D-789FCB916DDE"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00408.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00408.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1575","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:personal_web_sharing:1.1:*:*:*:*:*:*:*","matchCriteriaId":"98D20753-93D6-4500-BB3E-8EE5CEC0DEF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:personal_web_sharing:1.5:*:*:*:*:*:*:*","matchCriteriaId":"52CE7482-721A-4FFA-A5B0-7EBF258EE070"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:personal_web_sharing:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"BA86F3B2-2A28-4F99-A36B-FF7C3219EC2C"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00409.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/2945","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6759","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00409.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/2945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1576","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"42AA34B0-4A86-4864-8C10-456DDD152989"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00404.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00404.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1577","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA04F71A-0CBA-4479-A5BA-58AED5F67B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0017.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3646","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7666","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1578","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1579","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_unix:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"83279CFC-DE3C-494F-9498-8EF487EC2CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"710007F4-EF8B-4DCC-89E9-54A13DF9B153"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0020.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2001-1580","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via \"..\" sequences in the query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nombas:scriptease_webserver:4.30b:*:*:*:*:*:*:*","matchCriteriaId":"EC78FBFE-781E-4F99-B0A6-809324D3FDE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nombas:scriptease_webserver:4.30d:*:*:*:*:*:*:*","matchCriteriaId":"C8C55611-A2D5-4FEA-B4D9-065EB952EBB8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:sp2a:*:*:*:*:*:*","matchCriteriaId":"081C8B07-AB0F-43B4-8677-ABFBD315BB6B"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0204.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0218.html","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3715","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7726","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1581","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift_limited:mailsweeper:4.2:*:*:*:*:*:*:*","matchCriteriaId":"B2941670-8CE0-423D-A2EF-43C73C67FF61"}]}]}],"references":[{"url":"http://www.mimesweeper.com/support/technotes/notes/1102.asp","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6801","source":"cve@mitre.org"},{"url":"http://www.mimesweeper.com/support/technotes/notes/1102.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1582","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:unkown:x86:*:*:*:*:*","matchCriteriaId":"630E151B-FD9D-4C0F-A09F-16B9055E3913"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2001/Jul/0077.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2001/Jul/0091.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2001/Jun/0365.html","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5IP0O2A4KS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2931","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://seclists.org/bugtraq/2001/Jul/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2001/Jul/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2001/Jun/0365.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5IP0O2A4KS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/2931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2001-1583","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9","matchCriteriaId":"7B1F21FE-C4F7-4760-B565-32D4D679BC93"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=99929694701826&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/15131","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3274","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7087","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=99929694701826&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/15131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2001-1584","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_barretto:cardboard:2.4:*:*:*:*:*:*:*","matchCriteriaId":"834AB5E9-D63C-4286-BFB7-974617DBA870"}]}]}],"references":[{"url":"http://www.securiteam.com/unixfocus/5MP0M2K5FC.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3360","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7178","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5MP0M2K5FC.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2001-1585","sourceIdentifier":"cve@mitre.org","published":"2001-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"CDEF5203-9D6B-4431-BF0D-C81B1E250AEC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0159.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/bid/2356","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/advisories/ssh_bypass.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6084","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-02/0159.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/bid/2356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/advisories/ssh_bypass.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0001","sourceIdentifier":"cve@mitre.org","published":"2002-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list."},{"lang":"es","value":"Vulnerabilidad en el analizador de direcciones RFC822 de mutt (versiones 1.2.5.1 y anteriores y 1.3.x hasta la 1.3.35), permite que atacantes remotos puedan ejecutar comandos arbitrarios por medio de un comentario o frase mal terminado en la lista de direcciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5.1","matchCriteriaId":"7335B1D2-823F-404D-B6C8-7E789B20D4BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.25","matchCriteriaId":"9CEA8211-EF60-4538-A263-289B7EEEF230"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=100994648918287&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3778","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-096","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7759.php","source":"cve@mitre.org"},{"url":"http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-003.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3774","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=100994648918287&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7759.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0002","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad en el formateado de cadenas en stunnel anterior a la 3.22 cuando se usa en modo cliente para smtp, pop o nntp permite que servidores remotos maliciosos ejecuten código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.3:*:*:*:*:*:*:*","matchCriteriaId":"2E4A0103-713D-4E56-B32F-EB1649F26EE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.4a:*:*:*:*:*:*:*","matchCriteriaId":"7D009335-E83C-4B35-ADB0-CBD6B82C0EA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.7:*:*:*:*:*:*:*","matchCriteriaId":"185B6AF8-18E7-4E6A-A7B9-60DFB17F33E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.8:*:*:*:*:*:*:*","matchCriteriaId":"400FE849-D547-44DE-B06F-5B68E5B20E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.9:*:*:*:*:*:*:*","matchCriteriaId":"C236DC35-A2F7-47FB-AD51-17D2A0FD7DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.10:*:*:*:*:*:*:*","matchCriteriaId":"B256301B-9C6A-4BA6-8318-675C0EF4C316"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.11:*:*:*:*:*:*:*","matchCriteriaId":"EC33DAEE-8F51-404F-B5C4-B8A30B467E94"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.12:*:*:*:*:*:*:*","matchCriteriaId":"1FCDC66D-3BF5-4763-8877-38B0D3326E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.13:*:*:*:*:*:*:*","matchCriteriaId":"75772E28-BD93-4981-96FA-CDF41DAF65AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.14:*:*:*:*:*:*:*","matchCriteriaId":"2415230E-4F66-4DDE-9E34-F685E8F4085A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.15:*:*:*:*:*:*:*","matchCriteriaId":"5121749D-3E19-4A9B-8C2D-84420A4E289B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.16:*:*:*:*:*:*:*","matchCriteriaId":"6E14DE44-69E6-4D0E-AD06-A829AFCDE528"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.17:*:*:*:*:*:*:*","matchCriteriaId":"3D5B202D-D93D-4E33-BC9F-DA44B727C0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.18:*:*:*:*:*:*:*","matchCriteriaId":"CCC62D42-832D-4E6E-93D9-E7BA0CBC7799"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.19:*:*:*:*:*:*:*","matchCriteriaId":"B5D49F98-9A24-464A-8695-58218C14B3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.20:*:*:*:*:*:*:*","matchCriteriaId":"ADFFE78D-90EC-46C6-B215-2EADD9E0D146"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21:*:*:*:*:*:*:*","matchCriteriaId":"6132108C-C344-4ABC-AF40-1925830A6723"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21a:*:*:*:*:*:*:*","matchCriteriaId":"8362D330-E286-4534-8560-B4B38E21767F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21b:*:*:*:*:*:*:*","matchCriteriaId":"D0496D60-BE45-45FF-B360-60E59443DB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.21c:*:*:*:*:*:*:*","matchCriteriaId":"DA2EA0D4-05B6-4500-9374-74BBDAB6001F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.22:*:*:*:*:*:*:*","matchCriteriaId":"F16BDA03-BFAB-4839-A83A-370865928225"},{"vulnerable":true,"criteria":"cpe:2.3:a:stunnel:stunnel:3.24:*:*:*:*:*:*:*","matchCriteriaId":"EB5A2E06-A98E-409C-9A90-460AF4CCF101"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79A6E38E-9BC6-4CD7-ABC6-754C9DB07DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}],"references":[{"url":"http://marc.info/?l=stunnel-users&m=100869449828705&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/247427","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/248149","source":"cve@mitre.org"},{"url":"http://stunnel.mirt.net/news.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7741","source":"cve@mitre.org"},{"url":"http://marc.info/?l=stunnel-users&m=100869449828705&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/247427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/248149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://stunnel.mirt.net/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0003","sourceIdentifier":"cve@mitre.org","published":"2002-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system."},{"lang":"es","value":"Desbordamiento de buffer en el preprocesador de groff 1.16 y anteriores permite que un atacante obtenga privilegios de lpd en el sistema de impresión LPRng"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16","matchCriteriaId":"A1E11ADF-D0E7-49E9-B68E-A4A5BCFCD725"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/3793","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-012.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3869","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7881","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-012.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0004","sourceIdentifier":"cve@mitre.org","published":"2002-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap corruption vulnerability in the \"at\" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice."},{"lang":"es","value":"Corrupción de memoria en el comando \"at\" permite que usuarios locales ejecuten código arbitrario haciendo uso de un tiempo de ejecución mal escrito (lo que provoca que at libere la misma memoria dos veces)."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A218B67-B87B-4A5E-B9EF-EF39ADEAD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB41DE44-C3A1-4CC9-ACA7-4EC171D68910"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:ia-32:*:*:*:*:*","matchCriteriaId":"E9D468DB-C4AE-4ACB-B3B7-2FAEA90D6A49"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*","matchCriteriaId":"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*","matchCriteriaId":"613A22EC-D93C-48B0-B97C-3E0DDFBD0B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6EAAC51F-9DC5-4026-8147-1B74975D6183"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C2A9C005-4392-4C95-9B92-98EEC73EFE73"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F0297F56-5F41-48FD-AB47-36E3BD2AB7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"78D76664-F4AC-470A-9686-3F708922A340"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*","matchCriteriaId":"8A206E1C-C2EC-4356-8777-B18D7069A4C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*","matchCriteriaId":"6E2FE291-1142-4627-A497-C0BB0D934A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*","matchCriteriaId":"467A30EB-CB8F-4928-AC8F-F659084A9E2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"714C1439-AB8E-4A8B-A783-D60E9DDC38D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"62CAE5B0-4D46-4A93-A343-C8E9CB574C62"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:ppc:*:*:*:*:*","matchCriteriaId":"65CB09B5-0DE1-49AE-B87E-3C04EEA3E281"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*","matchCriteriaId":"0944FD27-736E-4B55-8D96-9F2CA9BB9B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*","matchCriteriaId":"373BB5AC-1F38-4D0A-97DC-08E9654403EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*","matchCriteriaId":"B5E71DA3-F4A0-46AF-92A2-E691C7A65528"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"1975A2DD-EB22-4ED3-8719-F78AA7F414B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"19F606EE-530F-4C06-82DB-52035EE03FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*","matchCriteriaId":"A0E896D5-0005-4E7E-895D-B202AFCE09A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*","matchCriteriaId":"5A8B313F-93C7-4558-9571-DE1111487E17"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101128661602088&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101147632721031&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3833","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3969","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-102","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.novell.com/linux/security/advisories/2002_003_at_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-015.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3886","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7909","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101128661602088&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101147632721031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.novell.com/linux/security/advisories/2002_003_at_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0005","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame)."},{"lang":"es","value":"Desbordamiento de buffer en AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, y otras versiones permite a atacantes remotos ejecutar código arbitrario mediante un argumento largo en una petición de juegos (AddGame)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E81E472E-45B5-465B-B2D7-40F906AC31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*","matchCriteriaId":"50A04B5F-F17B-4177-861B-66DFD4FBE225"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*","matchCriteriaId":"E80E2514-9F43-48FB-B55E-094F45088D7C"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=100998295512885&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/907819","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247944","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3769","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7743","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=100998295512885&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/907819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/247944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0006","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"74588BF3-4DA4-410B-8416-C90E7F446238"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"07D90F28-4BD2-4581-A8B7-ED90A9ECEF53"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101060676210255&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3806","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-005.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-099","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3830","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7856","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101060676210255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0007","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server."},{"lang":"es","value":"CGl.pl en Bugzilla anterior a la 2.14.1, cuando se usa LDAP, permite que atacantes remotos obtengan una conexión anónima con el servidor LDAP por medio de una petición que no incluye una clave, lo que provoca que se envíe una clave nula al servidor LDAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.1","matchCriteriaId":"F99F6759-911F-4616-B27E-0EF33A08F2D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=54901","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3792","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7812","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=54901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3792","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0008","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the \"who\" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi."},{"lang":"es","value":"Versiones anteriores a la 2.14.1 de Bugzilla permiten que un atacante remoto (1) falsee el comentario de un usuario por medio de una petición HTTP usando process_bug.cgi y el parámetro \"who\" en vez de una cokie de Bugzilla_login, o (2) envíe un bug como otro usuario, modificando el parámetro de enter_bug.cgi, el cual se pasa a post_bug.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.1","matchCriteriaId":"F99F6759-911F-4616-B27E-0EF33A08F2D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108385","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7804.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7805.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3793","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3794","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7804.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7805.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0009","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"show_bug.cgi in Bugzilla before 2.14.1 allows a user with \"Bugs Access\" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu."},{"lang":"es","value":"show_bug.cgi en Bugzilla anterior a la 2.14.1 permite que un usuario con privilegios de \"Bugs Access\" vea otros productos que no son accesibles al usuario, enviando un bug y leyendo el menú \"Producto\" resultante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.1","matchCriteriaId":"F99F6759-911F-4616-B27E-0EF33A08F2D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=102141","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7802.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3798","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=102141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7802.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0010","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the \"boolean chart\" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges."},{"lang":"es","value":"Bugzilla anterior a la 2.14.1 permite que usuarios remotos inyecten código SQL o creen ficheros u obtengan privilegios por medio de (1) el parámetro sql en buglist.cgi, (2) nombres de campos inválidos en la petición \"boolean chart\" en buglist.cgi,  (3) el parámetro mybugslink en userprefs.cgi, (4) una ID de bug mal escrita en el parámetro buglist en long_list.cgi y (5) el valor del parámetro en editusers.cgi, lo cual permite que los permisos de grupo sean modificados por permisos de grupo especial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.1","matchCriteriaId":"F99F6759-911F-4616-B27E-0EF33A08F2D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0052.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108812","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108821","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108822","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=109679","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=109690","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/bugzilla2.14to2.14.1.patch","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7807.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7809.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7811.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7813.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7814.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3801","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3802","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3804","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3805","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=108822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=109679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=109690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/bugzilla2.14to2.14.1.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7807.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7809.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7811.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7813.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7814.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0011","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login."},{"lang":"es","value":"Pérdida de información en doeditvotes.cgi en Bugzilla anterior a la 2.14.1 permite que los atacantes lleven a cabo más fácilmente sus ataques de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.1","matchCriteriaId":"F99F6759-911F-4616-B27E-0EF33A08F2D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=98146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"cve@mitre.org"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7803.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3800","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=98146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugzilla.org/security2_14_1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7803.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0012","sourceIdentifier":"cve@mitre.org","published":"2002-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available."},{"lang":"es","value":"Vulnerabilidades en un elevado número de implementaciones SNMP permite que atacantes remotos provoquen una denegación del servicio u obtengan privilegios debido al manejo del mensaje trap de SNMPv1 (como se ha demostrado por medio del suite PROTOS c06-SNMv1)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snmp:snmp:*:*:*:*:*:*:*:*","matchCriteriaId":"9249561D-5224-41C5-A5B4-29F2F63ED163"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-03.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/alerts/advise110.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/107186","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-163.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/4211","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5043","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A144","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A161","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/alerts/advise110.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/107186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/4211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0013","sourceIdentifier":"cve@mitre.org","published":"2002-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available."},{"lang":"es","value":"Vulnerabilidades en un elevado número de implementaciones SNMP permite que atacantes remotos provoquen una denegación del servicio u obtengan privilegios debido al manejo de los  mensajes GetRequest, GetNextRequest y Set Requests de SNMPv1 (como se ha demostrado por medio del suite PROTOS c06-SNMv1)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snmp:snmp:*:*:*:*:*:*:*:*","matchCriteriaId":"9249561D-5224-41C5-A5B4-29F2F63ED163"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-03.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/alerts/advise110.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/854306","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-163.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A87","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/alerts/advise110.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/854306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2001-163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A87","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0014","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.20:*:*:*:*:*:*:*","matchCriteriaId":"16766308-A2F2-4155-A4F7-702808CC9450"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.30:*:*:*:*:*:*:*","matchCriteriaId":"9F7C068F-1664-4022-B88D-E486EEDD501C"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.33:*:*:*:*:*:*:*","matchCriteriaId":"A3F37B4B-C812-46AD-A23B-3FE60D31587D"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101027841605918&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-009.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3815","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101027841605918&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0017","sourceIdentifier":"cve@mitre.org","published":"2002-04-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request."},{"lang":"es","value":"Desbordamiento de buffer en el demonio SNMP (snmpd) en SGI IRIX 6.5 a 6.5.15m permite a atacantes remotos ejecutar código arbitrario mediante mediante peticiones SNMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020201-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/alerts/advise113.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7846.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4421","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020201-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/alerts/advise113.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7846.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0018","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain."},{"lang":"es","value":"En Windows NT y Windows 2000, un dominio valido que recibe información de autorización de un dominio de confianza no verifica que el dominio de confianza es autoritativo para las SIDs listadas, lo que podría permitir a atacantes remotos ganar privilegios de administrador de dominio en el dominio confiante injectando SIDs de dominios no de confianza en los datos de autorización que vienen del dominio de confianza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3997","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8023","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0020","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options."},{"lang":"es","value":"Desbordamiento de buffer en el servicio de telnet en Windows 2000 y Interix 2.2 permite a atacantes remotos ejecutar código arbitrario mediante opciones de protocolo malformadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:interix:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D191C828-2312-4579-9910-511BB35FD4E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8094.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4061","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A424","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8094.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0021","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement."},{"lang":"es","value":"El comprobador de Identificación de Producto de red  en Microsoft Office v. X para Mac permite a atacantes remotos causar una denegación se servicio (caída) mediante un anunciamiento de producto malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*","matchCriteriaId":"1A57804E-CD79-4431-AA97-0F85C2CE20C1"}]}]}],"references":[{"url":"http://www.osvdb.org/2041","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4045","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-002","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0022","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated."},{"lang":"es","value":"Desbordamiento de buffer en la implementación de una directiva HTML en mshml.dll en Internet Explorer 5.5 y 6.0 permite ejecutar código arbitrario mediante una página web que especifica controles ActiveX en una forma que causa que 2 cadenas Unicode sean concatenadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101362984930597&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258614","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-04.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8116.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4080","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101362984930597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8116.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0023","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks."},{"lang":"es","value":"Internet Explorer 5.01, 5.5 y 6.0 permite a atacantes remotos leer ficheros arbitrarios mediante peticiones malformadas a la función GetObject(), lo que sortea algunas comprobaciones de seguridad de GetObject()"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3030","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3767","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7758","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0024","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download."},{"lang":"es","value":"El cuadro de diálogo de descarga de ficheros en Internet Explorer 5.0, 5.5 y 6.0 permite a un atacante usar los campos de cabecera HTML \"Content-Type\" y \"Content-Disposition\" para modificar como el nombre del fichero es mostrado, lo que podría engañar a un usuario para que piense que es seguro descargar el fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4087","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0025","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document."},{"lang":"es","value":"Internet Explorer 5.01, 5.5 y 6.0 no maneja apropiadamente la cabecera HTML \"Content-Type\", lo que permite a atacantes remotos modificar qué aplicación es usada para procesar un documento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/255767","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4085","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8118","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/255767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0026","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made."},{"lang":"es","value":"Internet Explorer 5.5 y 6.0 permite a atacantes remotos sortear las restricciones para ejecutar scripts mediante un objeto que procesa eventos asíncronos despues de que las comprobaciones de seguridad iniciales han sido hechas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4082","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A23","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A23","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0027","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the \"Frame Domain Verification\" vulnerability described in MS:MS01-058/CAN-2001-0874."},{"lang":"es","value":"Internet Explorer 5.5 y 6.0 permite a atacantes remotos leer ciertos ficheros y falsificar la URL en la barra de direcciones usando la función document.open() para pasar información entre dos marcos de distintos dominios. Es una nueva variante de la vulnerabilidad \"Verificación de dominio de marco\", descrita en Microsoft Security Bulletin MS01-058 / CAN-2001-0847."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.osvdb.org/3031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/246522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3721","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/246522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0028","sourceIdentifier":"cve@mitre.org","published":"2002-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2000.0a:*:*:*:*:*:*:*","matchCriteriaId":"1C7B95B0-8CCB-4561-B354-80925B9769D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2000.0b_build3278:*:*:*:*:*:*:*","matchCriteriaId":"9C1E49E4-1BB4-40BF-AB6F-829ACAEDC581"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*","matchCriteriaId":"2BEA5FE1-267D-41B3-AA41-794DA021C4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001b_build3636:*:*:*:*:*:*:*","matchCriteriaId":"B10F3133-2D77-4A16-9F16-766EB4B3C5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001b_build3638:*:*:*:*:*:*:*","matchCriteriaId":"E03F3686-071C-48E4-ABDD-BF68162CDC20"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101043894627851&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101043076806401&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-02.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/570167","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3813","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7743","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101043894627851&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101043076806401&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/570167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0029","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka \"LIBRESOLV: buffer overrun\" and a different vulnerability than CVE-2002-0684."},{"lang":"es","value":"Desbordamientos de búfer en la libreria de resolución de raíz DNS en ISC BIND 4.9.2 a 4.9.10, y otras librerías derivadas como BSD libc y GNU libc, permite a atacantes remotos ejecutar código arbitrario mediante respuestas de servidor DNS que disparan el desbordamiento en las funciones getnetbyname() y getnetbyaddr(). También conocidad como \"LIBRESOLV:desbordamiento de búfer. Es una vulnerabilidad distinta de CAN-2002-0684."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"6E820DA7-FF69-48AD-B031-3C583EFE3679"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"262EFABD-8349-4C34-8653-39767923C2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0064E411-C26F-4831-B7C4-63E2E1EF98DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"982BB8D9-F396-4D99-A130-A2D8A5E61E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"9CEBE5DC-7D81-404C-929A-B92951AADA14"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.0.23:*:*:*:*:*:*:*","matchCriteriaId":"BDC424CD-9B05-4643-9D05-A1ACC9B5E788"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.0.24:*:*:*:*:*:*:*","matchCriteriaId":"929C2102-C9DE-448D-B367-7FD90A238BC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.0.25:*:*:*:*:*:*:*","matchCriteriaId":"17D74044-DBBB-41CE-BA23-91F81FCB3050"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.0.26:*:*:*:*:*:*:*","matchCriteriaId":"DDABBB48-8C12-49FC-ADCF-2BF1907A2439"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.0.27:*:*:*:*:*:*:*","matchCriteriaId":"556BD271-D766-4D36-BB9E-AE7345023D76"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.0.30:*:*:*:*:*:*:*","matchCriteriaId":"267E0669-8D08-4874-B98C-49B6CF018C71"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"5F20757E-285F-46D1-B7B6-C0C90F0E3758"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"526601CE-5AE1-4AD4-896E-817A377F28C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"270D4B66-C834-4C9C-B7C3-FC8BE9128B2F"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10624.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/844360","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6186","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10624.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/844360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0031","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/137115","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4837","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/137115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0032","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274223","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9184.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/172315","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4838","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9184.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/172315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0033","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name."},{"lang":"es","value":"Desbordamiento de montón (heap) en la función cfsd_calloc de Solaris cachefsd permite a atacantes remotos ejecutar código arbitrario mediante una petición con nombres de directorio y de caché largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:sparc:*:*:*:*:*","matchCriteriaId":"258E6782-9672-427A-8C83-ECA6BC68C9DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:sparc:*:*:*:*:*","matchCriteriaId":"C67E67BE-A376-4034-B2DC-DC84E4F2B6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F830AE29-6AC0-4C78-A637-E69BA63FAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-11.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8999.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/635811","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4674","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8999.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/635811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0037","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object."},{"lang":"es","value":"Los servidores Lotus Domino 5.x, 4.6x y 4.5x permiten a atacantes evadir la lista acceso de autores y lectores de un objeto mediante una llamada a la API (interfaz de programación) de Notes que accede directamente al objeto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"A6F09DB5-5729-4040-A691-86A1AD036F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"4A19610B-083B-496B-86DA-AEBE30A726E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5:*:*:*:*:*:*:*","matchCriteriaId":"F0F527D9-8945-4C3E-8AFE-02A79F0A66E9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10095.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/657899","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10095.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/657899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2002-0038","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk."},{"lang":"es","value":"Vulnerabilidad en la función limitadora de cache en el demonio nsd de IRIX 6.5.4 hasta la 6.5.11 permite que atacantes remotos causen una denegación de servicio forzando que la caché ocupe todo el disco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020102-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020102-02-I","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020102-03-P","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3882","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7907","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020102-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020102-02-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020102-03-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0039","sourceIdentifier":"cve@mitre.org","published":"2002-03-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths."},{"lang":"es","value":"rpcbind en SGI IRIX 6.5 a 6.5.15f, y posiblemente en versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) mediante paquetes RPC malformados con longitudes inválidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0040","sourceIdentifier":"cve@mitre.org","published":"2002-03-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges."},{"lang":"es","value":"Vulnerabilidad en SGI IRIX 6.5.11 a 6.5.15f permite a usuarios locales producir volcados de núcleo (dump core) a aplicaciones con privilegios mediane la variable de entorno HOSTALIASES, que podría permitir a los usuarios ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8669.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4388","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8669.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0041","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump."},{"lang":"es","value":"Vulnerabilidad en Mail para SGI IRIX 6.5 a 6.5.15f, y posiblemente versiones anteriores, permite a usuarios locales y remotos causar un volcado del núcleo (core dump)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020401-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-067.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8835.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4499","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020401-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-067.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8835.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0042","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8839.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4511","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8839.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0043","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked."},{"lang":"es","value":"sudo 1.6.0 hasta 1.6.3p7 no limpia adecuadamente todo el entorno antes de llamar al programa de correo, lo cual podría permitir que usuarios locales obtengan privilegios de root (modificando las variables de entorno y cambiando el modo en que el programa es invocado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*","matchCriteriaId":"976B5923-1BCC-4DE6-A904-930DD833B937"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D5452DF1-0270-452D-90EB-45E9A084B94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"CBFD12E6-F92E-4371-ADA7-BCD41E4C9014"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"67FDF4FB-06FA-4A10-A3CF-F52169BC8072"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*","matchCriteriaId":"A5B29018-B495-482A-8FF7-66821A178F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*","matchCriteriaId":"38718561-70C7-4E0D-9313-87A5E82ED338"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*","matchCriteriaId":"D057064A-9B34-4224-97BA-4D5840A92BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*","matchCriteriaId":"E3C297DC-69B1-4BE6-A5EF-D320BD0CA968"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*","matchCriteriaId":"2F4C1FFB-F6AA-4DED-9C54-DCB274F59A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*","matchCriteriaId":"338A92AC-92D2-40BF-9FAC-884AF6F74D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*","matchCriteriaId":"26DB5610-03CE-425E-8855-70D5787029FE"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101120193627756&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-101","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-011.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-013.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3800","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/250168","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3871","source":"cve@mitre.org"},{"url":"http://www.sudo.ws/sudo/alerts/postfix.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7891","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101120193627756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/3800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/250168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sudo.ws/sudo/alerts/postfix.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0044","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files."},{"lang":"es","value":"Enscript 1.5.1 y anteriores permiten a usaurios locales sobreescribir ficheros arbitrarios del usuario Enscript mediante un ataque de enlaces simbólicos (symlink attack) en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:enscript:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"0D3BDB18-C459-4790-B0E1-2207C24C285F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-105","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-010.php3","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-012.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3818","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3920","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7932","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-010.php3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0045","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a \"replace\" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs."},{"lang":"es","value":"sldap en OpenLDAP 2.0 a 2.0.19 permite a usuarios locales, y a usuarios anónimos en versiones anteriores a 2.0.8, llevar a cabo una acción \"replace\" en controles de acceso sin valores, lo que causa que OpenLDAP borre atributos no mandatorios que de otra forma estarían protegidos por listas de control de accesso (ACL)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.19","matchCriteriaId":"5D5CCDD0-2D88-4E8A-AD04-7E6101F6690C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0:*:*:*:*:*:*:*","matchCriteriaId":"552F2E25-DDB8-49A6-844A-8520696DBE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-001.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000459","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:013","source":"cve@mitre.org"},{"url":"http://www.openldap.org/lists/openldap-announce/200201/msg00002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5395","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3945","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-020","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7978","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-001.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openldap.org/lists/openldap-announce/200201/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0046","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet."},{"lang":"es","value":"El kernel de Linux, y posíblemente de otros sistemas operativos, permite a atacantes remotos leer porciones de memoria mediante una serie de paquetes ICMP fragmentados que generan una respuesta ICMP de TTL Excedido (time-to-live) , que incluye porciones de memoria en el paquete de respuesta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://www.osvdb.org/5394","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/251418","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7998","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/251418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0047","sourceIdentifier":"cve@mitre.org","published":"2002-01-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet."},{"lang":"es","value":"El paquete CIPE VPN antes de 1.3.0-3 permite a atacantes remotos causar una denegación de servicio (caída) mediante un paquete malformado corto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:olaf_titz:cipe:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.0-3","matchCriteriaId":"81277075-6562-4BBC-B582-8A441128C9DF"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-104","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-007.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7883","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0048","sourceIdentifier":"cve@mitre.org","published":"2002-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server."},{"lang":"es","value":"Errores de mezclado de números con y sin signo en las funciones I/O de rsync, versiones 2.4.6, 2.3.2 y otras versiones, permite que atacantes remotos provoquen una denegación de servicio y ejecuten código arbitrario en el cliente o servidor rsync."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"138253E8-6342-4A88-89E6-B579782BC273"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"06A95770-7838-4D26-98BD-F3C0A264C431"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:alpha:*:*:*:*:*","matchCriteriaId":"C698EF8A-7EAE-4F23-87FD-57D143759BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:arm:*:*:*:*:*","matchCriteriaId":"10E06CAF-D555-46E4-A39B-D1C230E34CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:intel:*:*:*:*:*","matchCriteriaId":"CE361EF1-4FC5-4E0B-AC04-F7D46CBC46F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:m68k:*:*:*:*:*","matchCriteriaId":"542C7579-F7FE-4D66-9C39-4C89B502614F"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:ppc:*:*:*:*:*","matchCriteriaId":"A08984C1-C94B-44E7-BF5A-2C4FB74A448E"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:sparc:*:*:*:*:*","matchCriteriaId":"A289538D-27D6-430B-ABE4-A2D332491313"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"41681E68-E4D3-4466-8BAF-12F38D670C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9C472D33-56FC-4939-A800-00C319D44D45"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D57C7AF3-A648-44E3-9ABF-D546B34BDC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"FC163657-8FD5-4578-8452-49ABAA1121D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.0_1:*:*:*:*:*:*:*","matchCriteriaId":"734ABECE-06D5-43D7-96DD-9429BCAC3FB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"502E8AC0-7293-41A0-BA17-873DEE5133DB"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458","source":"cve@mitre.org"},{"url":"http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101223214906963&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101223603321315&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3839","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-106","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7993.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/800635","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1853.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-018.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3958","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101223214906963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101223603321315&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7993.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/800635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1853.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0049","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange Server 2000 System Attendant gives \"Everyone\" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys."},{"lang":"es","value":"Microsoft Exchange Server 2000 System Attendant da a el grupo \"Todos\" privilegios para modificar las claves del registro, lo que podría permitir a atacantes remotos leer o modifcar claves del registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"}]}]}],"references":[{"url":"http://www.osvdb.org/2042","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4053","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-003","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8092","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1022","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/2042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2002-0050","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data."},{"lang":"es","value":"Desbordamiento de buffer en el filtro ISAPI AuthFilter en Microsoft Commerce Server 2000 permite a atacantes remotos ejecutar código arbitrario mediante datos de autentificación largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"AF65806C-05BF-4EB7-976B-3346F2D64886"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4157","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-010","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0051","sourceIdentifier":"cve@mitre.org","published":"2002-04-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access."},{"lang":"es","value":"Windows 2000 permite a usuarios locales impedir la aplicación de nuevas configuraciones de política de seguridad de grupos abriendo los ficheros de política de grupos con acceso de lectura exclusivo."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/244329","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4438","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-016","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A38","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/archive/1/244329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A38","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-0052","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files."},{"lang":"es","value":"Internet Explorer 6.0 y anteriores no maneja adecuadamente VBScript en ciertas comprobaciones de seguridad de dominios, lo que permite a atacantes remotos leer ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003630","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/763","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4158","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-009","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0053","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.  NOTE: this candidate may be split or merged with other candidates.  This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available."},{"lang":"es","value":"Desbordamiento de buffer en el agente del servicio SNMP en Windows 95/98/98SE, y Windows NT4/2000/XP permite a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario mediante una petición de administración malformada. NOTA: Esta candidata puede ser separada o mezclada con otras candidatas. Esta y otras, especialmente CAN-2002-0012 y CAN-2002-0013, serán actualizadas cuando esté disponible información más detallada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012","source":"cve@mitre.org"},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0013","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-03.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/107186","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/854306","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A209","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A402","source":"cve@mitre.org"},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/107186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/854306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0054","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials."},{"lang":"es","value":"El servicio SMTP enMicrosoft Windows 2000 y Internet Mail Connector (IMC) en Exchange Server 5.5no maneja adecuadamente respuestas a autenticación NTLM, lo que permite a atacantes remotos hacer reenvío de correo mediante el servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-294"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"EC01670D-4550-4034-86A5-7879B6334241"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*","matchCriteriaId":"B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*","matchCriteriaId":"E3983529-F4E3-4883-97AF-5BFC87AC3E86"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp1:*:*:*:*:*:*","matchCriteriaId":"A23A90DA-6E38-4479-926A-BD29F438F602"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*","matchCriteriaId":"FF99A17F-9469-4937-A23B-FD5C8B37087B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101501580409373&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/4205","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101501580409373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/4205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0055","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request."},{"lang":"es","value":"El servicio SMTP en Windows 2000/XP Professional y Exchange 2000 permite a atacantes remotos provocar denegación de servico mediante un comando con una petición transferencia de datos malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-669"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"34300FD4-EC3B-4206-B6C0-1345F17EC5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"47132D0D-7691-40A3-A4BF-37D2ACE580C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp1:*:*:*:*:*:*","matchCriteriaId":"A23A90DA-6E38-4479-926A-BD29F438F602"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*","matchCriteriaId":"FF99A17F-9469-4937-A23B-FD5C8B37087B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:professional:*:*:*","matchCriteriaId":"1D003AE4-9788-46EB-9D0E-2B20F11BAC64"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101558498401274&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/8307.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4204","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101558498401274&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/8307.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2002-0056","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection."},{"lang":"es","value":"Desbordamiento de búfer enSQL Server 7.0 y 2000 permite a atacantes remotos ejecutar código arbitrario mediante un nombre largo de proveedor OLE DB a: (1) OpenDataSource o(2) OpenRowset en una conexión ad hoc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101422555428036&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101413924631329&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/619707","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4135","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-007","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A271","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101422555428036&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101413924631329&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/619707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0057","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source."},{"lang":"es","value":"El control XMLHTTP en Microsoft XML Core Services 2.6 y versiones posteriores no manejan adecuadamente el establecimiento de valores de la Zona de Seguridad del IE, lo cual permite a atacantes remotos la lectura arbitraria de ficheros especificando un fichero local como una fuente de datos XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F3293EF7-6545-467A-9A0F-A34F4C2141AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"73052210-0B42-46AA-9F28-AAE3E9B6DE87"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*","matchCriteriaId":"3C9B9BE3-6F83-469E-834F-3E00CFECD8E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101366383408821&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3032","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3699","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7712","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101366383408821&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0058","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK."},{"lang":"es","value":"Esta vulnerabilidad en el \"Java Runtime Enviroment\" (entorno de ejecución de Java, JRE), permite que sitios web maliciosos husmeen las sesiones de los clientes web, a través de un applet de Java que redirige la sesión a otros servidor. Esto se ha visto en (1)versiones de Netscape 6.0 hasta 6.1 y las anteriores a la 4.79, (2) Máquina Virtual de Microsoft (build 3802 y anteriores) usada en Internet Explorer 4.x y 5.x, y posiblemente otras implementaciones que usan versiones vulnerables de SDK y JDK."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*","matchCriteriaId":"FB10F6CD-E12B-469B-8634-2185172D97D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update13:*:*:*:*:*:*","matchCriteriaId":"2F99B49A-5A04-4EC8-ABD7-1BEAF620C0DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update7:*:*:*:*:*:*","matchCriteriaId":"D6A18370-9054-48F5-8766-D4A15F3A67C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.1.8:update13:*:*:*:*:*:*","matchCriteriaId":"672D93D0-49FF-4569-8FEC-91BC7F066CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.1.8:update7:*:*:*:*:*:*","matchCriteriaId":"02FD7344-2D3A-447F-90B1-7035ABB23152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2:update10:*:*:*:*:*:*","matchCriteriaId":"2F330C06-5DAA-433F-B1AB-71362E328095"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*","matchCriteriaId":"8966374E-426B-42A7-9D62-9A9A14032390"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.1.8_007:*:*:*:*:*:*:*","matchCriteriaId":"72893C77-F9B6-4828-AD2B-90B4E49F16B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.2.2_10:*:*:*:*:*:*:*","matchCriteriaId":"47627A45-F60E-46E5-BD9C-AE67CF6B5D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.2.2_010:*:*:*:*:*:*:*","matchCriteriaId":"9998A074-A556-4A8B-A0CE-3355AF78C3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3_02:*:*:*:*:*:*:*","matchCriteriaId":"E9005550-FC5E-4EB4-8261-BB9A48CF644B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101534535304228&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101534535304228&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0059","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a \"double free\"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data."},{"lang":"es","value":"El algoritmo de descompresión en la librería zlib 1.1.3 y anteriores, usada en muchas utilidades y paquetes, obliga a que la función \"inflateEnd\" libere cierta memoria más de una vez (hacer un \"free\" dos veces), lo cual permite que atacantes remotos y locales ejecuten código arbitrario a través de bloques deformados de datos comprimidos."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.3","matchCriteriaId":"312997A2-05E3-4B6E-B5B9-5058314FC4DC"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2002-07.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-122","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/368819","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-027.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4267","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8427","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2002-07.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/368819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0060","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions."},{"lang":"es","value":"El módulo de ayuda de seguimiento de conexión IRC en el subsistema netfilter en Linux 2.4.18-pre9 y anteriores no establece adecuadamente la máscara para 'conntrack' esperadas para conexiones DCC, lo que podría perimitir a atacantes remotos evitar las restriciones pretendidas en el cortafuegos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:pre9:*:*:*:*:*:*","versionEndIncluding":"2.4.18","matchCriteriaId":"685D521A-C7CF-44B6-9B12-29BE8E1B96E1"}]}]}],"references":[{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101483396412051&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101486352429653&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/230307","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-028.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4188","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8302","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101483396412051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101486352429653&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/230307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0061","sourceIdentifier":"cve@mitre.org","published":"2002-03-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe."},{"lang":"es","value":"El servidor Apache, en sus verisones para Win32 1.3.24  y anteriores, y 2.0.x hasta la 2.0.34-beta, permite que atacantes remotos ejecuten cualquier comando a través del metacaracter \"|\" de la shell. Estos comandos vienen como argumentos a scrips .bat o .cmd. A su vez estos scripts pasan sin filtrado al intérprete de shell, normalmente cmd.exe"}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.24:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.24","matchCriteriaId":"4E3B99BC-3492-44F9-AF86-9B91379325AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.0.34","matchCriteriaId":"B32475E9-ACE6-440E-B919-05C561C5ADBA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101674082427358&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/archive/1/263927","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.apacheweek.com/issues/02-03-29#apache1324","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.iss.net/security_center/static/8589.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4335","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101674082427358&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/archive/1/263927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.apacheweek.com/issues/02-03-29#apache1324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.iss.net/security_center/static/8589.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0062","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to \"routines for moving the physical cursor and scrolling.\""},{"lang":"es","value":"El desbordamiento del búfer en ncurses 5.0, y el paquete de compatibilidad ncurses4 basado en él, permite a usuarios locales la obtención de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:ia-32:*:*:*:*:*","matchCriteriaId":"E9D468DB-C4AE-4ACB-B3B7-2FAEA90D6A49"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:i386:*:*:*:*:*","matchCriteriaId":"B72D6205-DFA4-41D9-B3B6-0B7DA756CD8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ncurses:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0","matchCriteriaId":"305BF03D-747B-4049-81B5-65B8C7CEF408"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-113","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8222.php","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-020.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2116","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8222.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0063","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values."},{"lang":"es","value":"El desbordamiento del búfer en la función ippRead de CUPS anteriores a la 1.1.14 podrían permitir a atacantes ejecutar código arbitrario mediante valores largos en los atributos 'names' o 'language'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.14","matchCriteriaId":"3859389D-BD0E-4121-8A6F-5BF6031F5E6D"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-008.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000471","source":"cve@mitre.org"},{"url":"http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html","source":"cve@mitre.org"},{"url":"http://www.cups.org/relnotes.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-110","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-015.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-032.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4100","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8192","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cups.org/relnotes.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-015.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0064","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system."},{"lang":"es","value":"Funk Software Proxy Host 3.x se instala con permisos inseguros para el registro y el sistema de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"760DB974-6B4A-4A09-9B4F-201456DE9136"},{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*","matchCriteriaId":"AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8ECA01B9-A163-4069-8CBA-C6D019B4DB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*","matchCriteriaId":"C4F701BB-4525-42A7-80AF-51D127A836B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*","matchCriteriaId":"FC126FFF-687F-41AA-BC77-E577D05B4BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.09a:*:*:*:*:*:*:*","matchCriteriaId":"A2A9E9AA-CC99-41E5-95C7-6DCAA0B0F6A0"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_FunkProxy.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8791.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4458","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_FunkProxy.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8791.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0065","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry."},{"lang":"es","value":"Funk Software Proxy Host 3.x usa cifrado débil para la contraseña de Proxy Host, lo que permite a usuarios locales ganar privilegios desde le fichero PHOST.INI o el registro de Windows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"760DB974-6B4A-4A09-9B4F-201456DE9136"},{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*","matchCriteriaId":"AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8ECA01B9-A163-4069-8CBA-C6D019B4DB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*","matchCriteriaId":"C4F701BB-4525-42A7-80AF-51D127A836B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*","matchCriteriaId":"FC126FFF-687F-41AA-BC77-E577D05B4BB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.09a:*:*:*:*:*:*:*","matchCriteriaId":"A2A9E9AA-CC99-41E5-95C7-6DCAA0B0F6A0"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_FunkProxy.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8792.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4459","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_FunkProxy.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8792.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0066","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges."},{"lang":"es","value":"Funk Software Proxy Host 3.x anterior a 3.09a crea un tubería con nombre (Named Pipe) que no requiere autentificación y se instala con control de acceso inseguro, lo que permite a usuarios locales y posiblemente remotos usar las utilidades de configuración del Proxy Host y ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"760DB974-6B4A-4A09-9B4F-201456DE9136"},{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:3.06:*:*:*:*:*:*:*","matchCriteriaId":"AD26D34A-F8C0-4C74-A825-6B59DA0C12D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8ECA01B9-A163-4069-8CBA-C6D019B4DB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.06:*:*:*:*:*:*:*","matchCriteriaId":"C4F701BB-4525-42A7-80AF-51D127A836B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:funk_software:funk_software_proxy:3.09:*:*:*:*:*:*:*","matchCriteriaId":"FC126FFF-687F-41AA-BC77-E577D05B4BB8"}]}]}],"references":[{"url":"http://razor.bindview.com/publish/advisories/adv_FunkProxy.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8793.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4460","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_FunkProxy.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8793.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0067","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when \"htcp_port 0\" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Squid 2.4 STABLE2 y versiones anteriores no deshabilita adecuadamente HTCP, incluso cuando \"\"htcp_port 0\"\" es especificado en el fichero squid.conf, el cual podría permitir a atacantes remotos saltarse las restricciones de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4_stable_2","matchCriteriaId":"169C4A52-3191-423A-97C9-0E86A8D8160E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101431040422095&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101443252627021&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8261.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5379","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-029.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4150","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101431040422095&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101443252627021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8261.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0068","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters."},{"lang":"es","value":"Squid 2.4 STABLE3 y versiones anteriores permite a atacantes remotos causar la denegación de servicios por volcado del núcleo (core dump) y ejecutar código arbitrario mediante una dirección URL ftp:// mal construida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4_stable_3","matchCriteriaId":"A5F50EF3-9CC0-4E49-8B37-E39A3228CB82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101431040422095&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101440163111826&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101443252627021&w=2","source":"cve@mitre.org"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8258.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5378","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-029.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4148","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101431040422095&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101440163111826&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101443252627021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8258.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-0069","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service."},{"lang":"es","value":"Error de memoria en SNMP de Squid STABLE2 y versiones anteriores permite a un atacante remoto provocar una denegación del servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4_stable_2","matchCriteriaId":"169C4A52-3191-423A-97C9-0E86A8D8160E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101431040422095&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101443252627021&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8260.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-029.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4146","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101431040422095&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101443252627021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8260.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-029.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0070","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled."},{"lang":"es","value":"El desbordamiento del búfer en el Windows Shell (usado como escritorio de Windows) permite a atacantes locales y posibles atacantes remotos, la ejecución de código arbitrario mediante un manejador de URL que no ha sido eliminado de una aplicación defectuosamente desinstalada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101594127017290&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8384.php","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0203&L=ntbugtraq&F=P&S=&P=2404","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4248","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-014","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A147","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101594127017290&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8384.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0203&L=ntbugtraq&F=P&S=&P=2404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0071","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names."},{"lang":"es","value":"Desbordamiento de buffer la extensión ISAPI ism.dll que implementa los scripts HTR en MS Internet Information Server (IIS) 4.0 y 5.0 permite a atacantes causar una denegación de servido o ejecutar código arbitrario mediante peticiones HTR con nombres de variables largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101854087828265&w=2","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a041002-1.txt","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8799.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/363715","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3325","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4474","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A130","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A45","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101854087828265&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2002/a041002-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8799.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/363715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A45","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0072","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer."},{"lang":"es","value":"Un filtro ISAPI en las Extensiones de Servidor de Front Page y ASP.NET para Internet Information Server (IIS) 4.0, 5.0 y 5.1 no maneja adecuadamente la condición de error cuando se provee una URL larga, lo que permite a atacantes remotos causar una denegación de sevicio (caída)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101853851025208&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8800.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/521059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3326","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4479","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101853851025208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8800.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/521059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0073","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters."},{"lang":"es","value":"El servicio FTP en Intenet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes que han establecido una sesión FTP causar una denegación de servicio mediante una petición de estado especialmente formada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0023.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101901273810598&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.digitaloffense.net/msftpd/advisory.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8801.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/412203","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4482","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A24","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A35","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101901273810598&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitaloffense.net/msftpd/advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8801.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/412203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A35","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0074","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (Cross-site scripting) en el fichero de Ayuda del Internet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes remotos insertar código en otra sesión de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Apr/0126.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cgisecurity.com/advisory/9.txt","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8802.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/883091","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3338","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4483","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A46","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Apr/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cgisecurity.com/advisory/9.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8802.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/883091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A46","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0075","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (\"\"302 Object Moved\") message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (Cross-site scripting) en Internet Information Server 4.0, 5.0 y 5.1 permite a atacantes remotos ejecutar scripts arbitrarios como otros usuarios del web mediante el mensaje de error usado en una redirección de URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101854677802990&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8804.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/520707","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4487","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A210","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A58","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101854677802990&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8804.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/520707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A58","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0076","sourceIdentifier":"cve@mitre.org","published":"2002-03-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the \"Virtual Machine Verifier\" vulnerability."},{"lang":"es","value":"El verificador de bytecode del \"Java Runtime Enviroment\" (entorno de ejecución de java), permite que atacantes remotos se salten la \"sandbox\" (caja de arena) de Java y ejecuten  comandos a través de un applet que tiene una conversión de tipo ilegal. Ésto se ha comprobado en (1) la máquina virtual de Microsoft (3802 y anteriores) que se usa en el MS Internet Explorer 4.x y 5.x, (2) Netscape 6.2.1 y anteriores y posiblmente en otras implementaciones que usan versiones vulnerables del SDK o JDK. Este vulnerabilidad es una variante de aquella conocida como vulnerabilidad en \"Verificador de la Máquina Virtual\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:java_jre-jdk:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8B5D2FA9-8C0B-4018-8EE3-6BF79E182DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:java_jre-jdk:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"19ABD387-E3C6-49E3-9E8B-46ED7D70DA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:java_jre-jdk:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4DC61EC3-7299-41F3-9CBC-15D86F515266"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*","matchCriteriaId":"FB10F6CD-E12B-469B-8634-2185172D97D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update14:*:*:*:*:*:*","matchCriteriaId":"E58C529E-0D46-46A2-A6F3-894ECB215A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.1.8:update8:*:*:*:*:*:*","matchCriteriaId":"4053D51D-57A9-495F-9B8D-0076661283EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.1.8:update14:*:*:*:*:*:*","matchCriteriaId":"F3375977-9C9F-48C6-80D6-7BC26389BE3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.1.8:update8:*:*:*:*:*:*","matchCriteriaId":"DC661221-300B-4730-A26E-33DD10355E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2:update10:*:*:*:*:*:*","matchCriteriaId":"2F330C06-5DAA-433F-B1AB-71362E328095"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*","matchCriteriaId":"A06743B3-2637-47C2-BD1A-28D9F584ED75"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*","matchCriteriaId":"F7F1CF2B-F0B6-45DD-88E1-C0BDF2B973BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:update1a:*:*:*:*:*:*","matchCriteriaId":"04FB9247-7DB5-46A1-9E99-C25A729FB5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.2.2_10:*:*:*:*:*:*:*","matchCriteriaId":"47627A45-F60E-46E5-BD9C-AE67CF6B5D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.2.2_010:*:*:*:*:*:*:*","matchCriteriaId":"9998A074-A556-4A8B-A0CE-3355AF78C3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*","matchCriteriaId":"34710306-D6CF-4D07-84BF-71A8839BE416"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*","matchCriteriaId":"44B93DC8-6375-4B41-B9BC-F22F592C56B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.3_05:*:*:*:*:*:*:*","matchCriteriaId":"50E18066-F22D-48D3-A7BD-A51F68052BDF"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8480.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4313","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8480.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0077","sourceIdentifier":"cve@mitre.org","published":"2002-01-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the \"Local Executable Invocation via Object tag\" vulnerability."},{"lang":"es","value":"Microsoft Internet Explorer 5.01, 5.5 y 6.0 trata objetos invocados en una página HTML con la propiedad 'codebase' como parte de la zona 'Ordenador Local', lo que permite a atacantes remotos invocar ejecutables presentes en el sistema local mediante objetos como el objeto 'popup'. Tambíen conocido como \"Invocación de ejecutable local mediante la etiqueta Object\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101103188711920&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101103188711920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0078","sourceIdentifier":"cve@mitre.org","published":"2002-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the \"Cookie-based Script Execution\" vulnerability."},{"lang":"es","value":"La determinación de zona en Microsoft Internet Explorer 5.5 y 6.0 permite a atacantes remotos ejecutar scripts en la zona 'Ordenador Local' incrustando el script en una cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101781180528301&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8701.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4392","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A96","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101781180528301&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8701.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A96","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0079","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code."},{"lang":"es","value":"Desbordamiento de buffer en el mecanismo de transferencia de codificación troceada (chunked encoding) en Active Server Pages (ASP) de Internet Information Server (IIS) 4.0 y 5.0, que permite a atacantes causar una denegación de servicio o ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101846993304518&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8795.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/610291","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4485","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A25","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101846993304518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8795.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/610291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A25","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0080","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed."},{"lang":"es","value":"rsync no llama adecuadamente a 'setgroups' antes de establecer los permisos, lo cual podría proveer de ciertos privilegios de grupo a usuarios locales, los cuales podrían leer ciertos ficheros que de otro modo les estarían vetados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.3","matchCriteriaId":"2388AF97-7C59-4CF8-9B4F-EA3EE07EC68B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"}]}]}],"references":[{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/8463.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/4285","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/8463.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/4285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0081","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled."},{"lang":"es","value":"Desbordamiento de buffer en:(1) PHP 4.1.0, 4.1.1 y 4.0.6 y anteriores y (2) php3_mime_split en PHP 3.0.x permite que atacantes remotos ejecuten código arbitrario a través de una petición de datos de formulario HTTP, vía POST, cuando \"file_uploads\" está activado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000468","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101484705523351&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101497256024338&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101537076619812&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101484975231922&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101468694824998&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3911","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/012002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-05.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-115","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8281.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/297363","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-017.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1924.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_007_mod_php4_txt.html","source":"cve@mitre.org"},{"url":"http://www.php.net/downloads.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-035.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-040.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4183","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101484705523351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101497256024338&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101537076619812&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101484975231922&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101468694824998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/012002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8281.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/297363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-017.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1924.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_007_mod_php4_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.php.net/downloads.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0082","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session."},{"lang":"es","value":"El código de mod_ssl dbm y shm cache anteriores a 2.8.7-1.3.23 y Apache-SSL anteriores a 1.3.22 1.46 no inicializa adecuadamente la memoria usando la función i2d_SSL_SESSION, lo que permite a atacantes remotos usar un desbordamiento de buffer para ejecutar código arbitrario mediante un certificado de cliente largo firmado por una Autoricad Certificadora (CA) larga, lo que produce una sesión serializada larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.40:*:*:*:*:*:*:*","matchCriteriaId":"AFF77CC7-14EE-44E6-ADD8-17DEFD336BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.41:*:*:*:*:*:*:*","matchCriteriaId":"075C7AD9-B254-4CAD-8E71-D0DB542D90E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.42:*:*:*:*:*:*:*","matchCriteriaId":"FD50710F-6471-4CB7-9047-BC0285F92A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.44:*:*:*:*:*:*:*","matchCriteriaId":"5AF68B78-F29E-4A4F-9F7B-E408F606C14D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.45:*:*:*:*:*:*:*","matchCriteriaId":"A3154AB7-23F9-4D0D-935A-D530DC1F110C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:1.46:*:*:*:*:*:*:*","matchCriteriaId":"2716A670-2751-4348-8F56-0F2427D660CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB888875-1AFC-4569-B783-CDE92B717882"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8:*:*:*:*:*:*:*","matchCriteriaId":"3E1E3411-A16E-4B11-983D-C83644B471CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C39E94EF-FEF4-41CA-BCD5-F3273D40D0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"08A7DE9F-3088-445E-A09A-FC8E155C4E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"3906A1FB-3105-4248-B9D2-B915AEF90E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F1DB98C0-A15B-4186-8DAC-D906ABBEC2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"15B615EC-D5AF-4C62-AF0A-453F7FD11DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"50211658-1959-4E97-9FF5-6ABAF3B98C36"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101518491916936&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101528358424306&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258646","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/02-03-01#security","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-120","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8308.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1923.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-041.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-042.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3965","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4189","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101518491916936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101528358424306&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/02-03-01#security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8308.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1923.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/3965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/4008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0083","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges."},{"lang":"es","value":"Error 'off-by-one' en el código de canal de OpenSSH 2.0 a 3.0.2 permite a usuarios locales o a servidores remotos ganar privilegios."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:immunix:immunix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"660CA978-FDA1-4D48-8162-9CB9243A1B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*","matchCriteriaId":"7A188467-3856-4599-A2CD-BD2655974B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndExcluding":"3.1","matchCriteriaId":"57BE3D9D-42CA-45A4-A2BB-A7154F177A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2AD28A07-6B9F-443B-88E5-7CE777012037"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"537A5C29-D770-4755-A6AB-8916754E14DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E3AC05A9-04DA-4ED3-94D8-3254384CB724"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE4BBA3-7332-45EE-8C29-BE5A473B559D"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"97177EF7-8FC4-4D4D-A8D9-3628AA0035FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:ecommerce:*:*:*:*:*:*:*","matchCriteriaId":"FB63DADC-A9AE-4FBA-BCCA-9714646DBD04"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:graficas:*:*:*:*:*:*:*","matchCriteriaId":"99E6E71D-100E-45FA-B90A-C2F7C37E458C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_linux:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79A6E38E-9BC6-4CD7-ABC6-754C9DB07DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*","matchCriteriaId":"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*","matchCriteriaId":"8A206E1C-C2EC-4356-8777-B18D7069A4C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*","matchCriteriaId":"6E2FE291-1142-4627-A497-C0BB0D934A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*","matchCriteriaId":"467A30EB-CB8F-4928-AC8F-F659084A9E2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"714C1439-AB8E-4A8B-A783-D60E9DDC38D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"62CAE5B0-4D46-4A93-A343-C8E9CB574C62"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*","matchCriteriaId":"FB647A8B-ADB9-402B-96E1-45321C75731B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*","matchCriteriaId":"0944FD27-736E-4B55-8D96-9F2CA9BB9B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*","matchCriteriaId":"373BB5AC-1F38-4D0A-97DC-08E9654403EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*","matchCriteriaId":"B5E71DA3-F4A0-46AF-92A2-E691C7A65528"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"1975A2DD-EB22-4ED3-8719-F78AA7F414B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"19F606EE-530F-4C06-82DB-52035EE03FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*","matchCriteriaId":"A0E896D5-0005-4E7E-895D-B202AFCE09A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*","matchCriteriaId":"5A8B313F-93C7-4558-9571-DE1111487E17"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"13EBB2F7-712E-4CB1-B4B4-5F0851F3D37E"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=101552065005254&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101553908201861&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101561384821761&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101586991827622&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://online.securityfocus.com/advisories/3960","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/264657","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-119","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8383.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1937.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openbsd.org/advisories/ssh_channelalloc.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/730","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-043.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4241","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=101552065005254&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101553908201861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101561384821761&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101586991827622&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://online.securityfocus.com/advisories/3960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/264657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8383.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-1937.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openbsd.org/advisories/ssh_channelalloc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0084","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument."},{"lang":"es","value":"Desbordamiento de Buffer en cachefsd en Solaris 2.6, 7 y 8 permite a usarios locales ganar privilegios de root mediante un argumento de mount largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO4198.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/161931","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A43","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A97","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO4198.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/161931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A97","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0085","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request."},{"lang":"es","value":"cachefsd en Solaris 2.6, 7 y 8 permite a atacantes remotos causar una denegación de servicio (caída) mediante una llamada a procedimiento inválida en una petición RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0047.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270122","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO4197.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4634","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8956","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4329","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/270122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO4197.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0086","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable."},{"lang":"es","value":"Desbordamiento de buffer en bindsock en Lotus Domino 5.0.4 a 5.0.7 en Linux permite a usuarios locales ganar privilegios de root mediante Notes_ExecDirectoryVariable de entorno PATHlargos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.4:*:linux:*:*:*:*:*","matchCriteriaId":"8D0C8DC6-31D1-4510-90DE-214784000593"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.7:*:linux:*:*:*:*:*","matchCriteriaId":"4536934C-C145-4D08-9ABF-8682A36BE991"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21095569","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21100441","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO4124.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.esecurityonline.com/advisories/eSO4126.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4319","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8583","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8585","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21095569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21100441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO4124.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.esecurityonline.com/advisories/eSO4126.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0087","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"bindsock en Lotus Domino 5.07 en Solaris permite a usuarios locales crear ficheros arbitrarios mediante un ataque de enlaces simbólicos (symlink attack) en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7:*:solaris:*:*:*:*:*","matchCriteriaId":"5B272864-2871-4EED-9C8E-FEB726F222BE"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21095671","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO4125.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8586","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21095671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO4125.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0088","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path."},{"lang":"es","value":"Desbordamiento de buffer en admintool en Solaris 2.6, 7 y 8 permite a usuarios locales ganar privilegios de root mediante una ruta de instalación de medio larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://www.esecurityonline.com/advisories/eSO4123.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A48","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO4123.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A48","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0089","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file."},{"lang":"es","value":"Desbordamiento de buffer en admintools en Solarios 2.5 a 8 permite a usuarios locales ganar privilegios de root mediante argumentos largos ala opción de línea de comandos -del argumento PRODVERS en el fichero .cdtoc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/270122","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO2397.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8954.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8955.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4624","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A67","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A68","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO2397.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8954.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8955.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A67","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A68","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0090","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option."},{"lang":"es","value":"Desbordamiento de buffer en lbxprosy en Solaris 8 permite a usuarios locales ejecutar código arbitrario mediante una opción 'display' de línea de comandos larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0041.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270149","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/44842","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO3761.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8958.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/188507","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4633","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A179","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A86","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/270149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/44842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO3761.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8958.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/188507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A86","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0091","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields."},{"lang":"es","value":"Múltiples secuencias de comandos CGI en CIDER SHADOW 1.5 y 1.6 permiten a atacantes remotos ejecutar comandos arbitrarios mediante ciertos campos de formularios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nswc:cider_shadow:1.5:*:*:*:*:*:*:*","matchCriteriaId":"CBE6AF11-0EB5-467F-B8F5-54A5FAB05F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nswc:cider_shadow:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2A0C04CB-E0A5-494C-A50B-9E6F4C4C0261"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0400.html","source":"cve@mitre.org"},{"url":"http://www.esecurityonline.com/advisories/eSO2408.asp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8953.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4625","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.esecurityonline.com/advisories/eSO2408.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8953.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0092","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability."},{"lang":"es","value":"CVS anteriores a 1.10.8 no inicializa adecudamente una variable global, lo que permite a atacantes remotos causar una denegación de servicio (caída del servidor) mediante la capacidad diff."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.8","matchCriteriaId":"8716B52E-5846-4A35-A12B-001DCFBE92A0"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=101422243817321&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101433077724524&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-117","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8366.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4234","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101422243817321&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101433077724524&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8366.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0093","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423."},{"lang":"es","value":"Desbordamientos de búfer en ipcs para HP Tru64 UNIX 4.0f a 5.1a puede permitir a atacantes ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9613.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/771155","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5241","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9613.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/771155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0094","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion."},{"lang":"es","value":"El script en python config_converters.py en BSCW (Basic Support for Cooperative Work) 3.x y anteriores a 4.06 permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaracteres de shell en el nombre del fichero durante la conversión de nombres de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:3.4:*:*:*:*:*:*:*","matchCriteriaId":"163C63FA-EF83-44FA-92DA-CE176002B4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E31361FF-5A79-44E0-9BBA-4E56113ED784"}]}]}],"references":[{"url":"http://bscw.gmd.de/WhatsNew.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7774.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/248000","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3776","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bscw.gmd.de/WhatsNew.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7774.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/248000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0095","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed."},{"lang":"es","value":"La configuración por defecto de BSCW (Basic Support for Cooperative Work) 3.x y posiblemente versión 4 permite auto registración de usuarios, lo que podría permitir a atacantes remotos unirse a una comunidad que se pretendía fuese cerrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:3.4:*:*:*:*:*:*:*","matchCriteriaId":"163C63FA-EF83-44FA-92DA-CE176002B4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E31361FF-5A79-44E0-9BBA-4E56113ED784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fraunhofer_fit:bscw:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0F515F1B-DDD2-41B3-8A2A-1F8F9A402158"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7775.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/248000","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3777","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7775.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/248000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0096","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended."},{"lang":"es","value":"La instalación de Geeklog 1.3 crea un registro \"group_assignments\" extra que no se borra apropiadamente, lo que produce que el primer usuario nuevamente creado sea añadido a los grupos GroupAdmin y UserAdmin, lo que podría proveer a ese usuario con privilegios adminstrativos no pretendidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2EE5B106-CE02-4864-A1FB-B18F66876383"}]}]}],"references":[{"url":"http://geeklog.sourceforge.net/index.php?topic=Security","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7780.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/248367","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3783","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://geeklog.sourceforge.net/index.php?topic=Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7780.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/248367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0097","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account."},{"lang":"es","value":"Geeklog 1.3 permite al atacante remoto la apropiación de cuentas de usuario, incluyendo cuentas del administrador, mediante la modificación del identificador de usuario (UID) de una 'cookie' permanente implantada en la cuenta atacada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2EE5B106-CE02-4864-A1FB-B18F66876383"}]}]}],"references":[{"url":"http://geeklog.sourceforge.net/index.php?topic=Security","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249443","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7869.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3844","source":"cve@mitre.org"},{"url":"http://geeklog.sourceforge.net/index.php?topic=Security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/249443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7869.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0098","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner."},{"lang":"es","value":"El desbordamiento de la pila en el fichero index.cgi del interfaz de administrador de Boozt! Standard 0.9.8 permite a usuarios locales la ejecución de código arbitrario mediante el uso de un campo de nombre largo cuando se crea un nuevo 'banner'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:boozt:boozt_standard:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"B3FC1EE1-A241-4CFF-B01B-9C743D1839D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101027773404836&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249219","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.boozt.com/news_detail.php?id=3","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7790.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101027773404836&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/249219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.boozt.com/news_detail.php?id=3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7790.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0099","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters."},{"lang":"es","value":"El desbordamiento de la pila en cgi-test.pl del Michael Lamont Savant Web Server 3.0 permite a atacantes remotos causar Denegación de Servicios (DoS) mediante una petición larga de HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_lamont:savant_webserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"55AFDEFF-D46D-450D-BD57-42E44D73EAC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101027722904078&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101062823305479&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7786.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3788","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101027722904078&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101062823305479&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7786.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0100","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file."},{"lang":"es","value":"AOL AOLserver 3.4.2 Win32 permite a atacantes remotos evitar la autenticación y leer ficheros protegidos con contraseña, mediante una dirección URL que referencia directamente el fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4.2:*:win32:*:*:*:*:*","matchCriteriaId":"4EDF3BE7-75D0-484A-BC02-5877F6013DB2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101038936305397&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101062823205474&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7825.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3791","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101038936305397&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101062823205474&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7825.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0101","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released."},{"lang":"es","value":"Microsoft Internet Explorer 6.0 y anteriores permiten a usuarios locales causar  una negación de servicio vía bucle  infinito para cuadros de  diálogo sin modo (showModelessDialog), que causaran que el uso de CPU no se libere mientras el foco para el diálogo no es liberado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101039104608083&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7826.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3789","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101039104608083&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7826.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0102","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of \".\" characters."},{"lang":"es","value":"Oracle9i Web Cache 2.0.0.x permite a atacantes remotos causar una negación de servicio vía: (1) una petición a puertos TCP 1100, 4000, 4001, y 4002 con un número grande de carácteres nulos, (y 2) una petición al puerto 4000 TCP con un número grande de Carácteres \".\" ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:nt:*:*:*:*:*","matchCriteriaId":"57084690-D6AF-4320-8C10-A0F6CE38A264"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3762","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7765","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0103","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml."},{"lang":"es","value":"El programa de instalación para el Oracle9i Web cache 2.0.0.x crea ejecutables y archivos de configuración con permisos inseguros, que permiten a usuarios locales asignarse privilegios: (1) ejecutar webcache  y (2) obtener la contraseña de administrador de webcache.xml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101041510727937&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7766.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7768.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3761","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3764","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101041510727937&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/webcache2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7766.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7768.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0104","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump."},{"lang":"es","value":"AFTPD 5.4.4 permite a atacantes remotos capturar información sensible vía CD (CWD) ~ (Comando de tilde), que causará un core dump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aftpd:aftpd:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"9686DC11-00C5-4D7E-ACE4-1AE25C7BBB82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101041333323486&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7832.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3806","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101041333323486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7832.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0105","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable."},{"lang":"es","value":"CDE dtlogin en Caldera UnixWare 7.1.0, y posiblemente en otros sistemas operativos, permiten a usuarios locales capturar privilegios vía un ataque de symlink sobre /var/dt/Xerrors cuando se establezca que /var/dt no tenga restricciones de escritura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA04F71A-0CBA-4479-A5BA-58AED5F67B60"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101060400802428&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7864.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101060400802428&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7864.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0106","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name."},{"lang":"es","value":"El Servidor 6.1 Weblogic de BEA Sistemas, permite a  atacantes que remotos  causar una negación de servicio vía una serie de peticiones a archivos .JSP que contengan un nombre de dispositivo de MS-DOS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101050440629269&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7808.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3816","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101050440629269&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7808.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0107","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message."},{"lang":"es","value":"El interfaz web de adminsitración en CacheFlow CacheOS 4.0.13 y anteriores permite a atacantes remotos obtener información sensible mediante una serie de peticiones GET que no terminan con con 'HTTP/1.0' u otra cadena de versión, lo que produce fugas de información en el mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:0.0:*:*:*:*:*:*:*","matchCriteriaId":"A43360C0-F97C-4856-B2F0-2054E1283E96"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.02:*:*:*:*:*:*:*","matchCriteriaId":"9508AE48-ACB1-4262-9225-BE82655E433E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.03:*:*:*:*:*:*:*","matchCriteriaId":"AF51C047-A39B-4598-8AB6-A5BCD6544C72"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.04:*:*:*:*:*:*:*","matchCriteriaId":"B53C88D9-9F78-4F2B-87AD-700BD7B5167D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.05:*:*:*:*:*:*:*","matchCriteriaId":"2B3DC615-974E-41F1-910F-8574A21B4C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.06:*:*:*:*:*:*:*","matchCriteriaId":"1F9CF9F8-CD3C-45BC-8669-FA44C1FA1D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.07:*:*:*:*:*:*:*","matchCriteriaId":"4203A30C-9153-4C89-9604-D7E74861D2CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.08:*:*:*:*:*:*:*","matchCriteriaId":"1A284B71-00B5-4539-A176-4E231F81BCC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.09:*:*:*:*:*:*:*","matchCriteriaId":"4E4A3FCB-4222-448D-8A89-6A69E757593A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"1EB89566-E571-43D4-982B-B860C448F4CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.11:*:*:*:*:*:*:*","matchCriteriaId":"DD20C05A-7040-4305-808A-E9A0AA1D7E98"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"8E789A31-05A5-48BD-9B80-192B41D7AAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.13:*:*:*:*:*:*:*","matchCriteriaId":"9CFC926C-4463-41BD-A819-4AF19548E982"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.14:*:*:*:*:*:*:*","matchCriteriaId":"539BC4BB-5D6B-444B-B74F-14794F401680"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0DFE513C-0EB2-453B-B169-F0B05302372A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"E78563D4-5177-442C-B181-DD84E4D0E991"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"D1F6FB3F-23D2-4284-BB6E-E6FED09929F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"6FFAB96C-91F8-4244-A41D-1B9FC1015063"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"C3580F58-C6B7-4A52-888D-45C3FB10CA80"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:3.1.20:*:*:*:*:*:*:*","matchCriteriaId":"3884B739-CD22-4D24-8CB4-20D26219C379"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"F6E1982C-61B6-4BCF-9406-80713CDD021B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"CB5378EB-42E0-4EEF-A658-DD20F21D545E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cacheflow:cacheos:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"34E3DB9D-309D-4D03-AD5A-5B74CBB4E24C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101052887431488&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254167","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7835.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3841","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101052887431488&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/254167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7835.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0108","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address."},{"lang":"es","value":"Allaire Forums 2.0.4 y 2.0.5 y Foros! 3.0 y 3.1 permiten a usuarios remotos autorizados  suplantar la identidad de otros usuarios (Spoofing) para enviar mensajes modificando en el formulario los campos de nombre y  dirección de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:forums:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D746DEF6-40BE-405A-A36F-AD78843CA9AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:forums:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"56882CBB-6AE2-4918-80FF-CB22CD57DF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:forums:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6D5E00AB-BA3B-4D75-BB1E-CD3B66EAD1F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:forums:3.1:*:*:*:*:*:*:*","matchCriteriaId":"843D94C2-78E4-47C8-B7F9-752E434ED95B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249026","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7841.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/575619","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3827","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7841.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/575619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0109","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string \"public,\" which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query."},{"lang":"es","value":"Los routers Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81, y posiblemente otros productos, permiten a atacantes remotos obterner información sensible y provocar una denegación de servicio mediante una consulta SNMP con la cadena de comunidad por defecto \"public,\" lo que provoca que el router cambie su configuración y envie información de trampa SNMP de vuelta al sistema que inició la consulta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befn2ps4:0.0:*:*:*:*:*:*:*","matchCriteriaId":"42DB1FD4-FF20-4298-8426-E51741BFE981"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:0.0:*:*:*:*:*:*:*","matchCriteriaId":"A8D27E11-B802-433D-98A0-2A6F9C9CB5DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr81:*:*:*:*:*:*:*:*","matchCriteriaId":"AF867F97-F14F-4056-B0C8-A72E2FE2E74D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101039288111680&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7827.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3795","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3797","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101039288111680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7827.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0110","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file."},{"lang":"es","value":"Nevrona Diseña MiraMail 1.04 y anteriores almacenan información de autenticación,  nombres de usuario y  contraseñas en texto plano de los ficheros .ini, que permite a un atacante utilizar los privilegios de los usuarios capturados en esos ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nevrona_designs:miramail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.04","matchCriteriaId":"788DE224-0107-4D2A-A11D-C63778AEBAE8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101063476715154&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7855.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/245707","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3843","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101063476715154&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7855.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/245707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0111","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Funsoft Dino's Webserver 1.2 y anteriores permiten a atacantes remotos leer ficheros o ejecutar comandos arbitrarios mediante un .. (punto punto) en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:funsoft:dinos_webserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7331756-6564-4449-911A-8CFF3927400D"},{"vulnerable":true,"criteria":"cpe:2.3:a:funsoft:dinos_webserver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1590A12B-91C4-4BE5-95E9-3F1F675A74D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101062213627501&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3861","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7853.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101062213627501&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7853.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0112","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL."},{"lang":"es","value":"Etype Eserv 2.97 permite a atacantes remotos ver ficheros protegidos por contraseña mediante /./ en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.92:*:*:*:*:*:*:*","matchCriteriaId":"E26ABE5A-F702-4E6B-9089-97B8E81490E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.93:*:*:*:*:*:*:*","matchCriteriaId":"7140CEC2-C0A4-47E3-B888-9E431B3FEA6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.94:*:*:*:*:*:*:*","matchCriteriaId":"8333DD93-674D-436D-AB97-9DB35D11D603"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.95:*:*:*:*:*:*:*","matchCriteriaId":"9879D390-3BF6-4F12-ADF3-21109658FB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.95_beta2:*:*:*:*:*:*:*","matchCriteriaId":"1314E66E-5E11-4B5F-A632-A70B6EA9B8C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.96:*:*:*:*:*:*:*","matchCriteriaId":"E076DBAD-C0C5-4F3A-85EC-A2A141A6E7D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.97:*:*:*:*:*:*:*","matchCriteriaId":"A62C0267-653F-4BBA-9718-FE30567C62BB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0010.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101062172226812&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101062823505486&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249734","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7849.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3838","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101062172226812&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101062823505486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/249734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7849.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0113","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform."},{"lang":"es","value":"Legato Networker 6.1 almacena ficheros de registro en el directorio /nsr/logs/ con permisos de lectura para todos los usuarios, lo que permite a usuarios locales leer información sensible y posiblemente ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6EE54B84-3CA1-490B-9D0C-A3C3C872D2B5"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7897.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3840","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7897.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0114","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform."},{"lang":"es","value":"Legato NetWorker 6.1 almacena passwords en texto plano en el fichero daemon.log que permite a usuarios locales tomar privilegios leyendo las passwords del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emc:networker:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6EE54B84-3CA1-490B-9D0C-A3C3C872D2B5"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7898.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3842","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7898.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0115","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet."},{"lang":"es","value":"El snort 1.8.3 no define correctamente el tamaño mínimo de cabecera ICMP, que permite a atacantes remotos causar una negación de servicio (crash y core dump) vía un paquete mal formado ICMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_roesch:snort:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"91B85C03-96D3-49B4-A11F-C5D3780DD9F1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249340","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-08&end=2002-03-14&mid=249623&threads=1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7874.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2022","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3849","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-08&end=2002-03-14&mid=249623&threads=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7874.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0116","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap."},{"lang":"es","value":"La Palm OS 3.5r y posiblemente otras versiones, al ser usado en el visor Handspring y productos Xircom, permite atacantes remotos  causar una negación de servicio vía un TCP en conexión de scan p.ej. de nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:palm:palm_os:3.5h:*:*:*:*:*:*:*","matchCriteriaId":"CA49C271-AC75-47F8-A45D-63DDBB59DECF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101069677929208&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101070523119956&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7865.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3847","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101069677929208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101070523119956&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7865.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0117","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag."},{"lang":"es","value":"Vulnerabilidad Cross-site todavía en el Bulletin Board de (YaBB) 1 Gold SP 1 y anteriores permite a atacantes remotos ejecutar scripts arbitrarios y cookiess de robo vía un mensaje que contiene Javascript codificado en una etiqueta IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:0.01_release:gold:*:*:*:*:*:*","matchCriteriaId":"CC19AFF7-497D-4D25-AEFC-AEBD5EFCDED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:0.01_sp1:gold:*:*:*:*:*:*","matchCriteriaId":"AFB92C58-9A54-490F-A1D1-77EA66736F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-01:*:*:*:*:*:*:*","matchCriteriaId":"5B8C55BC-81D8-46E2-A303-22D379E3CC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-11:*:*:*:*:*:*:*","matchCriteriaId":"3135BB83-CC1C-45F4-AB13-A93A17D89290"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249031","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3828","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7840.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2019","source":"cve@mitre.org"},{"url":"http://www.yabbforum.com/","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7840.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.yabbforum.com/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0118","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag."},{"lang":"es","value":"Vulnerabilidad Cross-site en el último Bulletin Board de Infopop (UBB) 6.2.0 Beta release 1.0 que permite a atacantes remotos ejecutar  scripts y cookies de robo vía un mensaje que contiene Javascript codificado en una etiqueta IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.4.7e:*:*:*:*:*:*:*","matchCriteriaId":"E79188C3-8C18-4B27-865E-A3D315209CAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.43:*:*:*:*:*:*:*","matchCriteriaId":"109D6BE8-39AD-43A7-B620-DEAA989D809E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D01C4960-1118-4501-9492-182F6C15B553"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AEC46938-E4B4-4688-B7C3-230B3B438770"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"318B4B73-7B80-4D27-AE8E-EB56929FD151"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EAC93AEF-9811-4F44-A5B3-738EAA0C69EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.0.4f:*:*:*:*:*:*:*","matchCriteriaId":"CBDBDDE6-395D-4F7B-975A-450231987BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.0beta:*:*:*:*:*:*:*","matchCriteriaId":"E54B2EE8-52CD-48F9-AEB7-6D212A0E2472"},{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:6.2.0_beta_release_1.0:*:*:*:*:*:*:*","matchCriteriaId":"14D70B09-9A69-4A4B-9301-650CEA0A4E1D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249031","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7838.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3829","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/249031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7838.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0119","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection."},{"lang":"es","value":"el modem de Alcatel Speed Touch Home ADSL permite e atacantes remotos causar una negación de servicio (reboot) via a scaneo de la red con paquetes anormales, como nmap con detección de OS"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:speed_touch_home:-:*:*:*:*:*:*:*","matchCriteriaId":"7A0163FA-7DEA-4BE6-960D-5BAD2572D3A1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/249746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7893.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3851","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/249746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7893.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0120","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information."},{"lang":"es","value":"La Palm de Apple 4.0b76 y 4.0b77 crean palabras legibles en archivos de backup  y carpetas cuando un hotsync es realizado, que podrían permitir a un usuario local  obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:palm:palm_desktop:4.0b76:*:*:*:*:*:*:*","matchCriteriaId":"0999067A-2A2B-42BB-9C15-050BA0105CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:palm:palm_desktop:4.0b77:*:*:*:*:*:*:*","matchCriteriaId":"4B882DC2-2672-4243-A8C1-61BFC548DAD9"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250093","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7937.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3863","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7937.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0121","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections."},{"lang":"es","value":"PHP 4.0 a 4.1.1 almacena  IDs en archivos temporales cuyo nombre contiene la sesión ID, que permite a usuarios locales secuestrar conexiones de web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250196","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7908.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3873","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7908.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0122","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters."},{"lang":"es","value":"Los teléfonos móviles de Siemens 356i WAP permiten a atacantes remotos causar una negación de servicio (Crash) vía mensajes que contengan caracteres inusuales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:3568i_wap:0.0:*:*:*:*:*:*:*","matchCriteriaId":"EB435803-5587-4B8F-A26B-1D87088D6E88"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250115","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7902.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3870","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7902.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0123","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request."},{"lang":"es","value":"MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 y anteriores, y posiblemente 3.5.3, permiten a atacantes remotos causar negaciones de servicio y posiblemente ejecutar comandos arbitrarios vía peticiones largas HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdg_computer_services:web_server_4d_ecommerce:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"11E5E29F-72E6-426A-8808-0E06F33CB6B4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250242","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7879.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3874","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7879.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0124","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request."},{"lang":"es","value":"MDG Computer Services Web Server WS4D/eCommerce 3.5.3, permite a atacantes remotos explotar directorios via  ../ conteniendo / en la parte codificada de la peticion HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdg_computer_services:web_server_4d_ecommerce:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"11E5E29F-72E6-426A-8808-0E06F33CB6B4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7878.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3872","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7878.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0125","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable."},{"lang":"es","value":"Buffer overflow en ClanLib library 0.5 que puede permitir que usuarios locales ejecuten código arbitrario en los juegos que usan la librería, como (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, ay otros, vía variable larga de HOME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clanlib:clanlib:0.5:*:*:*:*:*:*:*","matchCriteriaId":"37EA0696-F688-473A-861A-29DDE234BC35"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250414","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7905.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3877","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7905.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0126","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD."},{"lang":"es","value":"Buffer overflow en BlackMoon FTP Server 1.0 a 1.5 que permite a atacantes remotos ejecutar código arbitrario vía argumentos largos de (1) USER, (2) PASS, o (3) CWD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:selom_ofori:blackmoon_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D055B615-BCB2-40E1-9FF3-9EAE29BD9FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:selom_ofori:blackmoon_ftp_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4B82342A-AA99-4392-80DE-B1D1E5CDC855"},{"vulnerable":true,"criteria":"cpe:2.3:a:selom_ofori:blackmoon_ftp_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0AC69C71-E7AE-4374-9F44-52E67BF3A16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:selom_ofori:blackmoon_ftp_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B72D165F-EEA8-4A44-8E35-BEC01FADA70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:selom_ofori:blackmoon_ftp_server:1.4:*:*:*:*:*:*:*","matchCriteriaId":"EEC4850A-5A9E-444A-988E-2052F74EDF9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:selom_ofori:blackmoon_ftp_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"5AD35A43-395D-4F93-9C22-5A53DE60CD50"}]}]}],"references":[{"url":"http://members.rogers.com/blackmoon2k/pages/news_page.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250543","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7895.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3884","source":"cve@mitre.org"},{"url":"http://members.rogers.com/blackmoon2k/pages/news_page.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/250543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7895.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0127","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port."},{"lang":"es","value":"Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, cuando es configurado para bloquear el tráfico bajo el puerto 1024, permite atacantes remotos causar una negación de servicio (cuelgue)  vía una exploración de puerto del puerto WAN"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rp114:3.26:*:*:*:*:*:*:*","matchCriteriaId":"2AA7BDD8-A286-478C-B8CE-D1FAE323FA4F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250405","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3876","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0128","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument."},{"lang":"es","value":"El fichero cgitest.exe de Sambar Server 5.1 anterioresa Beta 4, permite a atacantes remotos provocar fallos de denegación de servicio (DoS)y la posible ejecución de código arbitrario mediante un parámetro largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A167B292-3A6A-4C8D-BABD-7ACAD9D7149C"}]}]}],"references":[{"url":"http://www.der-keiler.de/Mailing-Lists/securityfocus/bugtraq/2002-02/0083.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7894.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.sambar.com/security.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/250545","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3885","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.der-keiler.de/Mailing-Lists/securityfocus/bugtraq/2002-02/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7894.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.sambar.com/security.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/250545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0129","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message."},{"lang":"es","value":"En efax 0.9 y versiones anteriores, cuando se instala con UID de root, permite a usuarios locales leer ficheros arbitrarios usando la opción -d, la cual imprime el contenido del fichero en un mensaje de alerta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efax:efax:0.8a:*:*:*:*:*:*:*","matchCriteriaId":"D518F163-6FB1-4850-A781-E8A7F54BBACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:efax:efax:0.9:*:*:*:*:*:*:*","matchCriteriaId":"4CD9DCB2-C43C-40A6-B5CB-FD9AC8B0D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:efax:efax:0.9a:*:*:*:*:*:*:*","matchCriteriaId":"622E7B4F-8EAB-4B39-8ECC-9650BE1C5512"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=101114350330912&w=2","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jan/0212.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7921.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3895","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101114350330912&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2002/Jan/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7921.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0130","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument."},{"lang":"es","value":"El desbordamiento de la pila en efax 0.9 y versiones anteriores al instalar con UID de root, permite a usuarios locales la ejecución arbitraria de código mediante un parámetro -x largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efax:efax:0.8a:*:*:*:*:*:*:*","matchCriteriaId":"D518F163-6FB1-4850-A781-E8A7F54BBACA"},{"vulnerable":true,"criteria":"cpe:2.3:a:efax:efax:0.9:*:*:*:*:*:*:*","matchCriteriaId":"4CD9DCB2-C43C-40A6-B5CB-FD9AC8B0D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:efax:efax:0.9a:*:*:*:*:*:*:*","matchCriteriaId":"622E7B4F-8EAB-4B39-8ECC-9650BE1C5512"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=101133782204289&w=2","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jan/0212.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7920.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3894","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101133782204289&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2002/Jan/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7920.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0131","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script."},{"lang":"es","value":"El control ActivePython (un ActiveX para Python), cuando es usado en el Internet Explorer, no impide la lectura de archivos del sistema de ficheros del cliente, lo cual permite a atacantes remotos la lectura arbitraria de dichos ficheros mediante una página web que contenga el script Python."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activepython:*:*:*:*:*:*:*:*","matchCriteriaId":"F0A8327A-561D-49DF-921E-379910D249B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activepython:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9F3A8DAE-EE3F-4EB9-BFF5-304F3F138055"}]}]}],"references":[{"url":"http://marc.info/?t=101113015900001&r=1&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7910.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/250814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3893","source":"cve@mitre.org"},{"url":"http://marc.info/?t=101113015900001&r=1&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7910.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/250814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0132","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable."},{"lang":"es","value":"El desbordamiento del buffer en Chinput 3.0 permite a usuarios locales la ejecución de código arbitrario mediante una variable de entorno 'HOME' larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chinput:chinput:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F39E6508-5AA9-4996-B2D8-B3973CE468DE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250815","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7911.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3896","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7911.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0133","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy."},{"lang":"es","value":"El desbordamiento del buffer en Avirt Gateway Suite 4.2 permite a atacantes remotos causar fallos de denegación de servicio y la posible ejecución de código arbitrario por dos vías:1: un campo de cabecera largo al proxy HTTP.2: una cadena de caracteres larga al proxy telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_gateway:4.2:*:*:*:*:*:*:*","matchCriteriaId":"366D7DA0-C73C-4ABC-931D-ED24082EC751"},{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_gateway_suite:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E44ECB72-BA5B-4BB4-86C7-2FF9F285229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_soho:4.2:*:*:*:*:*:*:*","matchCriteriaId":"C44DE6DB-B95F-4F74-8217-30E3B5D21D2A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101164598828092&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101366658112809&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101424723728817&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251055","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7916.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7918.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3904","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3905","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101164598828092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101366658112809&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101424723728817&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/251055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7916.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7918.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0134","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a \"dos\" command."},{"lang":"es","value":"El proxy Telet en Avirt Gateway Suite 4.2 no requiere autentificación para conectarse al propio proxy, de modo que permite a atacantes remotos listar los ficheros del proxy y ejecutar comandos arbitrariamente mediante comandos de \"dos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_gateway_suite:4.2:*:*:*:*:*:*:*","matchCriteriaId":"E44ECB72-BA5B-4BB4-86C7-2FF9F285229B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101131669102843&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101424723728817&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7915.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3901","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101131669102843&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101424723728817&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7915.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0135","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420)."},{"lang":"es","value":"Netopia Timbuktu Pro 6.0.1 y versiones anteriores permiten a atacantes remotos causar fallos por denegación de servicio (por caida de la aplicación) mediante una serie de conexiones a uno de los puertos (1417 - 1420)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.1","matchCriteriaId":"8FED55B5-9D0F-4D35-B72A-3DCB8EBBE266"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251582","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7935.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3918","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7935.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0136","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript."},{"lang":"es","value":"Microsoft Internet Explorer 5.5 bajo Windows 98 permite a páginas web remotas causar denegación de servicio (por cuelgue de la aplicación) mediante valores muy largos en componentes de formulario como INPUT y TEXTAREA, los cuales pueden ser rellenados automáticamente mediante Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250592","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3892","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7938","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0137","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file."},{"lang":"es","value":"CDRDAO 1.1.4 y 1.1.5 permiten a usuarios locales la sobreescritura arbitraria de ficheros mediante un ataque al fichero de configuración $HOME/.cdrdao."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_mueller:cdrdao:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6E3DBC3B-BF5B-4B3D-8117-961C51D80652"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_mueller:cdrdao:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E235E22A-ABDD-4CFA-8223-319F156FF8AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101102759631000&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3865","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101102759631000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0138","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command."},{"lang":"es","value":"CDRDAO 1.1.4 y 1.1.5 permite a usuarios locales leer ficheros arbitrariamente mediante el comando 'show-data' (muestra de datos)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_mueller:cdrdao:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"6E3DBC3B-BF5B-4B3D-8117-961C51D80652"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_mueller:cdrdao:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E235E22A-ABDD-4CFA-8223-319F156FF8AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101102759631000&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101111688819855&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101102759631000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101111688819855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0139","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command."},{"lang":"es","value":"Pi-Soft SpoonFTP 1.1 y versiones anteriores permiten a atacantes remotos redirigir el tráfico de datos a otros sitios (también conocido como 'rebote' FTP) mediante el uso del comando PORT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:0.01.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E81FE55-CB7F-4E07-B7AA-455EDE663731"},{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BE968F81-AE1B-4FFE-9518-14D2713286F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:1.00.12:*:*:*:*:*:*:*","matchCriteriaId":"A60B805D-0A1E-436A-AFB1-1D5054B0A3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:1.00.13:*:*:*:*:*:*:*","matchCriteriaId":"76CC5152-9028-4E4A-8FE1-A38480E4098C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pi-soft:spoonftp:1.1:*:*:*:*:*:*:*","matchCriteriaId":"DABC0B8B-C6AE-49B8-9C0E-56E65FC26CD4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7943.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pi-soft.com/spoonftp/index.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3910","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7943.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pi-soft.com/spoonftp/index.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0140","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions."},{"lang":"es","value":"Domain Name Relay Daemon (dnrd) 2.10 y versiones anteriores permiten a sitios maliciosos DNS remotos causar denegación de servicio y quizá la ejecución de código arbitrario mediante una réplica larga o defectuosa del DNS, el cual no es manejada adecuadamente por las funciones 'parse_query', 'get_objectname' y posiblemente otras."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8F7EA693-9873-4201-B66D-D0AC08E7F560"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"022F8E8E-F6A1-4782-82D0-686E6FADCF44"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E269F0-8CFD-45DB-AF82-F9F57EDD0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"752CC26D-33D2-43F1-A43B-E101553895C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"317134CF-981A-44CC-B068-BA762AED5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"20BAB657-CAB8-4473-9EE5-5F725F2EB1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"84D1387B-91E2-4AC8-B387-B50F4D7DFDC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"19028501-E538-4F36-8DF7-3D2A76D86895"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7173317-9F5E-4F80-A957-02084B8DC8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"297935D9-E108-4DB1-B4C8-2AC43DB6EA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"770BBF88-63D2-4AD6-B28F-5664DFFD746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"45B16588-35CA-4640-8FA8-BC63D91C7416"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"8FA35F28-CAA5-4C03-ABB8-4647537CC8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"9DAC824F-2031-4427-BF38-C32A7644D2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"7884CCA6-2031-41DB-860D-AF18047AF617"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.10:*:*:*:*:*:*:*","matchCriteriaId":"A906D87C-5557-4FC0-BBF3-7169EF35DEAE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251619","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7957.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3928","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7957.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0141","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file."},{"lang":"es","value":"Maelstrom GPL 3.0.1 permite a usuarios locales sobreescribir ficheros arbitrarios de otros usuarios de Maelstrom mediante un ataque de enlaces simbólicos al fichero /tmp/f."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maelstrom:maelstrom_gpl:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C09B690F-1577-4651-8369-86A4714614A3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251419","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7939.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3911","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7939.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0142","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters."},{"lang":"es","value":"El manejador de CGI es John Roy Pi3Web para Windows 2.0 beta 1 y 2 permite a atacantes remotos causar una denegación de servicio (caída) mediante una serie de peticiones cuya ruta física tiene exactamente una longitud de 260 caracteres y termina con una serie de caracteres . (punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi3:pi3web:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA41A637-E93C-4AD2-8F62-AB2F07405CCE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101164598828093&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101102275316307&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250126","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=505583&group_id=17753&atid=317753","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7880.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3866","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101164598828093&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101102275316307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/250126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=505583&group_id=17753&atid=317753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7880.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0143","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable."},{"lang":"es","value":"El desbordamiento del buffer en el Eterm de Enlightenment Imlib2 1.0.4 y versiones anteriores permite a usuarios locales la ejecución de código arbitrario mediante una variable de entorno HOME de gran longitud."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:2.0.01.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5877B85B-458F-4C73-8412-872E6B83C6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:2.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"898C107A-D618-4F8A-95A4-E4EEC6F3E74A"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:2.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"752737E1-BEB6-43C3-978F-0B84B2CD827F"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:2.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8E27962-1B1F-45C5-AD0A-6AF65B1AF557"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:2.1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9079033-62DB-422B-831C-D95BF9D16DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_jennings:eterm:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7DD5D189-F36C-4E49-92C0-72C9D72A43BA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/251597","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7896.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3868","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/251597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7896.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0144","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack."},{"lang":"es","value":"Vulnerabilidad en \"chuid\", versión 1.2 y anteriores . Permite que un atacante remoto cambie el propietario de los ficheros ubicados fuera del directorio de carga (através de un ataque punto punto, ..)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scott_parish:chuid:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8142703-982E-4804-A282-70FB2FB5F058"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_parish:chuid:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0D6DD767-8FE7-4336-A70C-3249656AA9B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_parish:chuid:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DDE5E2-62BE-4CAD-89E6-A1D489BA9131"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7976.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3937","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7976.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0145","sourceIdentifier":"cve@mitre.org","published":"2002-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root."},{"lang":"es","value":"chuid, en verisón 1.2 y anteriores, no verifica correctamente la propiedad de los ficheros que van a ser cambiados. Esto permite que atacantes remotos cambien ficheros que no les pertenece (y que sí podrían pertenecer a root)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scott_parish:chuid:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C8142703-982E-4804-A282-70FB2FB5F058"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_parish:chuid:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0D6DD767-8FE7-4336-A70C-3249656AA9B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:scott_parish:chuid:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E7DDE5E2-62BE-4CAD-89E6-A1D489BA9131"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3938","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7976","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0146","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"5.9.8","matchCriteriaId":"269F9BE0-13D0-4530-9F82-A30FBD1D5044"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*","matchCriteriaId":"74D12B67-6E66-419A-A28F-6306402931EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*","matchCriteriaId":"A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"93D03D78-C56E-4189-97FC-916C918EDFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*","matchCriteriaId":"19A66C77-041F-4A12-8A36-233A6B50641C"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4145","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9133.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-036.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4788","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-027.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9133.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-036.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0147","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka \"Microsoft-discovered variant of Chunked Encoding buffer overrun.\""},{"lang":"es","value":"Desbordamiento de buffer en el mecanismo de transferencia de datos de Internet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes remotos causar una denegación de servicio o ejecutar código, tambien conocido como \"Variante del desbordamiento de buffer en  codificación troceada\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8796.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/669779","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4490","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A22","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A72","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8796.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/669779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A72","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0148","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page."},{"lang":"es","value":"Vulnerabildad de secuencias de comandos en sitios cruzados (cross-site scripting) en Internet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes remotos ejecutar código arbitrario como otros usuarios mediatne una página de error HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8803.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/886699","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3339","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4486","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8803.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/886699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A81","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A92","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0149","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names."},{"lang":"es","value":"Desbordamiento de buffer en las funciones de inclusión de ficheros en el servidor (server-side include) de ASP en IIS 4.0, 5.0 y 5.1 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante nombres de fichero largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8798.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/721963","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3320","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4478","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A132","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A95","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8798.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/721963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A95","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0150","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values."},{"lang":"es","value":"Desbordamiento de buffer en Internet Information Server (IIS) 4.0, 5.0 y 5.1 permite a atacantes remotos falsificar la comprobación de seguridad de cabeceras HTTP y causar una denegación de servicio o ejecutar código arbitrario mediante valores de campos de las cabeceras HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8797.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/454091","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3316","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4476","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A137","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A39","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8797.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/454091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A39","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0151","sourceIdentifier":"cve@mitre.org","published":"2002-04-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request."},{"lang":"es","value":"Desbordamiento de buffer en el proveedor múltiple de UNC (MUP) en sistemas operativos Microsoft Windows permite a usuarios locales provocar una denegación de servicio y posiblemente ganar privilegios de SYSTEM mediante una petición UNC larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101793727306282&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8752.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4426","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-017","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A145","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A89","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101793727306282&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8752.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A89","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0152","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh."},{"lang":"es","value":"Desbordamiento de buffer en varias aplicaciones de Microsoft para Macintosht permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código arbitrario invocando la directiva file:// con un número grande de caracteres /. Afecta a Internet Explorer 5.1, Outlook Express 5.0 a 5.0.2, Entourage v. X y 2001, PowerPoint v.X, 2001 y 98, y Excel V.X y 2001 para Macintosh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:entourage:2001:*:macos:*:*:*:*:*","matchCriteriaId":"CB669A95-12A3-4AD4-8949-F77117F22E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:entourage:v._x:*:macos:*:*:*:*:*","matchCriteriaId":"35885642-BB7D-4DEF-A340-387E57FBBDB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2001:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"8BC60CAC-F011-42FA-A3D1-1EA5A2410EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"DA71E158-6D0A-4BEF-8471-FE5C864E7073"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"4CF91C2F-EE6D-4C9E-8F39-1F632399EC49"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2001:*:macos:*:*:*:*:*","matchCriteriaId":"1C8FF0C2-39E8-4F73-958B-2BB195C5B559"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2001:sr1:mac_os:*:*:*:*:*","matchCriteriaId":"68257FB3-3280-4299-A96B-613F60D797C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:v.x:*:mac:*:*:*:*:*","matchCriteriaId":"1A57804E-CD79-4431-AA97-0F85C2CE20C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:macos:*:*:*:*:*","matchCriteriaId":"0C607D22-B01D-4404-9657-0D322CE59B0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.1:*:macos:*:*:*:*:*","matchCriteriaId":"A47283EA-513A-4EDC-BADA-659AFA28EA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.2:*:macos:*:*:*:*:*","matchCriteriaId":"EBA048BD-04A9-4BB9-9F3C-60FB1BE1D2BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.3:*:macos:*:*:*:*:*","matchCriteriaId":"FB6349F9-6C93-48A1-92F6-18BF1D286DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:98:*:macos:*:*:*:*:*","matchCriteriaId":"41CB2081-C1DB-4DB6-87AC-E6A8BCABDB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2001:*:macos:*:*:*:*:*","matchCriteriaId":"0602ABD8-0A65-47D5-9D04-6FD1A2F39B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:v.x:*:macos:*:*:*:*:*","matchCriteriaId":"DA57624A-D658-42D9-A197-1C8A7ED6ACF2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101897994314015&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8850.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5357","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4517","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101897994314015&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8850.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0153","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the \"Local Applescript Invocation\" vulnerability."},{"lang":"es","value":"Internet Explorer 5.1 para Macintosh permite a atacantes remotos evadir comprobaciones de seguridad e invocar AppleScripts locales dentro de un elemento HTML específico. Tambien conocido como vulnerabilidad de \"Invocación local de AppleScript\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.0:*:mac_os:*:*:*:*:*","matchCriteriaId":"2277E59E-D981-4D9D-8FC0-F124FB8B9C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"C6CB69E1-189F-425C-9023-DE2741669507"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:*:mac_os:*:*:*:*:*","matchCriteriaId":"B1C0170E-9574-4C90-94F3-F2C2851E2917"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0:a_mac_os:*:*:*:*:*:*","matchCriteriaId":"35AA9DC0-0694-48FC-8652-831DFAB29226"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.0.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"D4A15873-B3D2-4017-99CF-E3625FD227F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:4.5:*:macintosh:*:*:*:*:*","matchCriteriaId":"55EAB232-C39A-4737-85F3-3D727C727F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0:*:macos:*:*:*:*:*","matchCriteriaId":"D3F350E9-3677-43B3-984F-DA39397D6885"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.1:*:mac_os:*:*:*:*:*","matchCriteriaId":"4CF91C2F-EE6D-4C9E-8F39-1F632399EC49"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8851.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5356","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/251805","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3935","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7969","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8851.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/251805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0154","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments."},{"lang":"es","value":"Desbordamiento de buffer en procedimientos almacenados extendidos en Microsoft SQL Server 7.0 y 2000 permiten a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario mediante una consulta a la base de datos con unos ciertos argumentos largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101535353331625&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/627275","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/261775","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-020","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A121","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101535353331625&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/627275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/261775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0155","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX Microsoft MSN Chat, usado en MSN Messenger 4.5 y 4.6, y Exchange Instant Messenger 4.5 y 4.6, permite a atacantes remotos ejecutar código arbitrario mediante un parámetro ResDLL largo en el OCX MSNChat."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_chat_control:*:*:*:*:*:*:*:*","matchCriteriaId":"733AB93D-8480-4577-AB65-3E0342B67F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"DFEE276F-4ACC-440B-9F36-FAA7DAD4BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"083C6323-8712-4A42-893D-6A6BE5997689"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger_service_for_exchange:4.5:*:*:*:*:*:*:*","matchCriteriaId":"B2A6D4B7-53E1-423D-A419-330E0B3C661B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger_service_for_exchange:4.6:*:*:*:*:*:*:*","matchCriteriaId":"5040E94F-9F17-4B21-9F99-3378B11D02CE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-13.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9041.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4707","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102089960531919&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9041.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0157","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file."},{"lang":"es","value":"Nautilus 1.0.4 y anteriores permiten a usuarios sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero .nautilus-metafile.xml"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eazel:nautilus:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1AC7C72F-5D37-4C60-BC16-0EB95A7D4538"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8995.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-064.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4373","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8995.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0158","sourceIdentifier":"cve@mitre.org","published":"2002-04-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument."},{"lang":"es","value":"Desbordamiento de buffer en XSun sobre Solaris 2.6 a 8 permite a un usuario local obtener privilegios de root mediante un argumento -co largo de linea de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:sparc:*:*:*:*:*","matchCriteriaId":"C67E67BE-A376-4034-B2DC-DC84E4F2B6E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F830AE29-6AC0-4C78-A637-E69BA63FAF9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*","matchCriteriaId":"32CF7469-6D2F-4E34-8013-7F0D3433D0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101776858410652&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4408","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8703","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101776858410652&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0159","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN  module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002."},{"lang":"es","value":"Vulnerabilidad de formato de cadena en la función de administración de Cisco Secure Access Control Server (ACS) para Windows, 2.6.x y anteriores y 3.x a 3.01 (build 40), permite a atacantes remotos hacer caer (crash) el módulo CSADMIN, denegando el sevicio de administración, o ejecutar código arbitrario mediante cadenas de formato en la URL al puerto 2002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F3F4B3B8-7775-444B-AAC7-E330F03697B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8EEAC040-ACC5-4837-808A-DBBBBE2C8EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"840AFC20-FFD8-4FE0-BACC-8201848D6BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"9B14A32F-622D-48D5-A0D4-0B3C165185DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"84213205-06FB-4454-928A-CC7673F8020B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101787248913611&w=2","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8742.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4416","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101787248913611&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8742.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0160","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\\.. (modified ..) in the URL to port 2002."},{"lang":"es","value":"La función de administración en Cisco Secure Access Control Control Server (ACS) para Windows, 2.6.x y anteriores, y 3.x a 3.01 (build 40), permite a atacantes remotos leer HTML, clases de Java y ficheros de imágenes fuera de la raíz del web mediante un .... (ataque punto punto modificado) en la URL al puerto 2002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6:*:*:*:*:*:*:*","matchCriteriaId":"F3F4B3B8-7775-444B-AAC7-E330F03697B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8EEAC040-ACC5-4837-808A-DBBBBE2C8EE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"840AFC20-FFD8-4FE0-BACC-8201848D6BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"9B14A32F-622D-48D5-A0D4-0B3C165185DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"84213205-06FB-4454-928A-CC7673F8020B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101786689128667&w=2","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5352","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101786689128667&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0162","sourceIdentifier":"cve@mitre.org","published":"2002-03-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory."},{"lang":"es","value":"LogWatch 2.1.1 y anteriores permiten a usuarios locales ejecutar código arbitrario mediante un ataque de enlaces simbólicos en el directorio temporal de de LogWatch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logwatch:logwatch:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"AC1A4892-76B5-4147-BA45-04F5118AAA7E"}]}]}],"references":[{"url":"http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101724766216872","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/264233","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8652.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4374","source":"cve@mitre.org"},{"url":"http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101724766216872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/264233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8652.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0163","sourceIdentifier":"cve@mitre.org","published":"2002-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses."},{"lang":"es","value":"Desbordamiento de buffer en Squid anterior a 2.4.9 permite a un atacante remoto producir una denegación de servicio, y probablemente ejecutar código arbitrario, mediante respuestas DNS comprimidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4_9","matchCriteriaId":"9FE5187F-1587-43D4-801C-99C47F2AFC01"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-017.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:19.squid.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101716495023226&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8628.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-027.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4363","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_2.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-017.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:19.squid.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101716495023226&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8628.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-027.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0164","sourceIdentifier":"cve@mitre.org","published":"2002-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges."},{"lang":"es","value":"Vulnerabilidad en la extensión MIT-SHM del servidor X en Linux permite a usuarios locales leer y escribir arbitrariamente memoria compartida, y posiblemente causar una denegación de servicio o ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A218B67-B87B-4A5E-B9EF-EF39ADEAD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59A82AD5-A42D-49FF-A9D4-A57C8433A5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB41DE44-C3A1-4CC9-ACA7-4EC171D68910"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C31B1A4A-96AD-4322-8AF3-733D66DBB50E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021001-01-P","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.14/CSSA-2002-SCO.14.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103547625009363&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-380","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/caldera_advisory-2006.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-067.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4396","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8706","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021001-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.14/CSSA-2002-SCO.14.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103547625009363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/caldera_advisory-2006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0165","sourceIdentifier":"cve@mitre.org","published":"2002-04-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162."},{"lang":"es","value":"Log Watch 2.5 permite a usuarios locales obtener privilegios de root mediante un ataque de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logwatch:logwatch:2.5:*:*:*:*:*:*:*","matchCriteriaId":"9AB56E8B-F08F-4110-A65F-7C5B95649310"}]}]}],"references":[{"url":"http://list.kaybee.org/archives/logwatch-announce/2002-March/000003.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101787227513000&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8652.php","source":"cve@mitre.org"},{"url":"http://list.kaybee.org/archives/logwatch-announce/2002-March/000003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101787227513000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8652.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0166","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos de sitios cruzados (cross-site scripting) en Analog anteriores a 5.22 permite a atacantes remotos ejecutar JavaScript mediante una petición HTTP conteniendo el script, que es introducido en un fichero de log del web, y no es filtrado adecuadamente por Analog cuando se muestra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:3.90_beta1:*:*:*:*:*:*:*","matchCriteriaId":"EC102017-B339-41D9-B11E-CF64F983A750"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:3.90_beta2:*:*:*:*:*:*:*","matchCriteriaId":"657632A3-2897-422C-A088-3874E6725E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D7B91F08-55C9-43EE-A80F-9869C5C58CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.01:*:*:*:*:*:*:*","matchCriteriaId":"527DE616-EF06-47AA-95F4-1EB6A7E294A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.02:*:*:*:*:*:*:*","matchCriteriaId":"D8F4F056-9002-4A4C-8EDC-4B79BDC4FA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.03:*:*:*:*:*:*:*","matchCriteriaId":"6899BFF0-FF4B-4432-A462-E3C51E056017"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.04:*:*:*:*:*:*:*","matchCriteriaId":"5FDE3231-1587-4C2A-BF06-101CB521273F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.11:*:*:*:*:*:*:*","matchCriteriaId":"3356840C-D439-482D-A887-0232225CD2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.14:*:*:*:*:*:*:*","matchCriteriaId":"F4483701-C15F-4A16-98CC-96227413B4A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.15:*:*:*:*:*:*:*","matchCriteriaId":"015FD63B-D99C-40C1-9421-80006B248781"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.16:*:*:*:*:*:*:*","matchCriteriaId":"A4662985-2475-4A86-B80B-2B443A405990"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.90_beta2:*:*:*:*:*:*:*","matchCriteriaId":"D263B198-E177-4AA4-A3B9-4BA8DE2F5BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.90_beta3:*:*:*:*:*:*:*","matchCriteriaId":"759C4FB3-38F9-4BE7-9377-900D8BEC364E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.90_beta4:*:*:*:*:*:*:*","matchCriteriaId":"557CB8FC-C129-4405-B820-89B0FFEA4A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:4.91_beta1:*:*:*:*:*:*:*","matchCriteriaId":"3CB8DB25-CF43-4679-AD32-8CCD4AD9C304"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9924882D-A147-46EC-B09F-ED4023AFD946"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:5.01:*:*:*:*:*:*:*","matchCriteriaId":"3112A224-B446-48C1-B5DF-738A2A008DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"6776B5E3-DC49-4997-BA1F-3D3602D386E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CA38754B-9ABE-4E1C-A80E-677B9657815A"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:5.02:*:*:*:*:*:*:*","matchCriteriaId":"5CD6B280-FB4C-4096-8055-CB176CDA6755"},{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:5.03:*:*:*:*:*:*:*","matchCriteriaId":"EA3E3239-EB87-4D56-B3AF-E940BACE7F70"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-125","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8656.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2059","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-059.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4389","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8656.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0167","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM."},{"lang":"es","value":"Imlib anteriores a 1.9.13 a veces usa el paquete NetPBM para cargar imágenes de confianza, lo que podría permitir a atacantes causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario mediante ciertas debilidades de NetPBM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AC774637-8B95-4C69-8665-86A67EAEBB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9928B65C-A2F3-4D95-9A73-6DE4415463B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"072BDD6E-D815-4996-B78C-42502FB8BE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AE9D28DB-FFC6-4C7F-89F6-85740B239271"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"988CDE52-220B-489D-9644-94CC5274E678"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B49B4277-ECFD-4568-94C1-6E02BF238A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"882A873F-D3D3-4E11-9C6B-B45C53672711"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"8DA760F0-EFA2-4B4E-BB95-8FD857CD3250"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"1C72DEC7-5558-4121-89CE-6E9B382C849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"6880B01C-0804-4CCF-9916-89807BBD4C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1FE16231-4FB4-4D30-BE83-AD400E357280"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.11:*:*:*:*:*:*:*","matchCriteriaId":"27937897-40B1-4D86-AFF0-ACA1B7F7A33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.12:*:*:*:*:*:*:*","matchCriteriaId":"A533869A-BAF1-4A26-AD33-0C4B6A62AA65"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-048.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4339","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0168","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption."},{"lang":"es","value":"Vulnerabilidad en Imlib antes de 1.9.13 permiten a atacantes causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario manipulando argumentos que se pasan a malloc(), lo que produce corrupción el el montón (heap)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AC774637-8B95-4C69-8665-86A67EAEBB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9928B65C-A2F3-4D95-9A73-6DE4415463B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"072BDD6E-D815-4996-B78C-42502FB8BE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AE9D28DB-FFC6-4C7F-89F6-85740B239271"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"988CDE52-220B-489D-9644-94CC5274E678"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B49B4277-ECFD-4568-94C1-6E02BF238A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"882A873F-D3D3-4E11-9C6B-B45C53672711"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"8DA760F0-EFA2-4B4E-BB95-8FD857CD3250"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"1C72DEC7-5558-4121-89CE-6E9B382C849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"6880B01C-0804-4CCF-9916-89807BBD4C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1FE16231-4FB4-4D30-BE83-AD400E357280"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.11:*:*:*:*:*:*:*","matchCriteriaId":"27937897-40B1-4D86-AFF0-ACA1B7F7A33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.12:*:*:*:*:*:*:*","matchCriteriaId":"A533869A-BAF1-4A26-AD33-0C4B6A62AA65"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-048.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4336","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0169","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier."},{"lang":"es","value":"La hoja de estilo por defecto de DocBook en RedHat Linux 6.2 a 7.2 se instala con una opción insegura activada, lo que podría permitir a usuarios sobreescribir ficheros fuera del directorio actual desde un documento no de confianza, usando una ruta larga como elemento identificador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:docbook_stylesheets:1.54.13:*:*:*:*:*:*:*","matchCriteriaId":"7FB39657-9421-419D-9F23-7719CD834D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:docbook_utils:0.6.9-2:*:*:*:*:*:*:*","matchCriteriaId":"4966560B-32E1-416E-8A56-53D4A9991155"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:docbook_utils:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"DAAC8103-B804-4520-8AF8-67A333E50497"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4095","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8983.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5349","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-062.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4654","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8983.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0170","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration."},{"lang":"es","value":"Zope 2.2.0 a 2.5.1 no verifica adecuamente el acceso a objetos con perfiles del proxy, lo que podría permitir a algunos usuarios acceder a documentos violando la configuración pretendida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF3C0DAC-01B0-4C9D-9AA2-8F02F974DCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"12A13ABF-9850-4AB8-A0C9-8D6B9F3D9862"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"15B80335-5F59-4530-A241-437367369BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"53427D40-495B-4F37-95A5-6D069186CBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1DB2FC39-A95D-414E-A67E-66AF79A12CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"925BC42D-02B5-4B6F-ADC6-156407868276"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"25DE8A9F-432B-40C3-9A7E-3472E2AF0131"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"2B34354C-3369-4926-9DFC-44608A1BC82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"143AD011-2D33-43E1-AFEA-7C1BC96CBDF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"56D73A2B-7D4B-43BA-B7D7-E1FE397BD577"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"54DFA87E-DC83-40A8-AAC1-40B37F024255"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4701F71F-D467-4C9E-8819-9E4361AB1C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"89A37024-4562-451B-B1C0-CD27DD694F30"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"6881C300-3639-4B31-8182-C9DACE3F4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.4b1:*:*:*:*:*:*:*","matchCriteriaId":"7D58B127-6410-4D56-9ACA-A453C64ACD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"219AC292-9793-4FA6-A6E8-9E6D922AFC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.1b1:*:*:*:*:*:*:*","matchCriteriaId":"F1F42437-4591-4E5C-8AF2-C8EF6BCB694C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101503023511996&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8334.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5350","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-060.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4229","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/hotfixes/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101503023511996&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8334.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/hotfixes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0171","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges."},{"lang":"es","value":"IRISConsole 2.0 puede permitir a usuarios iniciar una sesión de la cuenta icadmin con una contraseña incorrecta en algunas circunstancias, lo que les podría permitir ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:irisconsole:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4920230A-DB8C-44AF-9154-4E08FBA4D918"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020406-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8933.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/498707","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5351","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4588","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020406-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8933.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/498707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0172","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption)."},{"lang":"es","value":"/dev/ipfilter en SGI IRIX 6.5 es instalado por /dev/MAKEDEV con permisos inseguros por defecto (664), lo que podría permitir a un usuario local causar una denegación de servicio (disrupción de tráfico)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020408-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8960.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/770891","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4648","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020408-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8960.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/770891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0173","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges."},{"lang":"es","value":"Desbordamiento de buffer en cpr para el paquete de software eoe.sw.cpr SGI Checkpoint-Restart Software package en SGI IRIX 6.5.10 y anteriores pueden permitir a los usuarios locales ganar privilegios de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020409-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8959.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5359","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4644","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020409-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8959.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0174","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file."},{"lang":"es","value":"nsd en SGI IRIX anteriores a 6.5.11 permite a usuarios locales sobreescribir ficheros arbitrarios y ganar privilegios de root mediante un ataque de enlaces simbólicos en el fichero nsd.dump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020501-01-I","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8981.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4655","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020501-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8981.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0175","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the \"'\" and \"I\" characters, which are implemented in libc but not libsafe."},{"lang":"es","value":"libsafe 2.0-11 y anteriores permiten a atacantes sortear la protección contra vulnerabilidades de cadenas formateadas mediante cadenas formateadas que usan caractéres \"|\" (tubería) y otros, que están implentados en libc pero no en libsafe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ADD6179C-384E-410A-9DD6-CECA721A4E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E718DF3-7A5C-4E34-BB33-5A0CE16D83CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25908E92-AD76-4CD0-A194-C3DF80EA730F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"191BFDD7-31A8-4ABC-B81D-D6848D3FF7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"7F927CFC-B432-49BD-AA19-7F4B0E593FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"3CD90005-E191-4E07-B432-B836ECC75349"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"6565DBC4-0E63-4F18-9F49-A418C4111E99"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/263121","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8593.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4326","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/263121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8593.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0176","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe."},{"lang":"es","value":"Los envolventes de printf() en libsafe 2.0-11 y anteriores no manejan adecuamente especificadores de indización de argumentos, lo que podria permitir a atacantes explotar ciertas llamadas a funciones mediante argumentos no verificados por libsafe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ADD6179C-384E-410A-9DD6-CECA721A4E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"9E718DF3-7A5C-4E34-BB33-5A0CE16D83CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25908E92-AD76-4CD0-A194-C3DF80EA730F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"191BFDD7-31A8-4ABC-B81D-D6848D3FF7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"7F927CFC-B432-49BD-AA19-7F4B0E593FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"3CD90005-E191-4E07-B432-B836ECC75349"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:libsafe:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"6565DBC4-0E63-4F18-9F49-A418C4111E99"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/263121","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8594.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4327","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/263121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8594.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0177","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client."},{"lang":"es","value":"Desbordamientos de buffer en icecast 1.3.11 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante una petición HTTP GET larga de un cliente MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9C35E7B3-C898-4127-9188-65E691148EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.8_beta2:*:*:*:*:*:*:*","matchCriteriaId":"09D43B23-E146-41E9-AFA4-A107DF96A268"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"85B1944C-E99D-4FF2-AE5B-2887F9BE1E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D86170BC-3616-4B26-832B-6F6C41D02081"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101780890326179&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101786838300906&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101793704306035&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/596387","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4415","source":"cve@mitre.org"},{"url":"http://www.xiph.org/archives/icecast/2616.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101780890326179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101786838300906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101793704306035&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/596387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xiph.org/archives/icecast/2616.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0178","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands."},{"lang":"es","value":"uudecode, como aparece en el paquete sharutils anteriores a 4.2.1, no comprueba si el nombre del fichero o el fichero uu-codificado es una tubería o un enlace simbólico, lo que podría permitir a atacantes sobreescribir ficheros o ejecutar comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:sharutils:4.2:*:*:*:*:*:*:*","matchCriteriaId":"48361665-C825-4AD9-9347-CF6D1E4C9515"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103599320902432&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4132","source":"cve@mitre.org"},{"url":"http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9075.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/336083","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8274","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-065.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-180.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4742","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103599320902432&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9075.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/336083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0179","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de buffer en xpilot-server para XPilot 4.5.0 y anteriores permiten a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpilot:xpilot:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.0","matchCriteriaId":"2F9C0BDD-6EFF-4479-BF12-6109EF84B187"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-127","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8852.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4534","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8852.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4534","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0180","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname."},{"lang":"es","value":"Desbordamiento de buffer en Webalizer 2.01-06, cuando se configura para usar consultas inversas de DNS, permite a atacantes remotos ejecutar código arbitrario conectándose al servidor web monitorizado desde una IP que se resuelve con un nombre de host largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bradford_barrett:webalizer:2.0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"3383AAE8-9AEC-420C-A788-A7BC7F73309F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bradford_barrett:webalizer:2.0.1.9:*:*:*:*:*:*:*","matchCriteriaId":"19C9CA23-7C3F-46B3-802D-0D35BEBCBE6D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101888467527673&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/582923","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mrunix.net/webalizer/news.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4504","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8837","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101888467527673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/582923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mrunix.net/webalizer/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0181","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter."},{"lang":"es","value":"Vulnderabilidad de secuencias de comandos en sitios cruzados (cross-site scripting) en Horde anteriores a 1.2.8 y IMP anteriores a 2.2.8 permite a atacantes remotos ejecutar scripts y robar cookies de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:horde:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"64629495-1CFD-4831-87BF-8C5EFACE1073"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B7FBC61D-6A08-4DE8-A5E5-A3FC57E7759D"}]}]}],"references":[{"url":"http://bugs.horde.org/show_bug.cgi?id=916","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000473","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101828033830744&w=2","source":"cve@mitre.org"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-016.1.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-126","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8769.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4444","source":"cve@mitre.org"},{"url":"http://bugs.horde.org/show_bug.cgi?id=916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101828033830744&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-016.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8769.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0184","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded."},{"lang":"es","value":"Desbordamiento del montón (heap) en sudo anteriores a 1.6.6 puede permitir a usuarios locales ganar privilegios de root mediante caractéres especiales en el argumento -p (prompt), que no son expandidos adecuadamente."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*","versionEndExcluding":"1.6.6","matchCriteriaId":"6C663D6B-DD2D-4C4D-AB13-D5D1960BF955"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101974610509912&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101975443619600&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=101979472822196&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=102010164413135&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102010164413135&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2002/dsa-128","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/8936.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/820083","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-028.php3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2040.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_014_sudo_txt.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-071.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-072.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/4593","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101974610509912&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101975443619600&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=101979472822196&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=102010164413135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102010164413135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2002/dsa-128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/8936.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/820083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-028.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_014_sudo_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/4593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0185","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module."},{"lang":"es","value":"mod_python version 2.7.6 y anteriores permiten a un módulo indirectamente importado por un módulo publicado a ser entonces accedido mediante el publicador, lo que permite a atacantes remotos llamar funciones potencialmente peligrosas del módulo importado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_python:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.6","matchCriteriaId":"FF49F488-A53A-4E2C-84E7-24F71A8A8263"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8997.php","source":"cve@mitre.org"},{"url":"http://www.modpython.org/pipermail/mod_python/2002-April/001991.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.modpython.org/pipermail/mod_python/2002-April/002003.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-070.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4656","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8997.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.modpython.org/pipermail/mod_python/2002-April/001991.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.modpython.org/pipermail/mod_python/2002-April/002003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0186","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka \"Unchecked Buffer in SQLXML ISAPI Extension.\""},{"lang":"es","value":"Desbordamiento de búfer en la extensión SQLXML ISAPI de  Microsoft SQL Server 2000, permite a atacantes remotos la ejecución arbitraria de código mediante consultas de datos con un parámetro content-type, también conocido como \"Unchecked Buffer in SQLXML ISAPI Extension\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102397345410856&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9328.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/811371","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5347","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5004","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A484","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A489","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102397345410856&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9328.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/811371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0187","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka \"Script Injection via XML Tag.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en el componente SQLXML de Microsoft SQL Server 2000, permite a atacantes la ejecución arbitraria de código mediante el parámetro root como parte de una consulta XML SQL, también conocida como \"Script Injection via XML Tag\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102397345410856&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0100.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102397345410856&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0188","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the \"Content Disposition\" vulnerability."},{"lang":"es","value":"Microsoft Internet Explorer 5.01 y 6.0 permite a atacantes remotos ejecutar código arbitrario mediante los campos de cabecera Content-Type y Content-Disposition malformados; lo que hace que la aplicación que debería manejar el fichero falso lo devuelva al sistema operativo en vez levantar un mensaje de error. Tambíen conocida como segunda variante de la vulnerabilidad de \"Disposición de contenidos\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0126.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9086.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.lac.co.jp/security/english/snsadv_e/48_e.html","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9086.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.lac.co.jp/security/english/snsadv_e/48_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0189","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the \"Cross-Site Scripting in Local HTML Resource\" vulnerability."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (cross-site scripting) en Internet Explorer 6.0 permite a atacantes remotos ejecutar secuencias de comandos en la zona \"Ordenador Local\" con una URL que explota un recurso HTML local. También conocida como \"Vulnerabilidad de secuencias de comandos en sitios cruzados en recurso HTML Local\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0190","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka \"Zone Spoofing through Malformed Web Page\" vulnerability."},{"lang":"es","value":"Microsoft Internet Explorer 5.01, 5.5 y 6.0 permite a atacantes remotos ejecutar código arbitrario con menos restricciones de seguridad mediante una página Web malformada que requiere conectividad NetBIOS. También conocida como \"Vulnerabilidad de engaño de zona mediante una página Web malformada\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9084.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/242891","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4753","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A923","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9084.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/242891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0191","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the \"{\" character via script containing the cssText property of the stylesheet object, aka \"Local Information Disclosure through HTML Object\" vulnerability."},{"lang":"es","value":"Microsoft Internet Explorer 5.01, 5.5 y 6.0 permite a atacantes remotos ver ficheros arbitrarios que contienen el carácter \"{\" (llave) mediante una secuencia de comandos que contenga la propiedad cssText del objeto hoja de estilos. También conocida como vulnerabilidad de \"desvelo de información local mediante objeto HTML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101778302030981&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8740.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4411","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101778302030981&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8740.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0192","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2023-11-07T01:55:48.243","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-0193, CVE-2002-1564.  Reason: This candidate was published with a description that identified a different vulnerability than what was identified in the original authoritative reference.  Notes: Consult CVE-2002-0193 or CVE-2002-1564 to find the identifier for the proper issue"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-0193","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the \"Content Disposition\" vulnerability."},{"lang":"es","value":"(repetida de CAN-2002-0193)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4752","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9085","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A27","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A99","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A99","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0196","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root."},{"lang":"es","value":"GetRelativePath en ACD Incorporated CwAPI 1.1 solo verifica si la raíz del servidor está dentro de la ruta (path) lo que podría permitir a atacantes remotos leer o escribir ficheros fuera de la raíz del web, en otros directorios cuya ruta incluye la raíz del web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acd_incorporated:cwpapi:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3FF5F0FC-785B-41DA-B640-62A52509E26F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251699","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=144966","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7981.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3924","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=144966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7981.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0197","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the \"[B]\" sequence, which makes the message appear legitimate."},{"lang":"es","value":"psyBNC 2.3 beta y anteriores permiten a atacantes remotos suplantar mensajes cifrados y autenticados enviando línes que comienzan con la secuencia \"\"[B]\"\", lo que hace al mensaje parecer legítimo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psychoid:psybnc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"AD858BFC-5241-4BE8-8354-68BE727740F9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101173478806580&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7985.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3931","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101173478806580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/251832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7985.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0198","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename."},{"lang":"es","value":"Desbordamiento de buffer en plDaniels ripMime 1.2.6 y anteriores, usados en programas como xamime y inflex, permiten a atacantes remotos ejecutar código arbitrario mediante un adjunto en un nombre de fichero largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:inflex:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AD8D188C-20CD-47D0-BCA5-E4E055C8CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101182636812381&w=2","source":"cve@mitre.org"},{"url":"http://pldaniels.org/ripmime/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7983.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3941","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101182636812381&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pldaniels.org/ripmime/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7983.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0199","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes."},{"lang":"es","value":"Desbordamiento de buffer en admin.cgi de Nullsoft Shoutcast Server 1.8.3 permite a atacantes remotos causar un denegación de servicio y posiblemente ejecutar código arbitrario con un grán numero de barras invertidas (\\\\)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"25EFDB45-B6D9-482E-8EBF-79830E4BD025"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101167484012724&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3934","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101167484012724&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0200","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name."},{"lang":"es","value":"Cyberstop Web Server para Windows 0.1 permite a atacantes remotos causar una denegación de servicio mediante una petición HTTP a un nombre de dispositivo de MS-DOS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyberstop:cyberstop_web_server:*:*:*:*:*:*:*:*","matchCriteriaId":"BBC7C2EF-C4CD-4D21-B115-6F48E8E6156C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101174569103289&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7959.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3929","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101174569103289&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7959.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0201","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow."},{"lang":"es","value":"Cyberstop Web Server para Windows 0.1 permite a atacantes remotos causar una denegación de servicio (crash) y posiblemente ejecutar código arbitrario mediante una petición HTTP GET larga, posiblemente disparando un desbordamiento de buffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyberstop:cyberstop_web_server:*:*:*:*:*:*:*:*","matchCriteriaId":"BBC7C2EF-C4CD-4D21-B115-6F48E8E6156C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101174569103289&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7960.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3930","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101174569103289&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7960.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0202","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder."},{"lang":"es","value":"PaintBBS 1.2 instala ciertos ficheros y directorios con permisos inseguros, lo que permite a usuarios locales (1) obtener la contraseña cifrada del servidor mediante el fichero oekakibbs.conf, legible por todos los usuarios, o (2) modificar la configuración del servidor mediante la carpeta /oekaki/, escribible por todos los usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paintbbs:paintbbs:1.2:*:*:*:*:*:*:*","matchCriteriaId":"696CEEDA-B4C3-4A4F-90E3-D37FBEBA02F4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/251985","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7982.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3948","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7982.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0203","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter."},{"lang":"es","value":"ttawebpot.cgi en Tarantella Enterprise 3.20 en SPARC Solaris y Linux, y 3.1x y 3.0x incluyendo 3.11.903, permite atacantes remotos ver los contenidos del directorio mediante un parámetro pg vacío."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDA7723A-7057-4410-A6B9-885B10ACEE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.10:*:*:*:*:*:*:*","matchCriteriaId":"680CCD63-BC37-4ED5-8CFF-B36D115F7D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101190195430376&w=2","source":"cve@mitre.org"},{"url":"http://www.tarantella.com/security/bulletin-03.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=101190195430376&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tarantella.com/security/bulletin-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-0204","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command."},{"lang":"es","value":"Desbordamiento de buffer en GNU Chess (gnuchess) 5.02 y anteriores, si modificado o usado en una capacidad de red contraria a su propio diseño como aplicación monousuario, puede permitir a atacantes remotos y locales ejecutar código arbitrario mediante un comando largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:chess:*:*:*:*:*:*:*:*","versionEndIncluding":"5.02","matchCriteriaId":"2B357BD1-18D7-4F21-9274-49B67204A9E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101189688815514&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7991.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3949","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101189688815514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7991.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0205","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the \"Description\" parameter."},{"lang":"es","value":"La vulnerabilidad CSS (Cross-site scripting) en el fichero error.asp de Plumtree Corporate Portal versiones de la  3.5 a la 4.5, permite a atacantes remotos ejecutar códigos arbitrarios en otros clientes mediante el parámetro \"\"Description\"\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:plumtree:plumtree_corporate_portal:3.5:*:*:*:*:*:*:*","matchCriteriaId":"8C500AF9-2B35-490B-B804-7F05DF150D7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5CDD20-DCDA-4595-9542-9BF69B3A685B"},{"vulnerable":true,"criteria":"cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0_sp1:*:*:*:*:*:*:*","matchCriteriaId":"24DD8844-463D-4F12-B5F6-F704983E0E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0i:*:*:*:*:*:*:*","matchCriteriaId":"B68BF3F0-2B97-433D-B5F5-805146D52E60"},{"vulnerable":true,"criteria":"cpe:2.3:a:plumtree:plumtree_corporate_portal:4.0i_sp1:*:*:*:*:*:*:*","matchCriteriaId":"ACECEA85-8F42-4037-BEF7-639D0FF40B2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:plumtree:plumtree_corporate_portal:4.5:*:*:*:*:*:*:*","matchCriteriaId":"593151E5-DD0B-435D-9C8F-95495146C8AB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101189911121808&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/248396","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7817.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3799","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101189911121808&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/248396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7817.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0206","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter."},{"lang":"es","value":"index.php en Francisco Burzi PHP-Nuke 5.3.1 y versiones anteriores permite a atacantes remotos ejecutar código PHP arbitrario especificando una URL al código malicioso en el parámetro fichero ('file')."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A9E1DB3-F0A2-4BD8-9D9D-53CA07B50ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7200662-F3B7-4755-8887-3BEEEDB469F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CB52E20-9A87-4CE4-9E75-B0833F083845"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E87A3E6-935F-4569-8B5F-70A88442FD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D7E4C570-648F-48EF-B965-16C5878A0CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EC3CBB92-6A11-4B5B-A910-B0287AB12846"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C17255B-64E1-4DFF-8C21-8BB1D78A5256"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"E3ED3BFC-C8CF-4537-832C-0D00400AC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101121913914205&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/221683","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3889","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7914","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101121913914205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/221683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0207","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header."},{"lang":"es","value":"Desbordamiento del búfer en la aplicación Real Networks RealPlayer 8.0 y versiones anteriores, permite a atacantes remotos ejecutar código arbitrario usando un valor de longitud de cabecera que excede la longitud actual de cabecera."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"7BB23A59-3C3E-42AF-8516-A6BF09D23ABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer_intranet:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0","matchCriteriaId":"BAC6EBA2-7964-432D-883E-F894F6A44E84"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer_intranet:7.0:*:*:*:*:*:*:*","matchCriteriaId":"777C703D-70A6-4091-8C21-85587657BBA2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0044.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/252414","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/252425","source":"cve@mitre.org","tags":["Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://sentinelchicken.com/advisories/realplayer/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7839.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3809","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/252414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/252425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Third Party Advisory","VDB Entry"]},{"url":"http://sentinelchicken.com/advisories/realplayer/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7839.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0208","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire."},{"lang":"es","value":"PGP Security PGPfire 7.1 para Windows altera la pila TCP/IP del sistema y modifica paquetes en los mensajes ICMP de error de un modo que permite a atacantes remotos saber que el sistema esta ejecutando PGPfire."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network.associates:pgpfire:7.1:*:*:*:*:windows:*:*","matchCriteriaId":"47C01348-4D8A-4000-AA8E-907FB0A360D0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252407","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8008.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3961","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/252407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8008.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0209","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address."},{"lang":"es","value":"Nortle Alteon ACEdirector WebOS 9.0 con las carácteristicas de Balanceo de Carga de Servidor (Server Load Balancing, SLB) y de persistencia basada en cookies, permite a atacantes remotos determinar la IP real de un servidor web con una sesión medio cerrada, lo que causa que ACEdirector envíe paquetes del servidro sin cambiar la dirección a la IP virtual."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:alteon_acedirector:9.0:*:*:*:*:*:*:*","matchCriteriaId":"A64B9FB9-B68A-4BF1-9FE3-6A3929CD1CFC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/261548","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8010.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3964","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/261548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8010.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0210","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file."},{"lang":"es","value":"setlicense para TOLIS Group Backup y Restore Utility (BRU) 17.0 permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlace simbólico al fichero temporal /tmp/brutest.$$."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tolis_group:bru:17.0:*:*:*:*:*:*:*","matchCriteriaId":"1E4E6095-4F9E-4540-A5C6-4CF34223CA33"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252614","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8003.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3970","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8003.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0211","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary \"gunzip\" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed."},{"lang":"es","value":"La condición de carrera en el script de instalación de Tarantella Enterprise 3 versiones 3.01 a 3.20 crea un programa temporal \"\"gunzip\"\" con permiso de escritura para todos los usuarios antes de ejecutarlo, lo cual podría permitir a usuarios locales la ejecución de comandos arbitrarios modificando el programa antes de que sea ejecutado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"49253A0A-7DFA-4B92-9361-48B48F026E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3D3D8C8E-7B2F-4543-8D00-1D25007012A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.3.10:*:*:*:*:*:*:*","matchCriteriaId":"93841F4A-16CB-4023-AE95-145036C6B898"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.3.11:*:*:*:*:*:*:*","matchCriteriaId":"6D3BC128-3AA6-4C87-A156-FDA71371BB42"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.3.20:*:*:*:*:*:*:*","matchCriteriaId":"4EC5D9C1-8944-41C3-8810-6D42DEF4081E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101208650722179&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/265845","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7996.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3966","source":"cve@mitre.org"},{"url":"http://www.tarantella.com/security/bulletin-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=101208650722179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/265845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7996.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tarantella.com/security/bulletin-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-0212","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack."},{"lang":"es","value":"El registro de usuarios en Hosting Controller versiones 1.1 a la 1.4.1 devuleve diferentes mensajes de error cuando intentan conectarse usuarios válidos y no válidos, lo que permite a atacantes remotos determinar la existencia de nombres válidos de usuario lo que hace más fácil llevar a cabo un ataque por fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*","matchCriteriaId":"94170D21-1196-4BA2-AEB9-C28A4F08B05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3364FE23-345B-428B-BF18-A0AE4D23B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"1220294A-27FC-4D1C-BFA8-2B7189E04469"}]}]}],"references":[{"url":"http://hostingcontroller.com/English/patches/ForAll/index.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101224151705897&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8006.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3971","source":"cve@mitre.org"},{"url":"http://hostingcontroller.com/English/patches/ForAll/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101224151705897&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8006.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0213","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory."},{"lang":"es","value":"xkas en Xinet K-AShare 0.011.01 para IRIX permite a usuarios locales la lectura de ficheros de su elección mediante un ataque por enlace simbólico al fichero VOLICON file, que copia el fichero .HSicon en un directorio compartido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinet:k-ashare:11.01:*:*:*:*:*:*:*","matchCriteriaId":"C4E7693D-28EF-444D-8505-47C9547F6505"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101223525118717&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8002.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3969","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101223525118717&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8002.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0214","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key."},{"lang":"es","value":"Compaq Intel PRO/Wireless 2011B LAN USB Device Driver en sus versiones de la 1.5.16.0 a la 1.5.18.0 almacena la clave 128-bit WEP (Wired Equivalent Privacy) en texto plano en una entrada del registro con permisos débiles, lo que permite a usuarios locales descifrar el tráfico en la red leyendo la clave WEP del registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:intel:intel_pro_wireless_2011b_lan_usb_device_driver:1.5.16.0:*:*:*:*:*:*:*","matchCriteriaId":"29B36909-71B9-4B97-A1ED-892FDCCC4B04"},{"vulnerable":true,"criteria":"cpe:2.3:o:intel:intel_pro_wireless_2011b_lan_usb_device_driver:1.5.18.0:*:*:*:*:*:*:*","matchCriteriaId":"6DDE2045-829B-4372-BEF4-B42DD9598159"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8015.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3968","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8015.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0215","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message."},{"lang":"es","value":"Agora.cgi  de la 3.2r a la 4.0 en modo depuración permite a atacantes remotos determinar la ruta completa del fichero agora.cgi mediante una petición de un fichero .html inexistente. La ruta aparece en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2:*:*:*:*:*:*:*","matchCriteriaId":"A7808DDA-412A-4798-B937-8FBA18A02CDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2a:*:*:*:*:*:*:*","matchCriteriaId":"EA2735C8-D031-4820-A07F-EEF0DA42C88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2b:*:*:*:*:*:*:*","matchCriteriaId":"AF52B479-C94E-4EFB-86E2-D5F5EF72066E"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B2145D6-0650-431A-9E1F-851619E5BE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2d:*:*:*:*:*:*:*","matchCriteriaId":"DD5925D7-F12E-4C04-A6F0-070D1BFDE13F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2e:*:*:*:*:*:*:*","matchCriteriaId":"F66BBAFC-CB62-481C-AAD9-AFBFC1570738"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2f:*:*:*:*:*:*:*","matchCriteriaId":"7CBE501A-DB0F-4FA0-80D9-45E0E3FFAB94"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"45F44DBA-A215-4A4B-9AC3-358AB61A1BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2h:*:*:*:*:*:*:*","matchCriteriaId":"599059EA-DA87-4B87-AE22-90628967A2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2i:*:*:*:*:*:*:*","matchCriteriaId":"802FE920-82B3-4D44-A449-736E009F53B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2j:*:*:*:*:*:*:*","matchCriteriaId":"62BAC6C3-923F-4869-AA2E-2E5BC8F3C568"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2ja:*:*:*:*:*:*:*","matchCriteriaId":"67275AFF-A988-447B-A15E-B725173BCE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2k:*:*:*:*:*:*:*","matchCriteriaId":"39F34030-D87B-491A-993A-E227ED99EF0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2l:*:*:*:*:*:*:*","matchCriteriaId":"3A6F3D9C-CF75-4E7B-A34D-5D515543E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2m:*:*:*:*:*:*:*","matchCriteriaId":"C6076E9F-CBBD-4AAC-94D9-AAB9B5F7D747"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2n:*:*:*:*:*:*:*","matchCriteriaId":"9641B186-4795-4A01-9A2E-0B6EAFBAA847"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2p:*:*:*:*:*:*:*","matchCriteriaId":"B43B8E13-15A8-4333-997B-A65D1F95120D"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2q:*:*:*:*:*:*:*","matchCriteriaId":"01CD9379-81D4-40E5-8712-C3ECC547BCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.2r:*:*:*:*:*:*:*","matchCriteriaId":"3C01009C-8A0F-4145-AFCC-266E9AC9F38F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3a:*:*:*:*:*:*:*","matchCriteriaId":"7D182707-0550-4730-BCC6-8E73726ACCA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3b:*:*:*:*:*:*:*","matchCriteriaId":"131B3AC9-E1BE-474F-BF5A-EE3A2F3925DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3c:*:*:*:*:*:*:*","matchCriteriaId":"B64A8A45-C79E-4B40-A9E0-DBE59620B98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3d:*:*:*:*:*:*:*","matchCriteriaId":"C75EC15B-B1FB-4D25-8281-791628336B77"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3e:*:*:*:*:*:*:*","matchCriteriaId":"660D3973-C72E-419F-B258-099AFE7D17F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3f:*:*:*:*:*:*:*","matchCriteriaId":"52255955-5C2F-41CC-B1F6-9B14AE1FF08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3i:*:*:*:*:*:*:*","matchCriteriaId":"91E45149-B2BB-444F-ABF4-6FC8FF7DED13"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:3.3j:*:*:*:*:*:*:*","matchCriteriaId":"CF7E4671-A0C9-449A-9CF6-9F5E5485DAC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CA62D301-78C5-4F44-9A54-E7BD860121DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0a:*:*:*:*:*:*:*","matchCriteriaId":"7BEF1EB8-7341-48AB-A220-6D1760B40A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0b:*:*:*:*:*:*:*","matchCriteriaId":"B7527F9F-EB74-40B3-82D0-952910C29B9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0c:*:*:*:*:*:*:*","matchCriteriaId":"3F67E952-4F8F-4C67-94B9-63097BF7B33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"D5308E74-F9CB-44D3-B89D-6D27266CD552"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_kneizys:agora.cgi:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"6FD8E0D8-7E18-4921-917B-015A8E0E9797"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252761","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8011.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3976","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8011.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0216","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the \"uid\" parameter."},{"lang":"es","value":"userinfo.php en XOOPS 1.0 RC1 permite a atacantes remotos obtener información sensible mediante un ataque de inyección de SQL en el parámetro \"uid\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3355CD8B-9EF3-46CE-8DA3-FCF64B24F529"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252827","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8028.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3977","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8028.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0217","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php."},{"lang":"es","value":"Vulnerabilidades de cruce de sitios de secuencias de comandos (Cross-site scripting, CSS) en el Sistema de Mensaje Privado de XOOPS 1.0 RC1 permite a atacantes remotos ejecutar Javascript en otros clientes web mediante (1) el campo de título o un cuadro de mensaje privado o (2) el parámetro del campo de imagen en pmlite.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"3355CD8B-9EF3-46CE-8DA3-FCF64B24F529"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252828","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8025.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8030.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3978","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3981","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8025.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8030.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0218","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument."},{"lang":"es","value":"Vulnerabilidad en cadena de formato en SAStcpd en SAS/Base oobjspawn en Sas/Integration Technologies 8.0 y 8.1permite a usuarios locales ejecutar código arbitrario mediante especificadores de formato en un argumento de línea de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_base:8.0:*:*:*:*:*:*:*","matchCriteriaId":"F0734A28-E164-4753-B30E-5A321C975C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_base:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D7EA5B08-5077-4B4A-9478-9566664F66E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_integration_technologies:8.0:*:*:*:*:*:*:*","matchCriteriaId":"79CA0803-E095-47A7-A537-A0A1DF33C83A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_integration_technologies:8.1:*:*:*:*:*:*:*","matchCriteriaId":"21A6AB9A-87AF-47D8-99F0-2E8A61E698BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/252847","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8018.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sas.com/service/techsup/unotes/SN/004/004201.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3980","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/252847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/252891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8018.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sas.com/service/techsup/unotes/SN/004/004201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0219","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument."},{"lang":"es","value":"Desbordamiento de Buffer en SAS/Base 8.0 y 8.1 oSAS/Integration Technologies 8.0 y 8.1 permite a usuarios locales ejecutar código arbitrario mediante argumentos de linea de comando largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_base:8.0:*:*:*:*:*:*:*","matchCriteriaId":"F0734A28-E164-4753-B30E-5A321C975C5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_base:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D7EA5B08-5077-4B4A-9478-9566664F66E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_integration_technologies:8.0:*:*:*:*:*:*:*","matchCriteriaId":"79CA0803-E095-47A7-A537-A0A1DF33C83A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:sas_integration_technologies:8.1:*:*:*:*:*:*:*","matchCriteriaId":"21A6AB9A-87AF-47D8-99F0-2E8A61E698BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/252847","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8017.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sas.com/service/techsup/unotes/SN/004/004201.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3979","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/252847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/252891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8017.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sas.com/service/techsup/unotes/SN/004/004201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0220","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters."},{"lang":"es","value":"phpsmssend.php en PhpSmsSend 1.0 permite a atacantes remotos ejecutar comandos arbitrarios mendiante un mensaje SMS conteniendo metacaracters del intérprete de comandos (shell)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpsmssend:phpsmssend:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AC5C2420-ED34-466D-8B62-C1F747F887EB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252918","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8019.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3982","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8019.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0221","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV."},{"lang":"es","value":"Etype Eser 2.97 permite a atacantes remotos causar un denegación de servicio (agotamiento de recursos) mediante un número grande de comandos PASV que consumen puertos del 1024 al 5000, lo que impide al servidor aceptar PASV válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.97:*:*:*:*:*:*:*","matchCriteriaId":"A62C0267-653F-4BBA-9718-FE30567C62BB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252944","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8020.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3983","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8020.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0222","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command."},{"lang":"es","value":"Etype Eserv 2.97 permite a atacntes remotos redirigir tráfico a otros sítios (tambíen conocido como rebote FTP (FTP bounce)) mediante el comando PORT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etype:eserv:2.97:*:*:*:*:*:*:*","matchCriteriaId":"A62C0267-653F-4BBA-9718-FE30567C62BB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252944","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8021.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3986","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8021.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0223","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension."},{"lang":"es","value":"Infopop UBB.Threads 5.4 y Wired Community Software WWWThreads 5.0 a 5.0.9 permiten atacantes remotos cargar (upload) ficheros arbitrarios usando un nombre de fichero que contiene una extensión aceptada, pero finaliza con otra diferente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infopop:ultimate_bulletin_board:5.4:*:*:*:*:*:*:*","matchCriteriaId":"5BEAFFD3-9F91-42B1-BDF6-7B3D372CF844"},{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F9AB5A13-F75D-4F03-93C4-0B8065C6192E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA2444A7-E2B6-4795-8677-2827FDA0F707"},{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"F0CBB120-1C42-49B1-B0C9-230B43592ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wired_community_software:wwwthreads:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"918809CD-B48E-4A06-B8DF-9186D9D64806"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253172","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8022.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3993","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8022.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0224","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input."},{"lang":"es","value":"El MSDTC (Microsoft Distributed Transaction Service Coordinator) para MS Windows 2000, MS IIS 5.0 y SQL Server 6.5 a 2000 permite a atacantes remotos causar una denegación de servicio (caída o cuelgue) mediante entradas malformadas (aleatorias)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"08CB788D-CFEC-4F8B-9158-8A15319FAB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253360","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/268593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4006","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/268593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0225","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files."},{"lang":"es","value":"tac_plus Tacacs  daemon F4.0.4.alpha, originalmente mantenido por Cisco, crea ficheros de la directiva de contabilidad con permisos legibles por todos los usuarios, lo que permite usuarios locales acceder y modificar ficheros sensibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:tacacs\\+:f4.0.4alpha:*:*:*:*:*:*:*","matchCriteriaId":"162A920B-10E0-443C-9A7C-47A279816BC6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253288","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8061.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4003","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/253288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8061.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0226","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user."},{"lang":"es","value":"retrieve_password.pl en DCForum 6.x y 2000 genera nuevas contraseñas basadas en un identificador de sesión, lo que permite a atacantes remotos pedir una nueva contraseña aprovechándose de otro usuarios y usar el identificador de sesión para calcular la nueva contraseña de ese usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:5.0:*:*:*:*:*:*:*","matchCriteriaId":"391D155A-F680-4D9E-AD43-7D6A26EF5557"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5FF2D08-2062-41E8-988F-40A2B6F95ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:6.21:*:*:*:*:*:*:*","matchCriteriaId":"FD46CB65-8F52-400A-A505-6C26426C0222"},{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcforum:2000:*:*:*:*:*:*:*","matchCriteriaId":"ABABA965-16FF-44F4-8C4C-F80F081672ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101258311519504&w=2","source":"cve@mitre.org"},{"url":"http://www.dcscripts.com/bugtrac/DCForumID7/3.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8044.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2038","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3866","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4014","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101258311519504&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dcscripts.com/bugtrac/DCForumID7/3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8044.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0227","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message."},{"lang":"es","value":"KICQ 2.0.0b1 permite a atacantes remotos causar una denegación de servicio (caída) mediante un mensaje malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kicq:kicq:2.0.0b1:*:*:*:*:*:*:*","matchCriteriaId":"EFB87C44-07E9-43D3-BA69-43D1BF5598D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B292C704-EDFA-4060-90DF-0A3906DB0AC9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101266856410129&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8064.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4018","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101266856410129&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8064.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0228","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites)."},{"lang":"es","value":"Microsoft MSN Messenger permite a atacantes remotos usar JavaScript que referencia a un objeto ActiveX para obtener información sensible como nombres mostrados y navegación de sitios web, y posiblemente mas cuando el usuario está conectado a ciertos sitios de Microsoft (o sitios con DNS falsificado)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:2.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE590D-A8FD-4D5F-A082-EA1393BCB72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DD36B3-F635-4FB9-856B-215D7FE82AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71BA7CF9-3089-4525-A251-12233978E258"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"DFEE276F-4ACC-440B-9F36-FAA7DAD4BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"083C6323-8712-4A42-893D-6A6BE5997689"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/254021","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8084.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4028","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8084.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0229","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using \"LOAD DATA INFILE LOCAL\" SQL statements."},{"lang":"es","value":"La característica de Modo Seguro (safe_mode) de PHP 3.0 a 4.1.0 permite a atacantes con acceso a la base de datos MySQL evadir las restricciones del Modo Seguro y leer ficheros arbitrarios usando sentencias SQL \"LOAD DATA INFILE LOCAL\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101286577109716&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101304702002321&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101285016125377&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101303065423534&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101303819613337&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8105.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4026","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101286577109716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101304702002321&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101285016125377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101303065423534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101303819613337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8105.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0230","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (Cross-site scripting) en fom.cgi de Faq-O-Matic 2.712 permite a atacantes remotos ejecutar código Javascript arbitrario en otros clientes mediante el parámetro cmd, lo que hace que el script sea insertado en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:faq-o-matic:faq-o-matic:2.712:*:*:*:*:*:*:*","matchCriteriaId":"713BF43E-10AF-400E-A23B-9C066AED7012"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101285834018701&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101293973111873&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-109","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101285834018701&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101293973111873&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0231","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname."},{"lang":"es","value":"Desbordamiento de buffer en mIRC 5.91 y anteriores permite a un servidor remoto ejecutar código arbitrario en el cliente mediante un apodo (nickname) largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"B791380F-A9DD-44DC-86E9-8CEEA42F93A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.3a:*:*:*:*:*:*:*","matchCriteriaId":"82F24CA1-9624-48D3-8FA7-0D7F5100EF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.4:*:*:*:*:*:*:*","matchCriteriaId":"63899B1A-A650-4115-9744-479B9ED3CBE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"231E8508-49C0-44BB-8B85-2AFF3598909A"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.5a:*:*:*:*:*:*:*","matchCriteriaId":"B3547A5E-8DF9-4AD0-8805-1725568F6565"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.7a:*:*:*:*:*:*:*","matchCriteriaId":"00C1E569-3215-4767-B6ED-CAC4AF71536E"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:2.8c:*:*:*:*:*:*:*","matchCriteriaId":"4D183BBC-FE4A-4750-AD02-6654C0405BCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.1:*:*:*:*:*:*:*","matchCriteriaId":"1AC2D1CE-E20A-40AF-B41B-7E7D69F9F58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.2:*:*:*:*:*:*:*","matchCriteriaId":"04F0F94A-5E26-4DA4-838E-11300E8DF252"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.3:*:*:*:*:*:*:*","matchCriteriaId":"4040CDC6-4761-43AA-8C4F-85001095EF4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.4:*:*:*:*:*:*:*","matchCriteriaId":"C66AE831-84C1-4951-A677-D1DFE21EB11C"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.5:*:*:*:*:*:*:*","matchCriteriaId":"0CD7554B-97C8-4F1C-819C-EC7429D61ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.6:*:*:*:*:*:*:*","matchCriteriaId":"C15B84CF-EAD3-4BDB-8216-346364D0B575"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.7:*:*:*:*:*:*:*","matchCriteriaId":"9A888B70-F2D4-4A39-A8FB-B8046FD2C217"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.8:*:*:*:*:*:*:*","matchCriteriaId":"545750EA-51DB-4840-A1E1-51197632DAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:3.9:*:*:*:*:*:*:*","matchCriteriaId":"4A31F9FA-AC9B-41F0-9186-87FFB0E29048"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A1BAA3B1-902E-4E6E-8B60-08471A2B401B"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2A47C119-F242-419A-BAFD-59AA7009D2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:4.5:*:*:*:*:*:*:*","matchCriteriaId":"05B9C047-8013-425A-8C0C-14EDC8554E09"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:4.6:*:*:*:*:*:*:*","matchCriteriaId":"58013A90-EE33-41B8-8130-3D925BEC8D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:4.7:*:*:*:*:*:*:*","matchCriteriaId":"756A6931-75FE-45CD-8F19-A618545D6BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C8660F02-2382-4995-B024-D466259BD9FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.1:*:*:*:*:*:*:*","matchCriteriaId":"C9468295-7E11-461D-A865-5557206EA230"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.3:*:*:*:*:*:*:*","matchCriteriaId":"A517AB64-AC69-4ABD-9CB9-9BF840CABECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.4:*:*:*:*:*:*:*","matchCriteriaId":"7E77A2D5-F04B-45ED-A1BE-7FF65BE43EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.5:*:*:*:*:*:*:*","matchCriteriaId":"223779ED-745D-493C-8FD5-1ADE46163B36"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.6:*:*:*:*:*:*:*","matchCriteriaId":"57613CFE-3B73-463D-9731-0B164F500F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.7:*:*:*:*:*:*:*","matchCriteriaId":"E0777EE5-412D-4E61-A5F9-D56FBC803697"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A21801B2-B8AD-425C-8904-6F2020B784B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.9:*:*:*:*:*:*:*","matchCriteriaId":"749F7AA3-A65D-41EC-8A72-8556DEC1D527"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:5.91:*:*:*:*:*:*:*","matchCriteriaId":"0A6B7CAF-1931-42BA-AB9B-99B23054CE4C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101286747013955&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254105","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8083.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4027","source":"cve@mitre.org"},{"url":"http://www.uuuppz.com/research/adv-001-mirc.htm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101286747013955&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/254105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8083.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uuuppz.com/research/adv-001-mirc.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0232","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Multi Router Traffic Grapher (MRTG) permite a atacantes remotos leer ficheros arbitrarios mediante un .. (punto punto) en el parámetro cfg de 14all.cgi14all-1.1.cgitraffic.cgi, o mrtg.cgi"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrtg:multi_router_traffic_grapher_cgi:2.9.17:*:unix:*:*:*:*:*","matchCriteriaId":"59C73E1A-5C48-4810-B1B8-2C1C9B29D5C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mrtg:multi_router_traffic_grapher_cgi:2.9.17:*:win32:*:*:*:*:*","matchCriteriaId":"0515C767-2E28-4D78-8C65-EF7F68DFC54D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101266821909189&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8062.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4017","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101266821909189&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8062.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0233","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en eshare Expressions 4 Web server permite a atacantes remotos leer ficheros arbitrarios mediante un .. (punto punto) en la petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eshare_communications_inc.:eshare_expressions:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A69D42F-C5A8-4D2A-A9A6-96B5E4352D7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eshare_communications_inc.:eshare_expressions:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5B92256A-3082-4F2E-959F-4FF72C225530"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101292885809975&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8079.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101292885809975&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8079.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0234","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to an external network, which consumes all available connections."},{"lang":"es","value":"NetScreen ScreenOS anteriores a 2.6.1 no soporta el establecimiento de un número máximo de sesiones concurrentes para un sistema, lo que permite a un atacante en la red de confianza causar una denegación de servicio (agotamiento de recursos) mediante un escaneo de puertos a una red externa, lo que consume todas las conexiones disponibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6.1","matchCriteriaId":"357A2EA6-A0F0-4968-AA45-E45A3D109358"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101258281818524&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101258887105690&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254268","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8057.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4015","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101258281818524&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101258887105690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/254268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8057.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0235","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event."},{"lang":"es","value":"Castelle FaxPress, posiblemente 6.3 y otras versiones, cuando se configura para que se use la cola de impresión Network, permite a los atacantes que obtengan el nombre de usuario y la contraseña si estos envían un login incorrecto, lo que hace que Faxpress envíe el nombre de usuario y contraseña correctos en texto plano."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:castelle:faxpress:6.3:*:*:*:*:*:*:*","matchCriteriaId":"F9E10A9D-97BF-45A3-A590-2A739054B543"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/254168","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8086.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4030","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/254168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8086.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0236","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user."},{"lang":"es","value":"Lucent VitalSuite 8.0 hasta 8.2, incluyendo  VitalNet, VitalEvent, y VitalHelp/VitalAnalysis, permite a atacantes remotos que se salten la autentificación por medio de una petición HTTP directa al programa VsSetCookie.exe, el cual retorna una cookie válida para el usuario deseado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalanalysis:8.0:*:*:*:*:*:*:*","matchCriteriaId":"AC7645BD-591E-4709-A61E-EA7CF1815057"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalanalysis:8.1:*:*:*:*:*:*:*","matchCriteriaId":"2EE0D50E-FE92-4FC9-94AD-72A6563DD4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalanalysis:8.2:*:*:*:*:*:*:*","matchCriteriaId":"4E012756-627D-4CE8-873B-0B776A84D436"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalevent:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B3E6FC0D-6452-4739-A7B0-D140372293CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalevent:8.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF07885-5F82-4D6B-A049-A1E70ABB1FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalevent:8.2:*:*:*:*:*:*:*","matchCriteriaId":"6AB2B0E1-160B-4244-9AFC-46FE95F3BEBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalhelp:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C68E925D-BC65-4937-A84D-E60A627A41FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalhelp:8.1:*:*:*:*:*:*:*","matchCriteriaId":"2EDF2050-6AA3-40EB-9371-61880C5F0408"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalhelp:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E0359D82-7D52-4EC2-83BB-B5B360258F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalnet:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CEE6EBB4-4156-4760-AEC7-691517A6198A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalnet:8.1:*:*:*:*:*:*:*","matchCriteriaId":"D9434843-2FFD-49AA-A2BD-9B15325738BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalnet:8.2:*:*:*:*:*:*:*","matchCriteriaId":"D78F09FD-A4A6-44C7-B316-BC626E3E9954"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalsuite:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C91C8D0F-3CE8-483C-9FCF-A6A3AAC9CF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalsuite:8.1:*:*:*:*:*:*:*","matchCriteriaId":"491A9D11-EED8-404F-A31D-A8545D2DF950"},{"vulnerable":true,"criteria":"cpe:2.3:a:lucent:vitalsuite:8.2:*:*:*:*:*:*:*","matchCriteriaId":"AC23C2DE-B138-4E4F-819C-6CF0D51A1E87"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101294507827698&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7936.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3784","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101294507827698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7936.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0237","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets."},{"lang":"es","value":"Desbordamiento de búfer en ISS BlackICE Defender 2.9 y anteriores, BlackICE Agente 3.0 y 3.1, y RealSecure Server Sensor 6.01 y 6.5 permiten a atacantes remotos que provoquen una denegación de servicio (caida) y posiblemente ejecutar código arbitrario por medio de un envío masivo de grandes paquetes ping ICMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2C0D024D-1DF8-4217-A55C-3C1CF8F66748"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4F100EB2-F19A-4152-BE63-2E778A4192D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_defender:2.9:*:*:*:*:*:*:*","matchCriteriaId":"55FCF98C-82F6-48DE-B6BF-FF49EB99FC7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_defender:2.9cap:*:*:*:*:*:*:*","matchCriteriaId":"CF0B47D0-535D-4DEA-8B56-BB7562CAFD34"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_defender:2.9caq:*:*:*:*:*:*:*","matchCriteriaId":"9D2911E3-FAAB-4B7A-BAA6-FA0629DAC78F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0507ADDC-7606-4AAF-BB6E-D0A5272DFD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5:*:*:*:*:*:*:*","matchCriteriaId":"0695D9C7-3FCF-4BDE-8189-FE986EE680DA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101286393404301&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101302424803268&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101321744807452&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101353165915171&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/alerts/advise109.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8058.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4025","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101286393404301&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101302424803268&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101321744807452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101353165915171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/alerts/advise109.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8058.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0238","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en la interfaz de administración de web para el router NetGear RT314 y RT311  permite a atacantes remotos que ejecuten un script arbitrario en otro cliente por medio de una URL que contiene el script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rt314:3.22:*:*:*:*:*:*:*","matchCriteriaId":"6A37FCA9-9DEB-4B7B-BF73-382239C9C045"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rt314:3.24:*:*:*:*:*:*:*","matchCriteriaId":"051F9448-9A48-4269-87E7-C5A893ABAF29"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rt314:3.25:*:*:*:*:*:*:*","matchCriteriaId":"3D01FBA4-B012-45E7-A007-206D2E43E7DC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101286360203461&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8082.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4024","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101286360203461&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8082.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0239","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument."},{"lang":"es","value":"Desbordamiento de buffer en hanterm 3.3..1 y anteriores permite que usuarios locales ejecuten código arbitrario por medio de una cadena larga en los argumentos -fn, -hfb, o -hfm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hanterm:hanterm:3.3:*:*:*:*:*:*:*","matchCriteriaId":"717FA81B-77C5-4DEF-A8A3-1C9CBD403272"},{"vulnerable":true,"criteria":"cpe:2.3:a:hanterm:hanterm:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3C6E5E71-3CA2-4036-B217-C4F486D9B11F"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:41.hanterm.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101310874106455&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/255168","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1001950","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-112","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8109.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4050","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:41.hanterm.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101310874106455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/255168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1001950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8109.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0240","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message."},{"lang":"es","value":"PHP, cuando se instala con Apache y se configura para buscar index.php como la página web por defecto, permite a los atacantes remotos que obtengan el path completo del servidor por medio del método HTTP OPTIONS, lo cual revelará el nombre del path en el mensaje de error correspondiente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101311746611160&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8119.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4057","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101311746611160&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8119.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0241","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server."},{"lang":"es","value":"NDSAuth.DLL en Cisco Secure Authentication Control Server (ACS) 3.0.1  no comprueba el estado \"caducado\" o \"deshabilitado\" de los usuarios en el directorio de servicios Novell, lo cual permitiría a otros usuarios autentificarse en el servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:windows_nt:*:*:*:*:*","matchCriteriaId":"FA889730-B2FF-4219-BBCA-A4364BA61EAF"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8106.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4048","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8106.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0242","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Internet Explorer 6 y anteriores permite que atacante remotos ejecuten código arbitrario por medio de un formulario HTML extendido,  cuya salida del servidor remoto no se ha aclarado adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"08E95837-2903-45FB-B42C-1263B60566A8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101309907709138&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101309907709138&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0243","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Internet Opera 6 y anteriores permite que atacante remotos ejecuten código arbitrario por medio de un formulario HTML extendido,  cuya salida del servidor remoto no se ha aclarado adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0","matchCriteriaId":"75EAF4E3-96C8-4B42-A624-009C180E5BC0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101309907709138&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101309907709138&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0244","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en la función chroot en Athe=S 0.3.7 permite que los atacantes se aprovechen por medio de un doble punto (..) en el argumento del path a \"chdir\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atheos:atheos:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"E85E52C2-7B53-48D2-8B4F-630E7EE8A7FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101310622531303&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8108","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101310622531303&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0245","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message."},{"lang":"es","value":"El servidor 5.0.8 de Lotus Domino con NoBanner habilitado permite que atacantes remotos (1) conozcan el path físico del servidor por medio de una petición de un fichero no existente con una estensión .pl (Perl), lo cual hace que se muestre el path absoluto en el mensaje de error, o (2) hagan cualquier petición que cause el error 500 de HTTP, lo cual lleva a que aparezca el nombre de la versión del servidor en el mensaje de error HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0:*:*:*:*:*:*:*","matchCriteriaId":"ECFA202A-6B78-4378-B9C2-B13EBC443A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DB826C12-8B6E-4636-A6FC-90D47CCB706B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A190AC8-E0AC-4CCF-8E5B-62F97633173A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B990B6CA-8288-47E6-8D09-5F56FC844F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C6A9DC42-4A06-4FA0-9E4A-2ABC52D1D083"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"748BF88E-D906-44D0-8B2C-7D734C76634E"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C9CC25-44BD-4000-A5BD-62B55E9855D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0F8C3E35-9D62-4E10-91AA-EFFC40A35918"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"3BF50283-F028-4FA7-95B6-829BF3BE32D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B9F784ED-9EB5-4CBA-98BE-B6C78F5B66DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"1CCD6703-23A6-4BCC-BE57-C0D7FDB26E45"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"468D4453-9607-4A74-908F-E5980DB3BDF8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101310812804716&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8160.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4049","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101310812804716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8160.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0246","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint."},{"lang":"es","value":"Vulnerabilidad en la  cadena formateada en las funciones de librería del catálogo de mensajes en UnixWare 7.1.1 permite que usuarios locales obtengan privilegios modificando la variable de entorno LC_MESSAGE para que lea otros catálogos de mensajes que contiene cadenas formateadas por programas con el setuid (como, por ejemplo, vxprint)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.3/CSSA-2002-SCO.3.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/255414","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8113.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4060","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.3/CSSA-2002-SCO.3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/255414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8113.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0247","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges."},{"lang":"es","value":"Desbordamiento de búfer en wmtv 0.6.5 y anteriores permite que usuarios locales obtengan privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wliang:wmtv:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.5","matchCriteriaId":"196C6051-ABAE-4841-9F65-352132EB832D"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-108","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8111.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4054","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8111.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0248","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file."},{"lang":"es","value":"wmtv 0.6.5 y anteriores permite a usuarios locales que modificquen ficheros arbitrarios por medio de un ataque de link sobre un fichero de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wliang:wmtv:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.5","matchCriteriaId":"196C6051-ABAE-4841-9F65-352132EB832D"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-108","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8110.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4052","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8110.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0249","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message."},{"lang":"es","value":"PHP para windows, cuando se ha instalado en Apache 2.0.28 beta como una CGI aislada, permite a atacantes remotos obtener el camino físico del php.exe mediante argumentos intencionados tales como /123, lo cual permite que se muestre el path absoluto en el emensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101311698909691&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8121.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4056","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101311698909691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8121.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0250","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password."},{"lang":"es","value":"La utilidad de configuración web de concentradores HP AdvanceStack, versiones J3200A hasta J3210A, con versión firmware A.03.07 y anteriores, permite a usuarios no autorizados saltarse la autenticación por medio de peticiones HTTP directas al fichero web_access.htl, lo que permite al usuario cambiar la configuración y modificar el password de administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3200a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"3A5A77D8-5EA8-49D5-B74C-2EEF6095F1D1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3201a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"22822763-D7F1-4D98-B341-FC9C5E4CE97D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3202a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"E57EB636-B88D-4CF5-82F5-4FE6CED08D58"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3203a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"9ECE2E78-98F5-4C94-9204-2D27AD551947"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3204a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"68D94565-E124-4045-AFF4-B96CE0DDCF25"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3205a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"8926906E-E7DE-4A6B-A059-FD4C1B5C01E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advancestack_10base-t_switching_hub_j3210a:a.03.07:*:*:*:*:*:*:*","matchCriteriaId":"7DD122AA-5308-4B55-B59C-D26073B13923"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101318469216213&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/3870","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8124.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4062","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101318469216213&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/3870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8124.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0251","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as \"%d\"."},{"lang":"es","value":"Desbordamiento de buffer em licq 1.0.4 y anteriores permite a atacantes remotos provocar una denegación de servicio (caida) y posiblemente ejecutar código arbitrario por medio de una cadena larga de formateo de caracteres, por ejemplo \"\"%d\"\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6BA200C7-5602-418C-B1B3-2825680BEA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6DD313EF-B6BA-41C1-96F0-645D872242FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A8E40E03-411D-4EFA-9620-574BACE357B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"60C3EEA7-56B7-4F20-8701-8D26EF853697"},{"vulnerable":true,"criteria":"cpe:2.3:a:licq:licq:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"47334B83-4DC7-4EDD-B10D-3A8A4D0D81C8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301254432079&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101318594420200&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8107.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4036","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301254432079&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101318594420200&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8107.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0252","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header."},{"lang":"es","value":"Desbordamiento de buffer en Apple Quicktime Player 5.01 y 5.02 permite que servidores web remotos ejecute código por medio de una respuesta que contiene un largo encabezamiento MIME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FCC2EBC0-F2A6-4709-9A27-CF63BC578744"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101320742616105&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8126.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4064","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4673","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101320742616105&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8126.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/4673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0253","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP, when not configured with the \"display_errors = Off\" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and produces an error message that contains the path."},{"lang":"es","value":"PHP, cuando no está configurado con la opción \"\"display_errors = Off\"\" en el fichero php.ini, permite que atacantes remotos obtengan el path absoluto para un fichero include por medio de un caracter / en una petición a un programa PHP directamente accesible, lo cual modifica el path de base, obliga a que la directiva include falle, y produce un mensaje de error que contiene el path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101318944130790&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8122.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4063","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101318944130790&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8122.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0254","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails."},{"lang":"es","value":"ICQ 2001b Build 3659 permite que atacantes remotos provoquen una denegación de servicio(caída) por medio de una imagen deformada con valores muy grandes para el largo y el alto, lo que provoca la caida cuando se ve en detalle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001b_build3659:*:*:*:*:*:*:*","matchCriteriaId":"AC70672D-FE67-42C2-83D2-D1E554BF2C8B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101320492009565&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101320492009565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0255","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router."},{"lang":"es","value":"La configuración por defecto de Arescom NetDSL 800 no requiere autenticación, lo que permite que atacantes remotos provoquen una denegación de servicio o reconfiguren el router."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:arescom:netdsl:800u:*:*:*:*:*:*:*","matchCriteriaId":"5C18F5DD-C644-4314-BDC9-C7B3CDCD2634"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101323620111951&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8125.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4066","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101323620111951&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8125.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0256","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop."},{"lang":"es","value":"El puerto telnet en Arescom NetDSL 800 permite que atacantes remotos causen una denegación de servicio por medio de una serie de conexiones con cadenas largas, lo que produce un elevado número de logins fallidos y que en consecuencia se detenga el servicio telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:arescom:netdsl:1000:*:*:*:*:*:*:*","matchCriteriaId":"DFBE90A1-1DDC-49F8-87E0-FDCBE1244F5C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101328827420630&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8123.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101328827420630&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8123.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0257","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4."},{"lang":"es","value":"Vulnerabilidad de comandos en sitios cruzados en auction.pl de MakeBid Auction Deluxe 3.30 permite que atacantes remotos obtengan información de otros usuarios por medio de los campos de formulario (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, o (13) PHONE4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:usanet_creations:makebid_auction_deluxe:3.30:*:*:*:*:*:*:*","matchCriteriaId":"C9AE346F-60CA-4B6F-A627-423FBF555460"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101328880521775&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8161.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.netcreations.addr.com/dcforum/DCForumID2/126.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4069","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101328880521775&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8161.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.netcreations.addr.com/dcforum/DCForumID2/126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0258","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attackers with access to the ID to gain privileges as that user, e.g. by extracting the ID from the user's answer or forward URLs."},{"lang":"es","value":"Merak Mail IceWarp Web Mail usa un identificador estático como ID de sesión de usuario que no cambia con las sesiones, lo que podría permitir a atacantes remotos con acceso a la ID que obtengan los privilegios de ese usuario, por ejemplo obteniendo la ID de la respuesta del usuario o URLs enviadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:*:*:*:*:*:*:*:*","matchCriteriaId":"47996798-D8A0-4E83-9050-779BB0C41D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:*:*:*:*:*:*:*:*","matchCriteriaId":"7E19733E-6DD9-4246-B214-9AD58686A50D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101328887821909&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101328887821909&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0259","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges."},{"lang":"es","value":"InstantServers MiniPortal 1.1.5 y anteriores almacena importantes datos de login y de cuenta en texto plano en (1) ficheros .pwd en el directorio miniportal/apache, o (2)  mplog.txt, lo que permitiría a usuarios locales obtener privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instantservers_inc.:miniportal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"8107C45C-E112-4C48-91C5-9BB61E2E8F46"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101329397901071&w=2","source":"cve@mitre.org"},{"url":"http://www.instantservers.com/releases.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8170.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4076","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101329397901071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.instantservers.com/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8170.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0260","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility."},{"lang":"es","value":"Desbordamiento de buffer en InstantServers MiniPortal 1.1.5 y anteriores permite que atacantes remotos ejecuten código arbitrario por medio de un nombre de login largo, que no se trata adecuadamente por la utilidad de login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instantservers_inc.:miniportal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"8107C45C-E112-4C48-91C5-9BB61E2E8F46"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101329397901071&w=2","source":"cve@mitre.org"},{"url":"http://www.instantservers.com/releases.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8172.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4073","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101329397901071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.instantservers.com/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8172.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0261","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command."},{"lang":"es","value":"Vulnerabilidad de cruce de directorios en InstantServers MiniPortal 1.1.5 y anteriores permite a usuarios autentificados que lean ficheros arbitrarios por medio de un ... (punto punto modificado) en el comando GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instantservers_inc.:miniportal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.5","matchCriteriaId":"8107C45C-E112-4C48-91C5-9BB61E2E8F46"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101329397901071&w=2","source":"cve@mitre.org"},{"url":"http://www.instantservers.com/releases.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8171.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4075","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101329397901071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.instantservers.com/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8171.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0262","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."},{"lang":"es","value":"Vulnerabilidad de cruce de directorios en netget para el servidor web Sybex E-Trainer permite que atacantes remotos lean ficheros arbitrarios mediante .. (punto punto) en el fichero de parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybex:e-trainer:*:*:*:*:*:*:*:*","matchCriteriaId":"3F7ADBD5-3A5D-4711-B52E-415DEA55543B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101344812311216&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8175.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4071","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101344812311216&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8175.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0263","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to (1) ezboard.cgi, (2) ezman.cgi, or (3) ezadmin.cgi."},{"lang":"es","value":"Desbordamiento de búfer en EasyBoard 2000 1.27 (aka EZboard) permite que atacantes remotos ejecuten código arbitrario mediante un valor de límite grande en un encabezamiento multipart Content-Type para o (1) ezboard.cgi, (2) ezman.cgi, o (3) ezadmin.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezne.net:ezboard_2000:1.27:*:*:*:*:*:*:*","matchCriteriaId":"5D30A34B-651C-42A9-ABF4-FBD39F630564"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101345069220199&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8162.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4068","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101345069220199&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8162.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0264","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges."},{"lang":"es","value":"El servidor FTP PowerFTP Personal 2.03 hasta 2.10 almacena importante información de cuenta  en texto plano en el fichero ftpserver.ini file. Esto permite que atacantes remotos con acceso al fichero obtengan privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cooolsoft:powerftp:2.03:*:*:*:*:*:*:*","matchCriteriaId":"903FAB8A-5EEB-4D29-BC74-104BE5DD5F62"},{"vulnerable":true,"criteria":"cpe:2.3:a:cooolsoft:powerftp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"D8DCE78C-8579-4111-BADF-ACD04FB04EA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101361745222207&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8183.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4074","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101361745222207&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8183.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0265","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file."},{"lang":"es","value":"Sendmail para Solaris 6.2.14 y anteriores crea el fichero AdminPassword con permisos de escritura para todo el mundo. Esto permite que usuarios locales obtengan privilegios modificando este fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2:*:*:*:*:*:*:*","matchCriteriaId":"5D715DBC-1C22-409E-8FA2-900B91CC75E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2B13F794-F9BD-401E-BD7A-12A17579A4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81813438-B42F-4847-97B4-18DD570C135E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9625F905-9935-45F4-838F-6D70F8F650A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0D316B5D-5D25-46C8-962E-D70141A1450F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BB9C09-307F-40FA-8EC2-E5E032558A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DB94450D-4EB4-4ACB-9D8C-0598F17207F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.7:*:*:*:*:*:*:*","matchCriteriaId":"634445B5-0C74-4EC1-B4B4-9CBDFC1BD8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.8:*:*:*:*:*:*:*","matchCriteriaId":"E039D3AD-F228-4079-A039-D9F11F7EF27E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.8a:*:*:*:*:*:*:*","matchCriteriaId":"4CFE4AB2-2A37-4E49-9048-2E4BBF0DB4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B0F358C2-1385-4D2C-A864-E72D73005DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.10:*:*:*:*:*:*:*","matchCriteriaId":"20D33B82-9DEA-40DC-802E-6E3033DB6A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.11:*:*:*:*:*:*:*","matchCriteriaId":"A2DB6C05-FE96-4789-A846-9BD997D0B925"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.12:*:*:*:*:*:*:*","matchCriteriaId":"B31CD272-8758-4307-8CA4-BC7F0CCB6167"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.13:*:*:*:*:*:*:*","matchCriteriaId":"50BFC413-C0CF-4B15-899A-63D41FA93CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sawmill:sawmill:6.2.14:*:*:*:*:*:*:*","matchCriteriaId":"721B53C7-E1D8-4F7F-93C5-87E414FB3BEF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101346206921270&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8173.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sawmill.net/version_history.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4077","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101346206921270&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8173.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sawmill.net/version_history.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0266","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname."},{"lang":"es","value":"El script CGI Thunderstone Texis permite que atacantes remotos obtengan el path absoluto del web mediante una petición de fichero inexistente. Esto genera un mensaje de error que contiene el path completo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thunderstone_software:texis:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2E20DF06-1C75-444B-8312-9D6A010ED131"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301228031165&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101346478229431&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8103.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4035","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101301228031165&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101346478229431&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8103.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0267","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the \"theme\" field followed by the Status::admin command, which causes the Status line to be entered into the password file."},{"lang":"es","value":"preferences.php en Simple Internet Publishing System (SIPS) anterior a la 0.3.1  permite que atacantes remotos obtengan privilegios administrativos mediante un salto de línea en el campo \"theme\" seguido por el comando Status::admin. Esto provoca que la línea de Status pase al fichero de password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sips:sips:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9EFC87B4-B132-4EAF-ABD8-03300741073F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sips:sips:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"CEF5942C-AC68-424E-9E35-4BA116D43529"},{"vulnerable":true,"criteria":"cpe:2.3:a:sips:sips:0.3.0pl1:*:*:*:*:*:*:*","matchCriteriaId":"337900B6-E769-4FF5-968D-5804619F6044"},{"vulnerable":true,"criteria":"cpe:2.3:a:sips:sips:0.3.0pl2:*:*:*:*:*:*:*","matchCriteriaId":"3F608C80-06DC-4553-B4C9-1D3954D42771"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101363233905645&w=2","source":"cve@mitre.org"},{"url":"http://sips.sourceforge.net/adminvul.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8193.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4097","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101363233905645&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sips.sourceforge.net/adminvul.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8193.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0268","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a \"Browse\" function, which runs Explorer with SYSTEM privileges."},{"lang":"es","value":"Identix BioLogon 3 permite que usuarios con acceso físico al sistema obtengan privilegios administravos usando CTRL-ALT-SUP y ejecutando la función \"Browse\". Esto ejecuta el Explorer con privilegios SYSTEM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:identix:biologon:3.0:*:*:*:*:*:*:*","matchCriteriaId":"ABEC5D43-5AC1-47E7-AF75-7E41B83BD19F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101366270807034&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8201.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4101","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101366270807034&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8201.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0269","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks."},{"lang":"es","value":"uno\r\ndos \r\ntres"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101363764421623&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101363764421623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0270","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera, when configured with the \"Determine action by MIME type\" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:9.10:*:*:*:*:*:*:*","matchCriteriaId":"3957F6A1-C62D-4571-9F81-9D17B5D98023"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101363764421623&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101363764421623&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0271","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ada_core_technologies:gnat_pro_native:3.12p:*:*:*:*:*:*:*","matchCriteriaId":"01060520-C231-4921-BFA4-4FE2BC612A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ada_core_technologies:gnat_pro_native:3.13p:*:*:*:*:*:*:*","matchCriteriaId":"32F0918F-4696-41D0-9A64-162D6D7C7CF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ada_core_technologies:gnat_pro_native:3.14p:*:*:*:*:*:*:*","matchCriteriaId":"5DF7A160-D56F-4D35-8AE9-784A2CDD048E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101353440624007&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4086","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101353440624007&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0272","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request."},{"lang":"es","value":"Desbordamiento de búfer en mpg321 anteriores a 0.2.9 permite a atacantes locales y posiblemente remotos ejecutar código arbitrario mediante una URL larga a una opción de linea de comandos, o \r\n una petición HTTP, o una petición FTP"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpg321:mpg321:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A4CCC6D0-CD90-466F-92EE-4FF7B163F68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg321:mpg321:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"ACB3804F-A03F-4DFC-8BD4-2F80BC343184"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg321:mpg321:0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"92686C24-5CCC-44CD-BEC3-F5C798034E21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101366518310823&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101355590918475&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=79237","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4091","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101366518310823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101355590918475&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=79237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0273","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter."},{"lang":"es","value":"Desbordamiento de búfer en CWMail.exe en NetWin anteriores a 2.8a permite a usuarios remotos remotos ejecutar código arbitrario mediante un parámetro largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"42185AA2-67D1-4B4F-87D5-9F32AC2D76FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7a:*:*:*:*:*:*:*","matchCriteriaId":"DB976F02-3E39-4506-AADF-18AF20ABC0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7b:*:*:*:*:*:*:*","matchCriteriaId":"F0AA61CC-7D39-4AC0-B991-C823ADA20B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7c:*:*:*:*:*:*:*","matchCriteriaId":"B3C52197-7B09-4428-8757-00C4445F005C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7d:*:*:*:*:*:*:*","matchCriteriaId":"E8635893-00C7-4DD2-AEBB-A9495FCDDD90"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7f:*:*:*:*:*:*:*","matchCriteriaId":"25797BBA-5151-41A0-8203-ECAB33577D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7i:*:*:*:*:*:*:*","matchCriteriaId":"FB6F5F1D-014D-4DDF-BEDF-F892A4ECBD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7j:*:*:*:*:*:*:*","matchCriteriaId":"61742FFF-23C2-497C-A365-6225AFA5755A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7k:*:*:*:*:*:*:*","matchCriteriaId":"C84C5AF3-7B80-448D-8E91-B048767B9918"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7l:*:*:*:*:*:*:*","matchCriteriaId":"35AC4C13-A7EA-493D-8C5D-C8B93FF1C9E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7m:*:*:*:*:*:*:*","matchCriteriaId":"9AAAA425-D08A-466B-BF3E-E762706D7978"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7n:*:*:*:*:*:*:*","matchCriteriaId":"8AA42779-4CF3-43B0-B398-3DCD807C0277"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7o:*:*:*:*:*:*:*","matchCriteriaId":"70582B3B-A1D3-4B4F-82EC-076A2E5BBD27"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7p:*:*:*:*:*:*:*","matchCriteriaId":"178CFED4-C44E-42BA-895A-6243979FB57D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7q:*:*:*:*:*:*:*","matchCriteriaId":"8F74F776-C678-4376-AD86-2864D83E5A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7s:*:*:*:*:*:*:*","matchCriteriaId":"D4FE5E85-6CAA-4BDA-A717-1533DECC73C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:cwmail:2.7t:*:*:*:*:*:*:*","matchCriteriaId":"FD829E09-7E40-4EFF-8664-4BCAEF80B14E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101362100602008&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8185.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4093","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101362100602008&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8185.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0274","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and other command line arguments."},{"lang":"es","value":"Exim 3.34 y anteriores puede permitir a usuarios locales ganar privilegios mediante un desbordamiento de búfer con argumento de línea de comandos -C (fichero de configuración) y otros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*","versionEndIncluding":"3.34","matchCriteriaId":"7BC60B1D-3B6F-4BD1-98BE-BC81A67FF834"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101362618118598&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8194.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-208.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4096","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101362618118598&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8194.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0275","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL."},{"lang":"es","value":"El servidor web Falcon 2.0.0.1020 y anteriores permite a atacantes remotos evitar la autenticación y leer ficheros restringidos mediante una barra extra (/) en la URL pedida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1009:*:*:*:*:*:*:*","matchCriteriaId":"BE4345AC-1EBF-4764-9F03-4E62266266FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1020:*:*:*:*:*:*:*","matchCriteriaId":"53764BCD-A3DB-46E2-A8ED-E6DD1A30FCE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0082.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101363946626951&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102253858809370&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4099","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8189","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101363946626951&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102253858809370&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0276","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets."},{"lang":"es","value":"Desbordamiento de búfer en varios decodificadores en Ettercap 0.6.3.1 y anteriores, cuando corren en redes con una MTU (maximun transfer unit) mayor de 2000, permite a atacantes remotos ejecutar código arbitrario mediante paquetes largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ettercap:ettercap:0.6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1196273E-30DC-437B-9677-BDA19A03616A"}]}]}],"references":[{"url":"http://ettercap.sourceforge.net/index.php?s=history","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101370874219511&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8200.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4104","source":"cve@mitre.org"},{"url":"http://ettercap.sourceforge.net/index.php?s=history","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101370874219511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8200.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0277","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter."},{"lang":"es","value":"Add2it Mailman Free 1.73 y anteriores permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaractéres de shell en el parámetro lista."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:add2it:mailman_free:*:*:*:*:*:*:*:*","versionEndIncluding":"1.73","matchCriteriaId":"7DF8FA21-1456-48F1-A071-F9FBE51A802C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101371994219708&w=2","source":"cve@mitre.org"},{"url":"http://www.add2it.com/scripts/mailman-free-history.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8202.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4105","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101371994219708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.add2it.com/scripts/mailman-free-history.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8202.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0278","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Add2it Mailman Free 1.73 y anteriores permite a atacantes remotos modificar ficheros arbitrarios mediante un .. (punto punto) en parámetro lista."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:add2it:mailman_free:*:*:*:*:*:*:*:*","versionEndIncluding":"1.73","matchCriteriaId":"7DF8FA21-1456-48F1-A071-F9FBE51A802C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101371994219708&w=2","source":"cve@mitre.org"},{"url":"http://www.add2it.com/scripts/mailman-free-history.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8202.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101371994219708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.add2it.com/scripts/mailman-free-history.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8202.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0279","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges."},{"lang":"es","value":"El kernel de HP-UX 11.11 no da argumentos adecuados a setrlimit, lo que podría permitir a atacantes locales causar una denegación (kernel panic - pánico del kernel) y posiblemente ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101372194225046&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8195.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/726187","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4094","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5469","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101372194225046&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8195.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/726187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0280","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply."},{"lang":"es","value":"Desbordamiento de búfer en CodeBlue 4 y anteriores, y posíblemente otras versiones, permite a atacantes remotos ejecutar código arbitrario mediante una cadena larga en una respuesta SMTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeblue:codeblue:*:*:*:*:*:*:*:*","versionEndIncluding":"4","matchCriteriaId":"01171D55-D5E1-4BF2-91AB-455BF0C568DE"}]}]}],"references":[{"url":"http://freshmeat.net/releases/71514/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=101392671306875&w=2","source":"cve@mitre.org"},{"url":"http://freshmeat.net/releases/71514/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=101392671306875&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0281","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en DCP-Portal 4.2 y anteriores permite a atacantes remotos ganar privilegios de otros usuarios del portal incluyendo código javascript en el campo 'información sobre el trabajo' en user_update.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*","matchCriteriaId":"BE39E96D-B870-49FB-8C7C-7E829BA916B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9C0D7706-EEB2-4898-A0EA-7BD198965E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"356E5CEC-CCBD-4438-992A-29B53F3F6A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*","matchCriteriaId":"389B778A-EB0A-4BEC-9023-2190BCDAB746"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101379217032525&w=2","source":"cve@mitre.org"},{"url":"http://www.dcp-portal.com/contents.php?id=18","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4112","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8197","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101379217032525&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dcp-portal.com/contents.php?id=18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0282","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message."},{"lang":"es","value":"DCP-Portal 3.7 a 4.5 permite a atacantes remotos obtener la ruta física del servidor mediante una petición directa a add_user.php, o un parámetro 'new_laguage' inválido en contents.php, o  en contents.php o en categories.php lo que filtra la ruta en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*","matchCriteriaId":"BE39E96D-B870-49FB-8C7C-7E829BA916B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9C0D7706-EEB2-4898-A0EA-7BD198965E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"356E5CEC-CCBD-4438-992A-29B53F3F6A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*","matchCriteriaId":"389B778A-EB0A-4BEC-9023-2190BCDAB746"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.5:*:*:*:*:*:*:*","matchCriteriaId":"34A964D1-F2CB-4F44-B8E4-08B285D1D37C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101379160830631&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101494497608620&w=2","source":"cve@mitre.org"},{"url":"http://www.dcp-portal.com/files.php?action=viewcat&fcat_id=1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8310.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4113","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8196","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101379160830631&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101494497608620&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dcp-portal.com/files.php?action=viewcat&fcat_id=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8310.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0283","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data."},{"lang":"es","value":"Windows XP con el puerto 445 abierto permite a atacantes remotos causar una denegación de servicio (saturación de CPU) mediante una inundación de paquetes TCP SYN posiblemente conteniendo paquetes malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101408718030099&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101408718030099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0284","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname."},{"lang":"es","value":"Winamp 2.78 y 2.77, cuando abre un fichero wma (windows media audio) que necesita una licencia, envía la ruta completa del directorio de ficheros temporales de internet directamente a la página web que procesa la licencia, lo que podría permitir a servidores web maliciosos obtener la ruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101408781031527&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101408781031527&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0285","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 5.5 and 6.0 on Windows treats a carriage return (\"CR\") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow remote attackers to bypass virus protection and or other filtering mechanisms via a mail message with headers that only contain the CR, which causes Outlook to create separate headers."},{"lang":"es","value":"Outlook Express 5.5 y 6.0 en Windows trata un retorno de carro (CR) en una cabecera de mensaje como si fuera una combinación válida retorno de carro/avance de línea (CR/LF), lo que podría permitir a atacantes remotos evitar la protección contra virus y/o otros mecanismos de filtrado mediante correos con cabeceras que sólo contienen el CR, lo que hace que Outlook cree cabeceras separadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101362077701164&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8198.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101362077701164&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8198.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0286","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to add_user.php, which causes GetPassword to produce and compare a blank password for the non-existent user."},{"lang":"es","value":"La función GetPassword en function.php de SiteNews 0.10 y 0.11 permite a atacantes remotos ganar privilegios y añadir usuarios dando un nombre de usuario inexistente y la suma de comprobación (cheksum) MD5 de una contraseña vacía, lo que hace que GetPassword produzca y compare una contraseña en blanco para el usuario inexistente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.01_beta:*:*:*:*:*:*:*","matchCriteriaId":"A8A874B9-FE17-4075-92A0-AC0B752487CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.02_beta:*:*:*:*:*:*:*","matchCriteriaId":"607163D8-509A-4B9A-B241-4BCB43DD2C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.03_beta:*:*:*:*:*:*:*","matchCriteriaId":"FD409441-F5AF-4290-85FB-A6647B157D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.04_beta:*:*:*:*:*:*:*","matchCriteriaId":"116D3A15-A36C-4F38-9C37-FB4FFC7B2232"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.05_beta:*:*:*:*:*:*:*","matchCriteriaId":"82B40C43-6B8B-43E0-A4E2-51E541860A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.06_beta:*:*:*:*:*:*:*","matchCriteriaId":"5E3261A9-DF2E-4A5D-9483-3AC626F5E864"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.07_beta:*:*:*:*:*:*:*","matchCriteriaId":"7437C130-2964-418E-B783-0B79D1E534E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.08_beta:*:*:*:*:*:*:*","matchCriteriaId":"7292ECFE-C357-4870-865C-7134A9D0DF3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.09_beta:*:*:*:*:*:*:*","matchCriteriaId":"C58E8BE0-A10B-4A91-9A20-108DB9F67982"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.10_beta:*:*:*:*:*:*:*","matchCriteriaId":"E43A324B-B3B8-4189-8CED-695E95D379DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sitenews:sitenews:0.11_beta:*:*:*:*:*:*:*","matchCriteriaId":"10ECB463-AEC5-49D6-9697-16CDD33A02E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101388393808699&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8181","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101388393808699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0287","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default."},{"lang":"es","value":"pforum 1.14 y anteriores no habilita explícitamente las comillas mágicas (magic quotes) PHP quotes, lo que permite a atacantes remotos evitar la autenticación y ganar privilegios de administrador mediante un ataque de inyección de SQL cuando el servidor no está configurado para usar las comillas mágicas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.14","matchCriteriaId":"A3A52CF4-F5C1-40F3-A148-A537F23865B9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101389284625019&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8203.php","source":"cve@mitre.org"},{"url":"http://www.powie.de/news/index.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4114","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101389284625019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8203.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.powie.de/news/index.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0288","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en el servidor web Phusion 1.0 permite a atacantes remotos leer ficheros arbitrarios usando ... (tres puntos) en la petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bbshareware.com:phusion_webserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3E932B52-F857-427C-A4A8-CB2268216790"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101408906001958&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4117","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101408906001958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0289","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request."},{"lang":"es","value":"Desbordamiento de búfer en el servidor web Phusion 1.0 permite a atacantes remotos causar una denegación de servicio y ejecutar código arbitrario mediante una petición HTTP larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bbshareware.com:phusion_webserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3E932B52-F857-427C-A4A8-CB2268216790"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101408906001958&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4118","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4119","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101408906001958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0290","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument."},{"lang":"es","value":"Desbordamiento de búfer en Netwin WebNews CGI program 1.1, Webnews.exe, permite a atacantes remotos ejecutar código arbitrarior mediante un argumento de grupo largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1h:*:*:*:*:*:*:*","matchCriteriaId":"9F07C676-4908-4922-9539-A2280404F914"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1i:*:*:*:*:*:*:*","matchCriteriaId":"30F011C3-EC7F-4C6F-96A1-150BB3E4665C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1j:*:*:*:*:*:*:*","matchCriteriaId":"12C93175-178C-4F49-B613-80D9EF0F4ADB"}]}]}],"references":[{"url":"ftp://netwinsite.com/pub/webnews/beta/webnews11m_solaris.tar.Z","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=101413521417638&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8220.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4124","source":"cve@mitre.org"},{"url":"ftp://netwinsite.com/pub/webnews/beta/webnews11m_solaris.tar.Z","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=101413521417638&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8220.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0291","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time."},{"lang":"es","value":"Dino's Webserver 1.2 permite a atacantes remotos causar una denegación de servicio (saturación de CPU), y posiblemente ejecutar código arbitrario mediante varias peticiones HTTP largas en poco tiempo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:funsoft:dinos_webserver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7331756-6564-4449-911A-8CFF3927400D"},{"vulnerable":true,"criteria":"cpe:2.3:a:funsoft:dinos_webserver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1590A12B-91C4-4BE5-95E9-3F1F675A74D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101415416513746&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8233.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4123","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101415416513746&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8233.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0292","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Slash anteriores a 2.2.5, como los usados en Slashcode y otros sitios, permite a atacantes remotos robar cookies e información de autentificación de otros usuarios, mediante Javascript en una URL, probablemente en el campo formkey."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.8","matchCriteriaId":"F30590C0-E506-42E8-9C55-11C836D59A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.0:*:*:*:*:*:*:*","matchCriteriaId":"77BC88D3-88A6-4C97-8463-F78BC0A9C4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9FD066C-B64A-46CB-A9AA-F6347E544134"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1520586E-C02B-47C6-BABD-80636ACA6226"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BD921000-F257-450D-92F4-B6411D46FC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"552A39DD-FEE3-4459-AC86-1906D3AC35AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3138C055-1054-4F7A-8B80-8A6EA3B44528"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FBE6597C-E7EC-4A53-9B72-925F252EE0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5D667AE2-4F32-411D-84C4-AF1C066D3027"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101414005501708&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8221.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4116","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101414005501708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8221.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0293","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP service in Alcatel OmniPCX 4400 allows the \"halt\" user to gain root privileges by modifying root's .profile file."},{"lang":"es","value":"El servicio FTP en Alcatel OmniPCX 4400 permite al usuario \"halt\" ganar privilegios de root modificando el fichero de root .profile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatel-lucent:omnipcx:4400:*:*:*:*:*:*:*","matchCriteriaId":"14F18C03-D6D2-41BA-9217-85737F0E4960"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8225","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0294","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system."},{"lang":"es","value":"Alcatel 4400 instala el comando /chetc/shutdown con privilegios setgid, lo que permite a muchos usuarios locales apagar el sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatel-lucent:omnipcx:4400:*:*:*:*:*:*:*","matchCriteriaId":"14F18C03-D6D2-41BA-9217-85737F0E4960"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4130","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0295","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges."},{"lang":"es","value":"Alcatel OmniPCX 4400 instala ficheros con permisos de escritura para todos los usuarios, lo que permite a usuarios locales reconfigurar el sistema y posiblemente ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatel-lucent:omnipcx:4400:*:*:*:*:*:*:*","matchCriteriaId":"14F18C03-D6D2-41BA-9217-85737F0E4960"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4133","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0296","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the \"spinning\" temporary file."},{"lang":"es","value":"La instalación de Tarantela Enterpries 3 permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal \"spinning\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDA7723A-7057-4410-A6B9-885B10ACEE8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.01:*:*:*:*:*:*:*","matchCriteriaId":"381E5189-01A1-4692-8226-92C7E7FE9DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.10:*:*:*:*:*:*:*","matchCriteriaId":"680CCD63-BC37-4ED5-8CFF-B36D115F7D84"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.11:*:*:*:*:*:*:*","matchCriteriaId":"A847D811-6A05-4A13-9EA9-4B84F265175C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101467193803592&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4115","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8223","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101467193803592&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0297","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request."},{"lang":"es","value":"Desbordamiento de búfer en ScriptEase MiniWeb Server 0.95 permite a atacantes remotos causar una denegación de servicio (caida) y posiblemente ejecutar código arbitrario mediante una URL larga en una petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nombas:scriptease_webserver:0.95:*:*:*:*:*:*:*","matchCriteriaId":"61A69599-F350-40AC-A41B-525F22EDA6CC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101415883727615&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4128","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101415883727615&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0298","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character."},{"lang":"es","value":"ScriptEase MiniWeb Server 0.95 permite a atacantes remotos causar una denegación de servicio (caida) mediante ciertas peticiones HTTP GET conteniendo .. (punto punto) codificado en la url, varias secuencias /../, faltando una URI o  varios ../ en una URI que con comienza con un caracter / (barra)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nombas:scriptease_webserver:0.95:*:*:*:*:*:*:*","matchCriteriaId":"61A69599-F350-40AC-A41B-525F22EDA6CC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101424439220931&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4145","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101424439220931&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0299","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan."},{"lang":"es","value":"CNetCatchUp anteriores a 1.3.1 permite a atacantes remotos ejecutar código arbitrario mediante un fichero .RPV que crea un fichero con una extensión arbitraria (como .BAT) que es ejecutado durante un escaneo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cnet:catchup:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"42D8A866-422C-4D9A-B28E-077C14E8190F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101438631921749&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8035.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3975","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101438631921749&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8035.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0300","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file."},{"lang":"es","value":"gnujsp 1.0.0 y 1.0.1 permite a atacantes listar directorios, leer el código fuente de ciertos scripts y sortear restricciones de acceso pidiendo el fichero objetivo directamente al servelet gnujsp, que no resuelve una limitación de JServ y no procesa el fichero pedido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnujsp:gnujsp:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"9FF92000-DEC0-4F83-AB5F-A69747789D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnujsp:gnujsp:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9ED722FC-4A0A-4407-8659-F1CB2BC063E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101415804625292&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101422432123898&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-114","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8240.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4125","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101415804625292&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101422432123898&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8240.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0301","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters."},{"lang":"es","value":"Citrix NFuse 1.6 permite a atacantes remotos sortear la autenticación y obtener información sensible llamando directamente a launch.asp con parámetros NFUSE_USER y NFUSE_PASSWORD inválidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:nfuse:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A163741E-6E5A-4238-95F9-18591ACCF960"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101424947801895&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4142","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101424947801895&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0302","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack."},{"lang":"es","value":"El demonio (daemon) de Symantec Enterprise Firewall 6.5.x deja caer importantes alertas cuando se usa SNMP como transporte, lo que podría impedir que algunas alertas se enviasen en caso de ataque."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"60CD39A5-0059-4E17-8F4F-58F23589A408"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:*:*:*:*:*:*","matchCriteriaId":"55B40C3E-2794-4310-97BC-D80069992C87"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101424225814604&w=2","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20a.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8253","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101424225814604&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0303","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password."},{"lang":"es","value":"GroupWise 6, cuando se usa autenticación LDAP y cuando Post Office tiene un un nombre de usuario y contraseña en blanco, permite a atacantes ganar privilegios de otros usuaios iniciando una sesión en el sistema sin con contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101425369510983&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4154","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101425369510983&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0304","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request."},{"lang":"es","value":"Lil HTTP Server 2.1 permite a atacantes remotos leer ficheros protegidos por contraseña mediante un /./ (barra punto barra) en la petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9DDCE4B2-41B9-4548-82E8-E884C6091FBF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101432338000591&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101665069500433&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4153","source":"cve@mitre.org"},{"url":"http://www.summitcn.com/lilhttp/lildocs.html#WhatsNew","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101432338000591&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101665069500433&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.summitcn.com/lilhttp/lildocs.html#WhatsNew","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0305","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge."},{"lang":"es","value":"El servidor de impresión Zero One Tech (ZOT) P100 no desactiva adecuadamente el servico SNMP o no cambia adecuadamente la contraseña por defecto, lo que podría dejar al servidor abierto a ataques sin conocimiento del administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zero_one_tech:p100s:*:*:*:*:*:*:*:*","matchCriteriaId":"1310CABE-412D-4602-9EDB-F0275824D553"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101432416503293&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4155","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8270","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101432416503293&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0306","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter."},{"lang":"es","value":"ans.pl en Avenger's New Systems (ANS) 2.11 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante metacaractéres de shell en el parámetro p (plugin)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avengers_news_system:avengers_news_system:2.01:*:*:*:*:*:*:*","matchCriteriaId":"82C3D465-FA40-4993-9C06-B951C81CAAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avengers_news_system:avengers_news_system:2.11:*:*:*:*:*:*:*","matchCriteriaId":"8362518C-DEC2-4D16-AC4A-DB9908E9E7FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101430868616112&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4149","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101430868616112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0307","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. (dot dot) in the p parameter, which reads the target file and attempts to execute the line using Perl's eval function."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en ans.pl en Avenger's New Systems (ANS) 2.11 y anteriosres permite a atacantes remotos determinar la existencia de ficheros arbitrarios o ejecutar cualquier programa Perl en el sistema mediante un .. (punto punto) en el parámetro p, el cual lee el fichero objetivo e intenta ejecutar línea usando la función eval de Perl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avengers_news_system:avengers_news_system:2.01:*:*:*:*:*:*:*","matchCriteriaId":"82C3D465-FA40-4993-9C06-B951C81CAAC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:avengers_news_system:avengers_news_system:2.11:*:*:*:*:*:*:*","matchCriteriaId":"8362518C-DEC2-4D16-AC4A-DB9908E9E7FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101430868616112&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4147","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101430868616112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0308","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments."},{"lang":"es","value":"admin.asp en AdMentor 2.11 permite a atacantes remotos sortear la autenticación y ganar privilegios mediante un ataque de inyección de SQL en los argumentos de usuario y contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_holmberg:admentor:2.11:*:*:*:*:*:*:*","matchCriteriaId":"858302B0-14F8-412B-A2B5-5B7C565E87A1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101430885516675&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8245","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101430885516675&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0309","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information."},{"lang":"es","value":"El proxy SMTP en Symantec Enterprise Firewall 6.5.x incluye el nombre y la dirección del interfaz físico del cortafuegos en un intercambio de mensajes SMTP cuando la traduzzión NAT (network address translation) se hace a una dirección distinta de la del cortafuegos, lo que podría permitir a atacantes remotos determinar cierta información de configuarción del cortafuegos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"60CD39A5-0059-4E17-8F4F-58F23589A408"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101424307617060&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101430810813853&w=2","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8251.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4141","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101424307617060&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101430810813853&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8251.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0310","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879."},{"lang":"es","value":"El programa CGI Netwin WebNews 1.1k incluye por defecto ciertos nombres de usuarios y contraseñas en texto claro que no pueden ser borrados por el administrador, lo que permite a atacantes remotos ganar privilegios mediante las combianciones de nombres de usuario/contraseña: testweb/newtestalwn3854/imaptestalwi3845/wtest3452, o testweb2/wtest4879."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1h:*:*:*:*:*:*:*","matchCriteriaId":"9F07C676-4908-4922-9539-A2280404F914"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1i:*:*:*:*:*:*:*","matchCriteriaId":"30F011C3-EC7F-4C6F-96A1-150BB3E4665C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1j:*:*:*:*:*:*:*","matchCriteriaId":"12C93175-178C-4F49-B613-80D9EF0F4ADB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webnews:1.1k:*:*:*:*:*:*:*","matchCriteriaId":"1E0B0D31-69A2-464C-8A99-47C379AD8319"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101432236729631&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4156","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8255","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101432236729631&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0311","sourceIdentifier":"cve@mitre.org","published":"2002-05-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi."},{"lang":"es","value":"Vulnerabilidad en webtop en UnixWare 7.1.1 y Open Unix 8.0.0 permite a atacantes locales y posiblemente remotos ganar privilegios de root mediante metacaractéres de shell en el argumento -c para  en scodadminreg.cgi, o  service_action.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.6/CSSA-2002-SCO.6.txt","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/251747","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7977.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3936","source":"cve@mitre.org"},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.6/CSSA-2002-SCO.6.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/251747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7977.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0312","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:essen:essentia_web_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"91541D58-0FC6-47A4-A46F-39829D1AF86C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101439734827908&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8248.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0202&L=ntbugtraq&F=P&S=&P=10201","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4160","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101439734827908&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8248.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0202&L=ntbugtraq&F=P&S=&P=10201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0313","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:essen:essentia_web_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"91541D58-0FC6-47A4-A46F-39829D1AF86C"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006231.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101440530023617&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258365","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8249.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006231.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101440530023617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8249.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0314","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B1822B5C-7CF1-471A-BCEB-45C0B7D4557F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.3:*:*:*:*:*:*:*","matchCriteriaId":"952CFB2E-0EDC-42F7-AE61-FE24B788560E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C1BF80EB-9419-4DFE-981C-16A13BA2514D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.4:*:*:*:*:*:*:*","matchCriteriaId":"2167462C-1EE2-4135-A3C7-B406B2B4B1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1A111C90-0690-4959-A5A1-90DD92A29B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6C612287-28B4-4076-9996-1612664A1197"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_city_networks:morpheus:1.3:*:*:*:*:*:*:*","matchCriteriaId":"428A1F71-03EA-44CC-AE40-6FD6BA9BB842"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_city_networks:morpheus:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D3C458BE-897A-4C88-BAB6-86755B896B89"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101441689224760&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8273.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4122","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101441689224760&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8273.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0315","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B1822B5C-7CF1-471A-BCEB-45C0B7D4557F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.3:*:*:*:*:*:*:*","matchCriteriaId":"952CFB2E-0EDC-42F7-AE61-FE24B788560E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C1BF80EB-9419-4DFE-981C-16A13BA2514D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.4:*:*:*:*:*:*:*","matchCriteriaId":"2167462C-1EE2-4135-A3C7-B406B2B4B1BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fasttrack:kazaa:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB6683D8-EF86-46EF-86A8-3C6F9BAF63BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1A111C90-0690-4959-A5A1-90DD92A29B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6C612287-28B4-4076-9996-1612664A1197"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_city_networks:morpheus:1.3:*:*:*:*:*:*:*","matchCriteriaId":"428A1F71-03EA-44CC-AE40-6FD6BA9BB842"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_city_networks:morpheus:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D3C458BE-897A-4C88-BAB6-86755B896B89"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101441689224760&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8272.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4121","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101441689224760&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8272.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0316","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag."}],"vendorComments":[{"organization":"XMB","comment":"XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2021-04-23T12:37:56.133"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_software:xmb_forum:1.6_pre-beta:*:*:*:*:*:*:*","matchCriteriaId":"539BE4BE-2952-4B34-A7C0-BF7BDA2257CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101447886404876&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8262.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4167","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101447886404876&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8262.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0317","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gator:gator:3.0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"B274C569-1949-4C47-A61E-3D220BA4DAF8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101438671922874&w=2","source":"cve@mitre.org"},{"url":"http://www.gator.com/update/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8266.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4161","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101438671922874&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gator.com/update/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8266.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0318","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*","matchCriteriaId":"45C6E852-B6B5-4598-84B0-8D55932928F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101440113410083&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9968.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101440113410083&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9968.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0319","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D161B5E6-CE84-4CAA-BCFF-35CDFC2B08F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.12:*:*:*:*:*:*:*","matchCriteriaId":"AB580F48-05B7-4A9E-A300-199CAA8DFB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D1713B01-5C54-4BF7-82CF-7C5B00558016"},{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.14:*:*:*:*:*:*:*","matchCriteriaId":"0EC0FAEF-1166-4C3B-BA40-CA7A85381704"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101446366708757&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8263.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4165","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101446366708757&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8263.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0320","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8264.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8265.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/419419","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/887319","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4162","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4163","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8264.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8265.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/419419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/887319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0321","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8267.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/952875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8267.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/952875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0322","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4A5FAAEB-793F-405B-A8D9-872FCEEBFB55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101466489113920&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101467298107635&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4173","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101466489113920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101467298107635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0323","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nombas:scriptease_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.0","matchCriteriaId":"7089077C-489E-475A-B099-7FA6646FD046"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101465709621105&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101465709621105&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0324","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a \"Clear And Exit\" action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noah_gray:graymatter:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2BF38FE4-494D-404A-A5EC-ED381144D5A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:noah_gray:graymatter:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"AF722589-96C0-4135-84A9-B4EE0F2F3A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:noah_gray:graymatter:1.2b:*:*:*:*:*:*:*","matchCriteriaId":"24C00817-AD58-4F9C-B1BE-A22F36BC81D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:noah_gray:graymatter:1.21:*:*:*:*:*:*:*","matchCriteriaId":"C1303066-E50E-48E7-BE3B-5D614E1345CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101465343308249&w=2","source":"cve@mitre.org"},{"url":"http://www.dangerousmonkey.com/dangblog/dangarch/00000051.htm","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8277.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4169","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101465343308249&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dangerousmonkey.com/dangblog/dangarch/00000051.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8277.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0325","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.5.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"F987A176-9930-4120-B3B2-89858115D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"B4E6BC55-028C-4935-A39E-D4150903075E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101474689126219&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8295.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4179","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101474689126219&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8295.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0326","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7718A5FF-58F1-4086-8EF8-E67F5D48EB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"05AE618A-D6A4-4D57-A52E-8C07968575E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.5:*:*:*:*:*:*:*","matchCriteriaId":"48C29BD0-3EBF-48E3-9CC2-FA82783E8FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.5.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"F987A176-9930-4120-B3B2-89858115D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.6.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"6D393C23-7949-4D94-94B2-7333CA3013ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101474387016066&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8294.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101474387016066&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8294.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0327","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:century_software:term:6.27.0869:*:*:*:*:*:*:*","matchCriteriaId":"DF6B61A8-1633-438C-8FB7-73B43189970F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101477608215471&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/257731","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8291.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4174","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101477608215471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/257731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8291.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0328","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:2.17:*:*:*:*:*:*:*","matchCriteriaId":"02F49D40-FB97-4F9B-BE5F-FF439E821E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DDC5C0A0-5DE4-4B6D-8328-4D0D100D6AC5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101475420818274&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4182","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101475420818274&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4182","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0329","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.2.03:*:*:*:*:*:*:*","matchCriteriaId":"E212B816-692F-4C5C-AEDF-B173BEE115A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"}]}]}],"references":[{"url":"http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101485184605149&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258981","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8309.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/132011","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4192","source":"cve@mitre.org"},{"url":"http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101485184605149&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8309.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/132011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0330","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D0E8D8D0-D96F-411D-8611-3381C576AE1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2CE48C90-79EA-4333-97BF-8ABD0789D625"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"}]}]}],"references":[{"url":"http://community.iansoft.net/read.php?TID=5159","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101466092601554&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8278.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5658","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4171","source":"cve@mitre.org"},{"url":"http://community.iansoft.net/read.php?TID=5159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101466092601554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8278.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0331","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatech_gmbh:bpm_studio_pro:4.2:*:*:*:*:*:*:*","matchCriteriaId":"628E43D0-B088-4B7D-B891-290E81BE16A3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101486044323352&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8300.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4198","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101486044323352&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8300.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0332","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xtell:xtell:1.91.1:*:*:*:*:*:*:*","matchCriteriaId":"35178628-D2C8-474C-A914-ED4B9A93B92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xtell:xtell:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07E7DAEC-A0AA-4D28-8CAC-066B9009E3A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101494896516467&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-121","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8312.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4193","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101494896516467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8312.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0333","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xtell:xtell:1.91.1:*:*:*:*:*:*:*","matchCriteriaId":"35178628-D2C8-474C-A914-ED4B9A93B92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xtell:xtell:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07E7DAEC-A0AA-4D28-8CAC-066B9009E3A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101494896516467&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-121","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8313.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4194","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101494896516467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8313.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0334","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xtell:xtell:1.91.1:*:*:*:*:*:*:*","matchCriteriaId":"35178628-D2C8-474C-A914-ED4B9A93B92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xtell:xtell:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07E7DAEC-A0AA-4D28-8CAC-066B9009E3A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101494896516467&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-121","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8314.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4197","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101494896516467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8314.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0335","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galacticomm_technologies:worldgroup:3.20:*:*:*:*:*:*:*","matchCriteriaId":"8739139B-70DD-431B-A35D-BD6BD11AB730"},{"vulnerable":true,"criteria":"cpe:2.3:a:galacticomm_technologies:worldgroup_lite_personal_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"84350F46-B715-40DF-98D4-72ABC016CA80"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101484128203523&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8298.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4186","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101484128203523&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8298.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0336","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galacticomm_technologies:worldgroup:3.20:*:*:*:*:*:*:*","matchCriteriaId":"8739139B-70DD-431B-A35D-BD6BD11AB730"},{"vulnerable":true,"criteria":"cpe:2.3:a:galacticomm_technologies:worldgroup_lite_personal_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"84350F46-B715-40DF-98D4-72ABC016CA80"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101484128203523&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8297.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4185","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101484128203523&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8297.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0337","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6051B4-1B15-44C0-B2CD-5504E68C60F2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101495354424868&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8320.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101495354424868&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8320.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0338","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.53d:*:*:*:*:*:*:*","matchCriteriaId":"FA4E6DB5-6670-42D8-B237-E7AA200AD04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ritlabs:the_bat:1.54d:*:*:*:*:*:*:*","matchCriteriaId":"75CE0436-6392-4937-ABA8-3607FDB11406"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101483832026841&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8303.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4187","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101483832026841&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8303.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0339","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1cc:*:*:*:*:*:*:*","matchCriteriaId":"D5F31EAA-F76F-4182-B90D-6997E52EEB25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/IOS-CEF-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8296.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/310387","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/806","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4191","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/IOS-CEF-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8296.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/310387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0340","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"8.00.00.4477","matchCriteriaId":"6D92B5F7-4F14-4938-9F6A-B0B492116768"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101447771102582&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101447771102582&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0341","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101494830315071&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101494830315071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0342","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:k-mail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3D0E014A-BE23-47F2-86B3-B7A36D7FE056"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101475683425671&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8283.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4177","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101475683425671&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8283.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0343","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotline_communications:hotline_connect:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"0544842B-7E65-499B-857E-A2EED39DDCB8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101495128121299&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8327.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4210","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101495128121299&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8327.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0344","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:liveupdate:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"441D680D-1C03-4B7C-990E-62DFB8ABC6A2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101466781122312&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101496301307285&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8282.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4170","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101466781122312&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101496301307285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8282.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0345","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\\params registry key, which could allow an attacker to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_ghost:7.0:*:*:*:*:*:*:*","matchCriteriaId":"40B2DD4C-AA24-4706-AB41-1E1C898F39ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101529792821615&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258293","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8305.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4181","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101529792821615&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8305.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0346","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*","matchCriteriaId":"E7B5449B-CE31-44FB-B3CD-F3ED15F2F139"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101495944202452&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8321.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4211","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101495944202452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8321.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0347","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*","matchCriteriaId":"E7B5449B-CE31-44FB-B3CD-F3ED15F2F139"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101495944202452&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8322.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101495944202452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8322.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0348","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*","matchCriteriaId":"E7B5449B-CE31-44FB-B3CD-F3ED15F2F139"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101495944202452&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8323.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4209","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101495944202452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8323.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0349","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiny_software:tiny_personal_firewall:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"76D7E519-94E9-4F18-A8D6-0C2EDEA09582"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101494587110288&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8324.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4207","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101494587110288&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8324.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0350","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_switch_4000m:c.08.22:*:*:*:*:*:*:*","matchCriteriaId":"24331650-1BC4-44CC-A361-76B59518AB50"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_switch_4000m:c.09.09:*:*:*:*:*:*:*","matchCriteriaId":"920536C6-DA45-4212-82B0-69F8CBADAE87"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101500123900612&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8329.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4212","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101500123900612&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8329.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0351","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AA11BB8C-86A1-4751-8DC6-296692390CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3_alpha:*:*:*:*:*:*:*","matchCriteriaId":"23A85829-A431-4769-B5E5-B36AA5981259"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3_arm:*:*:*:*:*:*:*","matchCriteriaId":"10C1C268-B82D-4D91-A8DD-132258742155"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3_ia32:*:*:*:*:*:*:*","matchCriteriaId":"8920A323-97D4-4A7A-B775-2D453DBC11C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3_m68k:*:*:*:*:*:*:*","matchCriteriaId":"EC8F844F-746C-46EE-862B-720BB1D54576"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3_ppc:*:*:*:*:*:*:*","matchCriteriaId":"43F4D6E1-EBEC-4E1D-9301-BC41BEC398B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_blaze:cfs:1.3.3_sparc:*:*:*:*:*:*:*","matchCriteriaId":"43C28E22-2597-4293-B22D-DCCFC4841873"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-116","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8330.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4219","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8330.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0352","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C6D87C46-D9EC-418B-9C8C-71E7149C72D4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101508207206900&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8344.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4226","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101508207206900&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8344.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0353","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000474","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00003.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/8952.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4604","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/8952.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0354","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"347AB95F-166E-449A-82D7-BEC10257E0D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F112CED-879B-4A19-993A-16858B4EC16C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7D7FA24-4B6F-4D67-95BE-46819033CA6F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102017952204097&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102020343728766&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102017952204097&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102020343728766&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0355","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020503-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9023.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4682","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020503-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9023.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0356","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9042.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4706","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9042.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0357","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020601-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-087.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9261.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/430419","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4939","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020601-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-087.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9261.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/430419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0358","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mediamail:*:*:*:*:*:*:*:*","matchCriteriaId":"6AD010B4-5C99-4C1D-BD01-FED69CABFB53"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:mediamail:*:*:pro:*:*:*:*:*","matchCriteriaId":"611C5C0F-81EB-46F0-8522-0CF6E498B713"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020602-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9292.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4959","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020602-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9292.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0359","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges."},{"lang":"es","value":"xfsmd para IRIX 6.5 a la 6.5.16 utiliza una autenticación débil, lo cual permite a atacantes remotos la llamada de funciones RPC peligrosas, incluyendo aquellas que permiten montar y desmontar sistemas de ficheros xfs, para obtener permisos de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102459162909825&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9401.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/521147","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5072","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102459162909825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9401.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/521147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0360","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4:*:*:*:*:*:*:*","matchCriteriaId":"09366485-E68C-4E5B-8C76-FD6D8CD48B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E03C0EB-3336-4CF9-8088-CD90E768B1A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3D613BAC-1341-4B6D-971A-9CB9FE4342EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"055AAFC3-DE75-4D03-B9E4-DF34FC39BC23"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102198846905064&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vulnwatch&m=102194510509450&w=2","source":"cve@mitre.org"},{"url":"http://www.eSecurityOnline.com/advisories/eSO5063.asp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9117.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4784","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102198846905064&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vulnwatch&m=102194510509450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eSecurityOnline.com/advisories/eSO5063.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9117.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0362","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D7577EED-D28B-430A-B554-CE40D9154893"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102071080509955&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9017.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4677","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=102071080509955&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9017.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-0363","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aladdin_enterprises:ghostscript:*:*:*:*:*:*:*:*","versionEndIncluding":"6.53","matchCriteriaId":"0D1A85B3-4935-4966-A3CD-2EA13C42866C"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-026.0.txt","source":"cve@mitre.org"},{"url":"http://www.ghostscript.com/pipermail/gs-code-review/2002-February/001900.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ghostscript.com/pipermail/gs-code-review/2002-January/001801.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9254.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-083.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-123.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-209.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4937","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-026.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ghostscript.com/pipermail/gs-code-review/2002-February/001900.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ghostscript.com/pipermail/gs-code-review/2002-January/001801.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9254.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-123.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0364","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka \"Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102392069305962&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102392308608100&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276767","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9327.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/313819","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4855","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-028","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102392069305962&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102392308608100&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9327.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/313819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0366","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276776","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/278145","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/vna/ms-ras.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4852","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/278145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/vna/ms-ras.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0367","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-10-22T01:15:30.693","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:terminal_server:*:*:*","matchCriteriaId":"E30F6C9C-3371-44FF-AD0B-3CAA0AB6F1B8"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=101614320402695&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.iss.net/security_center/static/8462.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262074","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264441","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/264927","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4287","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=ntbugtraq&m=101614320402695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.iss.net/security_center/static/8462.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/264927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2002-0367","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2002-0368","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka \"Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"34300FD4-EC3B-4206-B6C0-1345F17EC5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"47132D0D-7691-40A3-A4BF-37D2ACE580C3"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9195.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4881","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-025","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9195.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0369","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*","matchCriteriaId":"766661C0-6A35-4F62-8325-3840A75CF3B4"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9276.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4958","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-026","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9276.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0370","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0."},{"lang":"es","value":"Desbordamiento de búfer en la capacidad ZIP de múltiples productos permite a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario mediante ficheros ZIP que contienen nombres de ficheros largos, incluyendo\r\nMicrosoft Windows 98 con el paquete Plus!\r\nWindows XP\r\nWindows Me\r\nLotus Notes R4 a R6 (pre-gold)\r\nVerity KeyView, y\r\nStuffit Expander antes de 7.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allume_systems_division:stuffit_expander:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3741E010-136A-47C8-8CFE-8C8C556F1BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"06CEA48E-1CBC-48D9-ADCA-341BBBB524B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C1D5D749-546A-4655-A0BF-0A2D4E9F51A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5C43E91B-492D-42E0-9C59-3DA83AF7367B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C944AEC-18C2-487E-8E0F-EC525D21EDF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0D4B2601-B62F-4235-BFFD-281235737450"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CA83054E-5E6B-48A4-8799-5C8507BFEB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D7DEAC0E-C59B-42DB-BB81-E34C9F843486"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.9a:*:*:*:*:*:*:*","matchCriteriaId":"780C6EC1-11FD-458C-B59F-11668BA1E466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"0A7F5626-EB8B-4339-9EB5-C23962DAC95A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7CB071DF-5C48-4FE8-8DCC-68582A3C1EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:r5:*:*:*:*:*:*:*","matchCriteriaId":"2F4F8C0C-B817-4E38-95E6-5896E365C75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:r6:*:*:*:*:*:*:*","matchCriteriaId":"AC24C6CC-70D0-4201-BA67-31ADAFAB3D69"},{"vulnerable":true,"criteria":"cpe:2.3:a:verity:keyview_viewing_sdk:gold:*:*:*:*:*:*:*","matchCriteriaId":"6A519207-A70B-433A-BA56-66240A5B2655"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2ACBE01-B77A-4D09-8FB3-D6365786C44F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_98_plus_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"83DE6302-A76A-44C1-A2EC-27FD1B82B9B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103428193409223&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/587","source":"cve@mitre.org"},{"url":"http://www.info-zip.org/FAQ.html","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10251.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/383779","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5873","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103428193409223&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info-zip.org/FAQ.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10251.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/383779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0371","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response."},{"lang":"es","value":"Desbordamiento de búfer en el cliente gopher de Microsoft Internet Explorer 5.1 a la 6.0, Proxy Server 2.0, o ISA Server 2000 permite a atacantes remotos la ejecución de código arbitrario mediante una URL gopher:// que redirige al usuario a un servidor gopher real o simulado que envía una respuesta larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"80744BD9-85A9-4E33-8C35-59C8C112AC62"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:isa_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"7F2A1D83-7D2F-4408-B93E-FB53F724EB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7BF233-8DE6-4DC4-B9ED-5D4A180DD8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"CE48AD5F-D719-4D39-ACE1-53D0FE5F6525"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_minnesota:gopher:*:*:*:*:*:*:*:*","matchCriteriaId":"4DBBE0F3-7BBC-4FE8-BA0E-B1AC27B224F6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102320516707940&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102397955217618&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276848","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9247.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/440275","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.pivx.com/workaround_fail.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4930","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102320516707940&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102397955217618&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9247.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/440275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.pivx.com/workaround_fail.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0372","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the \"Cache Path Disclosure via Windows Media Player\"."},{"lang":"es","value":"Microsoft Windows Media Player versiones 6.4 y 7.1 y Media Player para Windows XP permite a atacantes remotos eludir los mecanismos de seguridad de Internet Explorer's (IE), y ejecutar código mediante un fichero ejecutable .wma con unos requerimientos para la licencia de instalación almacenados en la caché de IE, también conocida como: \"Cache Patch Disclosure via Windows Media Player\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:-:*:*:*:*:*:*:*","matchCriteriaId":"1CDD85BA-0CDA-4EF2-A447-84A4F7B94B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C66EBE04-CE6A-4B81-BC09-60DC5DB121E3"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9420.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5107","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9420.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0373","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka \"Privilege Elevation through Windows Media Device Manager Service\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C66EBE04-CE6A-4B81-BC09-60DC5DB121E3"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9421.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5109","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9421.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0374","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:pam_ldap:*:*:*:*:*:*:*:*","versionEndIncluding":"144","matchCriteriaId":"2261AFF3-4237-49B3-8D06-2E78A4627E2A"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-041.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103601912505261&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9018.php","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-084.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-141.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-175.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-180.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4679","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-041.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103601912505261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9018.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-141.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-175.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0375","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecometry:sgdynamo:5.32:*:*:*:*:*:*:*","matchCriteriaId":"1DA163AD-F045-48EF-9994-B9A13A91FD59"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecometry:sgdynamo:6.1:*:*:*:*:*:*:*","matchCriteriaId":"6CA3624B-CA5E-473B-9447-71CB71E4F626"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecometry:sgdynamo:7.0:*:*:*:*:*:*:*","matchCriteriaId":"6EAF5854-98C7-465E-B6EA-F5A3A0E71F86"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102107488402057&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101908986415768&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3458","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9830","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102107488402057&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101908986415768&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0376","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field."},{"lang":"es","value":"Desbordamiento de búfer en el componente ActiveX de Apple QuickTime 5.0 permite a atacantes remotos ejecutar código arbitrario mediante un campo pluginspace largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"844E1B14-A13A-47F1-9C82-02EAEED1A911"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/293095","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a091002-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10077.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5685","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/293095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2002/a091002-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10077.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0377","sourceIdentifier":"cve@mitre.org","published":"2002-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0584.html","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102130733815285&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9061.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4730","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0584.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gaim.sourceforge.net/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102130733815285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9061.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0378","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts."},{"lang":"es","value":"La configuración por defecto del gestor de la cola de impresión LPRng en Red Hat Linux 7.0 a la 7.3 acepta trabajos de impresión de sistemas arbitrarios remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"932F6771-D5DF-4003-90C8-A1DD2DC7022A"},{"vulnerable":true,"criteria":"cpe:2.3:o:astart_technologies:lprng:3.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6DBD2EE1-224D-45DB-A4E0-457B3EF08EE8"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4205","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9322.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-042.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-089.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4980","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9322.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-042.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0379","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:uw-imap:2000.283:*:*:*:*:*:*:*","matchCriteriaId":"9CB47875-42BF-43E2-B602-9BD81C54AA2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:uw-imap:2000.284:*:*:*:*:*:*:*","matchCriteriaId":"0750937B-38C3-4955-B92B-ED168FC092A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:uw-imap:2000.287:*:*:*:*:*:*:*","matchCriteriaId":"BF2EAF3E-D09C-44BD-A511-D1B33C196756"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:uw-imap:2000.315:*:*:*:*:*:*:*","matchCriteriaId":"C9AB553B-FD8F-4058-BFD0-105BCE9274F1"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-021.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000487","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102107222100529&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4167","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9055.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/961489","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-034.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2120.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-092.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4713","source":"cve@mitre.org"},{"url":"http://www.washington.edu/imap/buffer.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10803","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-021.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102107222100529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9055.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/961489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-034.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.washington.edu/imap/buffer.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0380","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.2","matchCriteriaId":"7A040B70-967E-4F97-8652-21F70C271E20"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000491","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102339541014226&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102650721503642&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4169","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-255","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9216.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-094.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-121.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-214.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4890","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102339541014226&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102650721503642&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9216.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-214.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0381","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"2BCDB223-15E8-4E63-BB82-446AFBDE52F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I","source":"cve@mitre.org"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/262733","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.FreeBSD.org/cgi/query-pr.cgi?pr=35022","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8485.php","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff?r1=1.109&r2=1.110","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5308","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4309","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/262733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.FreeBSD.org/cgi/query-pr.cgi?pr=35022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8485.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff?r1=1.109&r2=1.110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0382","sourceIdentifier":"cve@mitre.org","published":"2002-06-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*","versionEndIncluding":"1.89","matchCriteriaId":"2CC0E3DA-D2F6-4A46-A328-D1F0CDBE071F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000526","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101725430425490&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8704.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-051.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-097.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-124.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4376","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101725430425490&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8704.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-051.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-097.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-124.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0384","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en el plug-in Jabber en el cliente Gaim anteriores a 0.589 permite a atacantes ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"}]}]}],"references":[{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4358","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9766.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3729","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-098.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-107.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-122.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-156.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5406","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9766.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-098.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-122.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0386","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a \"..\" (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data."},{"lang":"es","value":"El módulo de administración de Oracle Web Cache en Oracle9iAS (9i Application Suite) 9.0.2 permite a atacantes remotos causar una denegación de servicio (caída) mediante \r\nuna petición HTTP GET conteniendo una secuencia \"..\" (punto punto), o\r\nuna petición HTTP GET con un Transfer-Encoding troceado al que le faltan datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2002/a102802-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10284.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5902","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2002/a102802-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10284.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0388","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.11","matchCriteriaId":"2DBFAF02-AB05-4823-9FF5-A0ED8D08CC10"}]}]}],"references":[{"url":"http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4826","source":"cve@mitre.org"},{"url":"http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0389","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not intend to take any action on this issue. This is the expected behavior of Mailman and is not considered to be a security flaw by upstream.  If Mailman upstream addresses this issue in a future update, we may revisit our decision.","lastModified":"2016-12-27T21:59:00.243"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","matchCriteriaId":"60AD053B-1E35-4AB6-BCCC-96D571C11B37"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101902003314968&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1417.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8874.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4538","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101902003314968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1417.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8874.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0391","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"689777D9-7E25-45D5-B585-2FC31D4BE28A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:*:*:*:sparc:*:*","matchCriteriaId":"BCA7836E-A936-4832-81A2-2D31F0642ABE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-055.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-011.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020801-01-A","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020801-01-P","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q4/0002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0514.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0077.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000515","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102813809232532&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102821785316087&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102821928418261&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102831443208382&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=103158632831416&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://online.securityfocus.com/advisories/4402","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/285740","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-166.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-172.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2002-25.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-142","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-143","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-146","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-149","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2003/dsa-333","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9170.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/192995","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2399.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:057","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-167.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-173.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-168.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-212.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5356","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A42","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4728","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-055.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-011.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020801-01-A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020801-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q4/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0514.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102813809232532&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102821785316087&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102821928418261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102831443208382&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=103158632831416&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://online.securityfocus.com/advisories/4402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/285740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-172.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cert.org/advisories/CA-2002-25.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2003/dsa-333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9170.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/192995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2399.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-167.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-173.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A42","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-0392","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.37 and 1.3.26:\nhttp://httpd.apache.org/security/vulnerabilities_20.html\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.2","versionEndIncluding":"1.3.24","matchCriteriaId":"BC1462D4-285E-44B1-91D2-D3FEFD613807"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndIncluding":"2.0.36","matchCriteriaId":"4CEED217-758F-4471-9F0C-8DC4B2D46CCB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-029.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.32","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.31","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-A","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0235.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0266.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000498","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:039","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://httpd.apache.org/info/security_bulletin_20020617.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/4240","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/advisories/4257","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/278149","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-103.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-117.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-118.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/21917","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-17.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-131","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-132","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-133","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.frsirt.com/english/advisories/2006/3598","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9249.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/944335","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2137.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_22_apache.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/838","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-126.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-150.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/20005","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5033","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000083816475","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000083816475","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-029.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.32","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0266.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://httpd.apache.org/info/security_bulletin_20020617.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/4240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/advisories/4257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/278149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-118.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/21917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.frsirt.com/english/advisories/2006/3598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9249.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/944335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_22_apache.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-150.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/20005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000083816475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000083816475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0393","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA9FB30-95B1-4C84-8BCD-38C579C2C36E"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4942","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9262","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0394","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA9FB30-95B1-4C84-8BCD-38C579C2C36E"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9263.php","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9263.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0395","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA9FB30-95B1-4C84-8BCD-38C579C2C36E"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9264","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0396","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA9FB30-95B1-4C84-8BCD-38C579C2C36E"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9265","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0397","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allows any system on the network to obtain potentially sensitive information about the Access Point device by monitoring UDP port 8887."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA9FB30-95B1-4C84-8BCD-38C579C2C36E"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9266","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0398","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:1050ap_lan_acess_point:*:*:*:*:*:*:*:*","matchCriteriaId":"2CA9FB30-95B1-4C84-8BCD-38C579C2C36E"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9267","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a060502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0399","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) \"/..\" or (2) \"./..\" string, which removes the leading slash but leaves the \"..\", a variant of CVE-2001-1267."},{"lang":"es","value":"Vulnerabilidad desconocida en GNU tar 1.13.25 permite a atacantes sobreescribir ficheros arbitrarios durante la extracción de archivos usando un ataque similar al identificado como CAN-2001-1269."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:tar:1.13.25:*:*:*:*:*:*:*","matchCriteriaId":"60CD7558-833D-473B-99A4-854FB6CC6C9A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103419290219680&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19130","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26673","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26987","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10224.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2400.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:066","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2006_05_sr.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2007_19_sr.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-096.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/477731/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/477865/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5834","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-1631","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103419290219680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10224.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_05_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_19_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/477731/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/477865/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0400","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*","matchCriteriaId":"C52373DC-3E05-424B-9C78-4092A75C75A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1861756C-CC81-4EAB-8427-57A3C62BFF96"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CDD642FC-1764-4090-A32D-830CEAE69E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE954FD0-56AF-4757-BAA8-B0C64703F6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"BF891263-4ACE-47C3-83F3-C06E49F32451"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*","matchCriteriaId":"1F947835-8E96-4793-B81E-EEC103BF0CB3"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.24.1/CSSA-2002-SCO.24.1.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0022.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000494","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-15.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9250.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/739123","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2002_21_bind9.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-105.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-119.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-154.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4936","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.24.1/CSSA-2002-SCO.24.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-15.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.isc.org/index.pl?/sw/bind/bind-security.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9250.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/739123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2002_21_bind9.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0401","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal:ethereal:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.3","matchCriteriaId":"208D2D0F-27F5-430D-AD98-54626EE6BC6D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2002/dsa-130","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9204.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4806","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2002/dsa-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9204.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0402","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*","matchCriteriaId":"508E58C5-E917-41F4-A4A0-C02ED4E0E240"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9203.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-170.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4805","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9203.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0403","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*","matchCriteriaId":"508E58C5-E917-41F4-A4A0-C02ED4E0E240"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9205.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-170.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4807","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9205.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0404","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*","matchCriteriaId":"508E58C5-E917-41F4-A4A0-C02ED4E0E240"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9206.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-170.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4808","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102268626526119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9206.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0405","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . (dot) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"F7E6C162-7EA0-4FA3-BD10-4B2D00628972"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274279","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4864","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6673","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0406","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:menasoft:sphereserver:0.99f:*:*:*:*:*:*:*","matchCriteriaId":"870FBBDE-8BCE-408A-871C-44B5C21E88D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:menasoft:sphereserver:0.99i:*:*:*:*:*:*:*","matchCriteriaId":"C460687F-B8BB-416B-AC83-7CAAF1C94B31"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/259334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8338.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4258","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/259334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8338.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0407","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.9a","matchCriteriaId":"28EC7B78-B8E5-4B9A-91E9-49B5E5FA55B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101310812804716&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8160.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/265380","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4406","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101310812804716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8160.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/265380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0408","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.9a","matchCriteriaId":"28EC7B78-B8E5-4B9A-91E9-49B5E5FA55B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101310812804716&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101785616526383&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4049","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101310812804716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101785616526383&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0409","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*","matchCriteriaId":"766661C0-6A35-4F62-8325-3840A75CF3B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101518860823788&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101518860823788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0410","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.02:*:*:*:*:*:*:*","matchCriteriaId":"4BBDE2D7-7CFA-416C-89A7-AC30153C8DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.10:*:*:*:*:*:*:*","matchCriteriaId":"82999523-8FF9-429C-BAA6-93BED85F389F"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.20:*:*:*:*:*:*:*","matchCriteriaId":"CDEFFA62-D764-4CEF-9614-47779368EB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.26:*:*:*:*:*:*:*","matchCriteriaId":"9180985E-1296-4CC1-A9DF-0DE8249C0300"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.30:*:*:*:*:*:*:*","matchCriteriaId":"87A5B8D1-FD94-4E8C-9D6D-85BDDD28ABD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.40:*:*:*:*:*:*:*","matchCriteriaId":"425D6C42-1B74-4D01-9578-83FD4E71B5F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://the.cushman.net/projects/aeromail/download/","source":"cve@mitre.org"},{"url":"http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8345.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4214","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://the.cushman.net/projects/aeromail/download/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8345.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0411","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en message.php para AeroMail anteriores a la 1.45 permiten a atacantes remotos la ejecución de Javascript como un usuario AeroMail mediante un mensaje de correo electrónico con la rutina a ejecutar escrita en la linea de \"Asunto\" del mensaje."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.02:*:*:*:*:*:*:*","matchCriteriaId":"4BBDE2D7-7CFA-416C-89A7-AC30153C8DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.10:*:*:*:*:*:*:*","matchCriteriaId":"82999523-8FF9-429C-BAA6-93BED85F389F"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.20:*:*:*:*:*:*:*","matchCriteriaId":"CDEFFA62-D764-4CEF-9614-47779368EB5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.26:*:*:*:*:*:*:*","matchCriteriaId":"9180985E-1296-4CC1-A9DF-0DE8249C0300"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.30:*:*:*:*:*:*:*","matchCriteriaId":"87A5B8D1-FD94-4E8C-9D6D-85BDDD28ABD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:aeromail:aeromail:1.40:*:*:*:*:*:*:*","matchCriteriaId":"425D6C42-1B74-4D01-9578-83FD4E71B5F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8346.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4215","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://the.cushman.net/projects/aeromail/download/aeromail-1.45.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8346.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0412","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función TraceEvent para ntop anteriores a la 2.1 permite a atacantes remotos la ejecución de código arbitrario haciendo que la cadena del formato forme parte de las llamadas a la función syslog, mediante:\r\n\r\n una petición HTTP GET\r\n un nombre de usuario en la autenticación HTTP\r\n una contraseña en la autenticación HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luca_deri:ntop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"ECBA05AB-4CB0-4B94-AFB6-D220F55D5E1D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0056.html","source":"cve@mitre.org"},{"url":"http://listmanager.unipi.it/pipermail/ntop-dev/2002-February/000489.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101854261030453&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101856541322245&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101908224609740&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/259642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://snapshot.ntop.org/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8347.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5307","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4225","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://listmanager.unipi.it/pipermail/ntop-dev/2002-February/000489.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101854261030453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101856541322245&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101908224609740&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/259642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://snapshot.ntop.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8347.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0413","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en ReBB permite a atacantes remotos la ejecución arbitraria de Javascript y el robo de cookies mediante una etiqueta IMG cuya URL incluye la rutina maliciosa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rebb:rebb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A34BE023-3EB0-4D83-B393-6C97F334AE9D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/259464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8353.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4220","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/259464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8353.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0414","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0057.html","source":"cve@mitre.org"},{"url":"http://orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8416.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/259598","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4224","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8416.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/259598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0415","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BC2D3F72-0C09-4F94-9B1A-AD93FF0D32FC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8336.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/259333","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8336.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/259333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0416","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port."},{"lang":"es","value":"Desbordamiento de búfer en SH39 MailServer 1.21 y anteriores permite a atacantes remotos causar Denegación de Servicio (DoS), y posiblemente ejecutar código mediante el envío de un comando largo al puerto SMTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sh39:mailserver:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"043DEB1F-A573-4F09-BC3F-996D49E73A4B"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8379.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/259818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4232","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8379.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/259818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0417","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Endymion MailMan anteriores a la versión 3.1 permite a atacantes remotos la lectura de ficheros arbitrarios mediante un .. (punto punto) y un caracter nulo en el parámetro ALTERNATE_TEMPLATES de varios programas mmstdo*.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D693081C-444A-433F-A7FA-C735C04A6BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEC8C26-ADB8-447B-8804-6BED1F0B5BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D4A9694B-BFB2-40F6-AD93-9D091B4D3547"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"83F8894E-BA18-49E7-ACF3-CD23F7A25490"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"8AE521DD-BA8A-489E-897C-2B6E12D46E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"8BDEFCEE-09F6-4BE1-B2ED-A7317893D506"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"374C100E-1E2D-473F-85AD-A1C48CC00067"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"24218B6F-648D-4DA3-A6CC-68BF6EE76B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"DECA80A1-7596-4F8C-8D2F-BD9C8F71BF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"83E25D1B-0304-41B5-8108-09C6BBB40076"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"7EA5782F-15E9-4958-A72A-EAC197BCFE54"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"61A7C198-91F3-44AF-908C-F8BBCFAE173D"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"5B34F7C0-7F95-4F9F-9CAB-6915C5CB60C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"67B952BA-C01F-4A7C-B7A7-84595FE38377"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"49824940-8621-4B21-B3D4-447D7A9C50D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.19:*:*:*:*:*:*:*","matchCriteriaId":"C4D009DF-DFF7-452A-A512-80F64046FC30"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.20:*:*:*:*:*:*:*","matchCriteriaId":"EA444B4D-3234-4DF5-ABCC-C604B7FCE347"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C9272E38-8147-42FE-909A-77CF9A4F896C"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.22:*:*:*:*:*:*:*","matchCriteriaId":"827A30D3-ECDA-48BA-A6D8-33A88B1B4513"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.23:*:*:*:*:*:*:*","matchCriteriaId":"B8601A5B-2374-48CC-98F7-C4628D917E15"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.24:*:*:*:*:*:*:*","matchCriteriaId":"799E8144-CA29-4C3A-BFDE-6845DC9DD88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.26:*:*:*:*:*:*:*","matchCriteriaId":"C85740AA-918A-4739-8C97-5E303A58CCB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.27:*:*:*:*:*:*:*","matchCriteriaId":"42AD0FE5-BDA1-47A9-BA53-F9514C7B8C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.28:*:*:*:*:*:*:*","matchCriteriaId":"E4ED21E9-24B2-40DB-9171-165FBBF660F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.29:*:*:*:*:*:*:*","matchCriteriaId":"6CE1A0BD-0B26-4BE6-95DC-8F82016DF6F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.30:*:*:*:*:*:*:*","matchCriteriaId":"D3A34E5E-7097-4093-94FE-5A1D6D5FD650"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.31:*:*:*:*:*:*:*","matchCriteriaId":"528FBE4F-2CF5-4F04-A722-DE6E19220FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.32:*:*:*:*:*:*:*","matchCriteriaId":"F10B6A5E-80CF-4C90-840F-1E6878E18140"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.33:*:*:*:*:*:*:*","matchCriteriaId":"65F52790-2192-45BE-A69E-3D1209DD3B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.34:*:*:*:*:*:*:*","matchCriteriaId":"429033D4-6C76-4AE6-84D9-6FA7473A89F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:mailman_webmail:3.0.35:*:*:*:*:*:*:*","matchCriteriaId":"E69F440C-FFF4-4BEC-86B4-AC477062F2D7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/259730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.endymion.com/products/mailman/history.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8357.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4222","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/259730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.endymion.com/products/mailman/history.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8357.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0418","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en el servlet: com.endymion.sake.servlet.mail.MailServlet de Endymion SakeMail 1.0.36 y anteriores permite a atacantes remotos la lectura arbitraria de ficheros mediante un .. (punto punto) y un caracter nulo en el parámetro param_name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"951289B6-09B7-4037-8E65-C9AF10BC1DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"D4CB47BA-4EF4-4DB7-A68B-F753BD0CF0CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"BDA44BEB-F8D1-49AC-9EF9-D53CBDAFE7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"7411DF0C-1337-43D0-98C4-3F5E61F8CF21"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"075A3CEA-1151-473C-86E2-98FDCD8D958B"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"38341266-50E2-4296-BDE8-05F8CBE80477"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.27:*:*:*:*:*:*:*","matchCriteriaId":"782CDB18-6D37-47BC-9B7E-6643E38BE615"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.28:*:*:*:*:*:*:*","matchCriteriaId":"7A9129BC-E7D8-4B5B-BF32-C4884880D8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.29:*:*:*:*:*:*:*","matchCriteriaId":"489C8A57-C49F-4D15-8BD7-FFB00483EEFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.30:*:*:*:*:*:*:*","matchCriteriaId":"513405B5-9263-46E9-9789-E2F3953855BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.31:*:*:*:*:*:*:*","matchCriteriaId":"CF0E7918-B3AF-4B13-9B5B-3D587F2887F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.33:*:*:*:*:*:*:*","matchCriteriaId":"6196EE5C-4638-44FF-95A1-793B00419468"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.34:*:*:*:*:*:*:*","matchCriteriaId":"C4DA8FAE-E5CF-4EA6-AB77-F29CE70748BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.35:*:*:*:*:*:*:*","matchCriteriaId":"ACA270A5-0567-49DC-9B35-FC411F3957A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:endymion:sake_mail:1.0.36:*:*:*:*:*:*:*","matchCriteriaId":"F430E836-C365-41DD-B4D9-C851423CD397"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/259730","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8358.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4223","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/259730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8358.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0419","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as the realm for Basic authentication, which could reveal real IP addresses that were obscured by NAT, or (3) when NTLM authentication is used, the NetBIOS name of the server and its Windows NT domain are revealed in response to an Authorization request.  NOTE: this entry originally contained a vector (1) in which the server reveals whether it supports Basic or NTLM authentication through 401 Access Denied error messages.  CVE has REJECTED this vector; it is not a vulnerability because the information is already available through legitimate use, since authentication cannot proceed without specifying a scheme that is supported by both the client and the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"39F97431-7FBE-45B1-B594-B0A1B0FC31E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101535399100534&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8382.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4235","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101535399100534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8382.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0420","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions."},{"lang":"es","value":"Vulnerabilidad en PureTLS anteriores a la versión 0.9b2 relativa a ataques por inyección de código, que posiblemente permitiría a atacantes remotos corromper o apropiarse de la sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:claymore_systems_inc:puretls:0.9b1:*:*:*:*:*:*:*","matchCriteriaId":"1548F0C2-52E4-46EC-9364-DDB1B182D5CE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0056.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8386.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4237","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8386.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0421","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 4.0 allows local users to bypass the \"User cannot change password\" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr."},{"lang":"es","value":"IIS 4.0 permite a usuarios locales eludir la restricción de \"Los usuarios no pueden cambiar la contraseña\" (User cannot change password) para Windows NT invocando directamente los programas de cambio de conrtaseña .htr del directorio /iisadmpwd, incluyendo:\r\n\r\naexp2.htr\r\naexp2b.htr\r\naexp3.htr\r\naexp4.htr"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/259963","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8388.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4236","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/259963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8388.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0422","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101536634207324&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101535147125320&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8385.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13431","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101536634207324&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101535147125320&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8385.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0423","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efingerd:efingerd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1C8A6FB5-AB7D-4CCA-8D45-7135E23317CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:efingerd:efingerd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D6BB3B79-9BBA-466E-A909-78FE9A053BF6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html","source":"cve@mitre.org"},{"url":"http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.5.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8380.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4239","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.5.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8380.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0424","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically \"nobody\"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efingerd:efingerd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1C8A6FB5-AB7D-4CCA-8D45-7135E23317CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:efingerd:efingerd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D6BB3B79-9BBA-466E-A909-78FE9A053BF6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html","source":"cve@mitre.org"},{"url":"http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.6.2.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8381.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://melkor.dnp.fmph.uniba.sk/~garabik/efingerd/efingerd_1.6.2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8381.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0425","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a \"100 testing\" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9515213E-EB2B-4E53-8225-27B0EEB0EF55"},{"vulnerable":true,"criteria":"cpe:2.3:a:khaled_mardam-bey:mirc:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"5067FBD2-2D12-4D49-B4A6-3F2DB3DF259F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260244","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8393.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4247","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/260244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8393.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0426","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:*:*:*:*:*:*:*:*","versionEndIncluding":"1.40.1","matchCriteriaId":"B0DF7B3B-7080-4245-9593-C0D612237725"}]}]}],"references":[{"url":"ftp://ftp.linksys.com/pub/befsr41/befvp41-1402.zip","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8397.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4250","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.linksys.com/pub/befsr41/befvp41-1402.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/260613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8397.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0427","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:christof_pohl:improved_mod_frontpage:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FD81EB6A-669A-47EF-A4D5-11D03E062BF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:christof_pohl:improved_mod_frontpage:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"960C3BCD-BF8F-4187-AFAF-85C1252BD666"},{"vulnerable":true,"criteria":"cpe:2.3:a:christof_pohl:improved_mod_frontpage:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B8305D8C-846B-4219-94BA-CC0571FEF41E"},{"vulnerable":true,"criteria":"cpe:2.3:a:christof_pohl:improved_mod_frontpage:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4E63F0A8-94A6-4A25-A294-04C9F21E8E77"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:17.mod_frontpage.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8400.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-021.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4251","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:17.mod_frontpage.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8400.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-021.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0428","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the \"authentication timeout\" by modifying the to_expire or expire values in the client's users.C configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn:1_4.1:*:*:*:*:*:*:*","matchCriteriaId":"B5BEA055-A8FC-4A7C-A207-03AB340649D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn:1_4.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"D1E70DB9-7B37-4001-AC50-90FED1082187"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn:1_4.1_sp2:*:*:*:*:*:*:*","matchCriteriaId":"C429DA4B-D3C1-43AF-8AF8-69F177D26861"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn:1_4.1_sp3:*:*:*:*:*:*:*","matchCriteriaId":"AB00EB68-0512-4AB3-A3F6-E2928F0A325F"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:check_point_vpn:1_4.1_sp4:*:*:*:*:*:*:*","matchCriteriaId":"2E12BA38-E45F-45C2-A722-B7A05072A4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"74D81CF6-8E46-4BED-BC1E-9470E6088521"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"84C971FD-7282-4806-A717-686C3AE72A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"D8B8D963-B447-4B53-8449-D53E1CED11BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5F7A328F-CB62-40FA-A9B0-BFAB9F487689"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"2AA58BEC-68C0-401A-A1DE-353451E86648"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"D5AA0024-EBDC-42F7-8ED6-4651FFBA9668"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp7:*:*:*:*:*:*","matchCriteriaId":"743B9B05-7D09-4AA1-A1CC-D249F57B8156"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp8:*:*:*:*:*:*","matchCriteriaId":"5ADFB8F4-21EF-4E74-BD0E-DF4692DC9842"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"60536AAF-76BC-4773-98FA-5F01E2D231FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1E4206C4-05A7-46D1-90C7-6BA7744C7AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:next_generation:*:*:*:*:*:*:*:*","matchCriteriaId":"A5684554-DE87-450B-B8DA-5140BC7B8406"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260662","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8423.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4253","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/260662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8423.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0429","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101561298818888&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-311","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-312","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-332","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-336","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-442","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8420.php","source":"cve@mitre.org"},{"url":"http://www.openwall.com/linux/","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-158.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4259","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101561298818888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8420.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/linux/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-158.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0430","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_2:*:*:*:*:*:*:*:*","matchCriteriaId":"0F6DDD9F-5C58-4092-BF3D-332E2E566182"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_3i:*:*:*:*:*:*:*:*","matchCriteriaId":"0C1E1872-D16C-4848-800C-32B80DD59494"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*","matchCriteriaId":"E7B5449B-CE31-44FB-B3CD-F3ED15F2F139"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4252","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0431","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dave_lawrence:xtux:2001-06-01:*:*:*:*:*:*:*","matchCriteriaId":"188D2896-062D-404D-BB4F-A53E2D97826E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260912","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8422.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4260","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://sourceforge.net/tracker/index.php?func=detail&aid=529046&group_id=206&atid=100206","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8422.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://sourceforge.net/tracker/index.php?func=detail&aid=529046&group_id=206&atid=100206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0432","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:ux:*:*:*:*:*:*:*:*","versionEndIncluding":"5.90","matchCriteriaId":"38F6B9B8-A647-46FF-963B-AC763B37F724"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260934","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8426.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4263","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/260934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8426.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0433","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a \"*\" (wildcard or asterisk) character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi3:pi3web:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6F35E24C-67D3-44BF-8FFD-D1B44F6A2004"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8429.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4262","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8429.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0434","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcus_s._xenakis:directory.php:*:*:*:*:*:*:*:*","matchCriteriaId":"9F4E9697-D39F-4713-B0F2-916FBFE63CE0"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8440.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261512","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8440.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0435","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a \"..\" directory that is higher than expected, possibly up to the root file system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:fileutils:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5763D60E-A358-4D0A-BD7B-B01CC4CAD7C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:fileutils:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C2F6A8F0-396B-4484-9621-70FFC61BF4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:fileutils:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"7E2FE284-B564-48C7-9DA4-31A6D9AD3E38"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8432.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-031.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-016.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/260936","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4266","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-018.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://mail.gnu.org/archive/html/bug-fileutils/2002-03/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8432.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-031.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/260936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0436","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8435.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4269","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8435.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0437","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term \"string format vulnerability\" by some sources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_frings:sms_server_tools:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"AA8F3D85-2811-4378-A1A6-3DE1AAA7A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_frings:sms_server_tools:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"5C51E72E-C03B-4601-932E-CD3D49F303EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html","source":"cve@mitre.org"},{"url":"http://www.isis.de/members/~s.frings/smstools/history.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8433.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4268","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.isis.de/members/~s.frings/smstools/history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8433.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0438","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.20_wa0:*:*:*:*:*:*:*","matchCriteriaId":"5CBA592E-E73E-45A5-914A-74DA508D39AF"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.20_wa1:*:*:*:*:*:*:*","matchCriteriaId":"11B8D73C-32EB-406E-824A-E0ED0F404626"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.24_wa0:*:*:*:*:*:*:*","matchCriteriaId":"0BBC4ED4-20BC-4C33-BD0C-54DA9BA952FE"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.24_wa1:*:*:*:*:*:*:*","matchCriteriaId":"291E76EE-EA74-4CBD-92B0-F3EAA8275303"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.24_wa2:*:*:*:*:*:*:*","matchCriteriaId":"93030A93-D89C-4446-B415-3DF810640ED2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.50_wa1:*:*:*:*:*:*:*","matchCriteriaId":"C5B89821-8942-4C94-8CB5-2C1B67349939"}]}]}],"references":[{"url":"ftp://ftp.zyxel.com/public/zywall10/firmware/zywall10_V3.50%28WA.2%29C0_Standard.zip","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0067.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8436.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261411","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4272","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.zyxel.com/public/zywall10/firmware/zywall10_V3.50%28WA.2%29C0_Standard.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8436.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0439","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caupo.net:cauposhop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.30a","matchCriteriaId":"A4D55637-B238-40B1-856A-C571E2958D16"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8431.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/261218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4270","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8431.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/261218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0440","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan VirusWall HTTP proxy 3.6 with the \"Skip scanning if Content-length equals 0\" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F35126E8-F926-4C0B-B37F-AFE78DD2526F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.51:*:*:*:*:*:*:*","matchCriteriaId":"CDA017B0-A0D4-4B47-B980-57C6C103C7F8"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Mar/0162.html","source":"cve@mitre.org"},{"url":"http://www.inside-security.de/vwall_cl0.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8425.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4265","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/lists/bugtraq/2002/Mar/0162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.inside-security.de/vwall_cl0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8425.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0441","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jerrett_taylor:php_imglist:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6B7CD2DA-B5EB-470B-B4FC-6522082259B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jerrett_taylor:php_imglist:1.2:*:*:*:*:*:*:*","matchCriteriaId":"313E9E10-4E74-47D1-842D-62165192B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jerrett_taylor:php_imglist:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0BB7F556-2A63-47E0-9B6A-99A429CA39C2"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8441.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.liquidpulse.net/get.lp?id=17","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/261221","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4276","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8441.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.liquidpulse.net/get.lp?id=17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/261221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0442","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C63D4FCE-5416-4DE2-8E9A-5BF057673118"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CCA39EEE-1B65-43AE-80E2-078A49616DD1"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.8/CSSA-2002-SCO.8.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8442.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4273","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.8/CSSA-2002-SCO.8.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8442.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0443","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8402.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4256","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/260704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8402.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0444","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8813.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/266729","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4464","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8813.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/266729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0445","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_firstpost:php_firstpost:0.1:*:*:*:*:*:*:*","matchCriteriaId":"90A97200-A5D4-4FD9-8AC0-7453542FF9F2"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8434.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7170","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/261337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8434.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/261337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0446","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:black_tie_project:black_tie_project:0.4b:*:*:*:*:*:*:*","matchCriteriaId":"2C3531DB-98B0-4B7F-9B5F-4DC19B2A6516"},{"vulnerable":true,"criteria":"cpe:2.3:a:black_tie_project:black_tie_project:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61A21551-F263-4272-8B38-6E27F90DEE08"},{"vulnerable":true,"criteria":"cpe:2.3:a:black_tie_project:black_tie_project:0.5b:*:*:*:*:*:*:*","matchCriteriaId":"C58DADB1-DC13-42BF-9F5F-98AD0FAD3A08"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8439.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4275","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8439.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0447","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerver:xerver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10","matchCriteriaId":"A1DB7F69-8C86-43DA-89B9-8BA729E6B7A0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0091.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0155.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8421.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4255","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8421.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0448","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many \"C:/\" sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xerver:xerver:*:*:*:*:*:*:*:*","versionEndIncluding":"2.10","matchCriteriaId":"A1DB7F69-8C86-43DA-89B9-8BA729E6B7A0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0091.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0155.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8419.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4254","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8419.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0449","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"0C824ABB-FA91-4C52-9D2E-AC7BD334CFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"29247C6B-6359-43C6-A1D1-4E17D4CDF4A3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101535141925150&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8361.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/159907","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4233","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.talentsoft.com/Issues/IssueDetail.wml?ID=WP943","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101535141925150&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8361.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/159907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.talentsoft.com/Issues/IssueDetail.wml?ID=WP943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0450","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"0C824ABB-FA91-4C52-9D2E-AC7BD334CFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"29247C6B-6359-43C6-A1D1-4E17D4CDF4A3"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00208.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8446.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4282","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.talentsoft.com/Issues/IssueDetail.wml?ID=WP943","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8446.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.talentsoft.com/Issues/IssueDetail.wml?ID=WP943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0451","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B058160A-FF7A-4020-B731-9E262684560D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpprojekt:phpprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"950B85DE-C3EB-410D-8F98-A1EB6AE02D58"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8448.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order=","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/261676","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4284","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8448.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/261676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0452","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Foundry Networks ServerIron switches do not decode URIs when applying \"url-map\" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:5.1.10t12:*:*:*:*:*:*:*","matchCriteriaId":"8F5240D4-EF05-4134-9B75-03C1BFE7D37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E3BDF7B5-5962-4D37-965B-22022255C96B"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:7.1.09:*:*:*:*:*:*:*","matchCriteriaId":"F51A3647-C8B5-418F-B018-FCF24565DF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:400:*:*:*:*:*:*:*","matchCriteriaId":"7324B907-DD45-46C2-B0AB-529F8F2722B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:800:*:*:*:*:*:*:*","matchCriteriaId":"C88F4D8C-7D21-4AA5-A102-942D05F9E3AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:xl:*:*:*:*:*:*:*","matchCriteriaId":"0A99990E-44C7-4331-B580-5E9AB74FF6DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:serveriron:xl_g:*:*:*:*:*:*:*","matchCriteriaId":"B002AEB7-4680-4D15-AB64-8A368FF80F33"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8459.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261834","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4286","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8459.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0453","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oblix:netpoint:5.2:*:*:*:*:*:*:*","matchCriteriaId":"7F5A6320-D10E-46D0-A105-6ADEF9539B81"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8461.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262066","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4288","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8461.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0454","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D04F5B4-57CD-486E-BE24-A9092D21BBFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"794F010E-E06E-4156-8932-940680D97DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0EEBDFB2-5CB5-4E05-962D-4B0C4156D23A"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B343194-9599-4584-B32C-374C5FF6037F"}]}]}],"references":[{"url":"ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper4.0.4.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8458.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262213","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4295","source":"cve@mitre.org"},{"url":"ftp://ftp.qualcomm.com/eudora/servers/unix/popper/qpopper4.0.4.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8458.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0455","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:incredimail:incredimail:build_560:*:*:*:*:*:*:*","matchCriteriaId":"49E6A3FB-811E-496C-8A9D-FEA681F231A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:incredimail:incredimail:build_618:*:*:*:*:*:*:*","matchCriteriaId":"19E43520-9E15-4ABB-A206-1F33D55317BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:incredimail:incredimail:build_1400185:*:*:*:*:*:*:*","matchCriteriaId":"F7172FA5-92B9-44FF-A4B2-8B5AEF403454"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8460.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4297","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8460.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0456","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E129DE88-C286-41CC-B82F-C80718E19701"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101622857703677&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8487.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4306","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101622857703677&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8487.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0457","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as &lt;, &gt;, and &amp; in fields such as (1) name, (2) email, (3) AIM screen name, (4) website, (5) location, or (6) message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bg_guestbook:bg_guestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"05B12F6F-E677-4BE0-9F7C-89E199348D6B"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8474.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4308","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8474.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0458","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-sottises:news-tnk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"AD7A3B0A-0547-4BA9-947F-36E97A08CB85"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8477.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-sottises.net/software/news-tnk/CHANGES","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/14145","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8477.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-sottises.net/software/news-tnk/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/14145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0459","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-sottises:board-tnk:1.3:*:*:*:*:*:*:*","matchCriteriaId":"743EA786-23D3-4CFD-9E4E-5ACB69E24E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:linux-sottises:news-tnk:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3CA54B65-60DF-4307-B61E-0699A0B0E380"}]}]}],"references":[{"url":"http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8475.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262694","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4305","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://translate.google.com/translate?u=http%3A%2F%2Fwww.linux-sottises.net%2Findex.php%3Fnews_init%3D13%23newstag&langpair=fr%7Cen&hl=en&ie=UTF8&oe=UTF8&prev=%2Flanguage_tools","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8475.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0460","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bitvise:winsshd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"60882070-3742-448B-9724-A9BFAB004041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/262681","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8470.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4300","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/262681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8470.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0461","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causing a loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/262994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8488.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4322","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/262994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8488.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0462","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:big_sam:big_sam:1.1.08:*:*:*:*:*:*:*","matchCriteriaId":"AAF29120-FB78-4905-8196-4B62678BC21C"}]}]}],"references":[{"url":"http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8478.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8479.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5287","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5288","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262735","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4312","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gezzed.net/bigsam/bigsam.1_1_12.php.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8478.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8479.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0463","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arsc_really_simple_chat:arsc_really_simple_chat:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4BB291F2-D111-43D5-9B90-5EDFF7513794"},{"vulnerable":true,"criteria":"cpe:2.3:a:arsc_really_simple_chat:arsc_really_simple_chat:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"26F7803E-EB2F-4EDD-B210-5FC789DB4B9D"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8472.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262802","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4307","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8472.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0464","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor.asp, (2) folderactions.asp, or (3) editoractions.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"}]}]}],"references":[{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/dot-slash.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/dot-slash.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0465","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html","source":"cve@mitre.org"},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3811","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7824","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0466","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) servubrowse.asp, (3) browsedisk.asp, (4) browsewebalizerexe.asp, or (5) sqlbrowse.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html","source":"cve@mitre.org"},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3808","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7823","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/foldersecurity.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0467","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*","matchCriteriaId":"2C9FD55B-466F-4385-AF88-E341B7C5A32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*","matchCriteriaId":"65AE2735-44FB-4FCB-A520-7348ADE6F464"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*","matchCriteriaId":"AA66A07F-CDF5-40DB-B999-7AA7C5000AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*","matchCriteriaId":"C15B56B6-ADC6-4D37-A561-914F52B73AAC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-123","source":"cve@mitre.org"},{"url":"http://www.ecartis.org/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8284.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4176","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ecartis.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8284.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0468","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*","matchCriteriaId":"2C9FD55B-466F-4385-AF88-E341B7C5A32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-25:*:*:*:*:*:*:*","matchCriteriaId":"240D0A65-FC01-4B21-9821-A786F5677785"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*","matchCriteriaId":"65AE2735-44FB-4FCB-A520-7348ADE6F464"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*","matchCriteriaId":"AA66A07F-CDF5-40DB-B999-7AA7C5000AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*","matchCriteriaId":"C15B56B6-ADC6-4D37-A561-914F52B73AAC"}]}]}],"references":[{"url":"http://marc.info/?l=listar-support&m=101590272221720&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/269879","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/258763","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ecartis.org/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8445.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/261209","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4271","source":"cve@mitre.org"},{"url":"http://marc.info/?l=listar-support&m=101590272221720&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/269658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/269879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/258763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ecartis.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8445.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/261209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0469","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, \"lock-to-user\" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*","matchCriteriaId":"2C9FD55B-466F-4385-AF88-E341B7C5A32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-25:*:*:*:*:*:*:*","matchCriteriaId":"240D0A65-FC01-4B21-9821-A786F5677785"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.126a:*:*:*:*:*:*:*","matchCriteriaId":"65AE2735-44FB-4FCB-A520-7348ADE6F464"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.127a:*:*:*:*:*:*:*","matchCriteriaId":"AA66A07F-CDF5-40DB-B999-7AA7C5000AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:listar:listar:0.129a:*:*:*:*:*:*:*","matchCriteriaId":"C15B56B6-ADC6-4D37-A561-914F52B73AAC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8444.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4277","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8444.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/261209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0470","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnettoolpack:phpnettoolpack:0.1:*:*:*:*:*:*:*","matchCriteriaId":"8828A8D9-5151-4662-956C-35D66EFB715A"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Mar/0263.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8484.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2002/Mar/0263.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8484.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0471","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnettoolpack:phpnettoolpack:0.1:*:*:*:*:*:*:*","matchCriteriaId":"8828A8D9-5151-4662-956C-35D66EFB715A"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Mar/0263.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8482.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4303","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2002/Mar/0263.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8482.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0472","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:3.6:*:*:*:*:*:*:*","matchCriteriaId":"B4EDB077-8CBE-4292-9681-D1FE58771B32"}]}]}],"references":[{"url":"http://www.encode-sec.com/esp0202.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8582.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262906","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4316","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.encode-sec.com/esp0202.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8582.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0473","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/262600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://phpbb.sourceforge.net/phpBB2/viewtopic.php?t=9483","source":"cve@mitre.org"},{"url":"http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.1.zip","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8476.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4268","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4380","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/82/262600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://phpbb.sourceforge.net/phpBB2/viewtopic.php?t=9483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.1.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8476.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0474","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroforum:zeroforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4CD51346-8C0A-47CD-912D-431EF0B9FB2F"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8702.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4394","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8702.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0475","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E15A5879-39FE-4BFF-B391-52EAA58D1A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"581594BF-92CE-4B16-95DC-200E11C64591"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E3575646-AF8E-4D33-97DE-E6EA468D9973"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B4E7219-C05D-4269-990B-4B523564BF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A729BD82-D5BA-4BF9-812C-ADACEF42F68F"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7459.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6W00Q202UM.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7459.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6W00Q202UM.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0476","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented \"save\" FSCommand."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EF005FC1-50A0-4233-A500-1E677EACDBE7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8584.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/support/flash/ts/documents/fs_save.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4320","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8584.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/support/flash/ts/documents/fs_save.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0477","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the \"exec\" FSCommand."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EF005FC1-50A0-4233-A500-1E677EACDBE7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101071988413107&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8587.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/support/flash/ts/documents/standalone_update.htm","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/support/flash/ts/documents/swf_clear.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/262990","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4321","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101071988413107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8587.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/support/flash/ts/documents/standalone_update.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/support/flash/ts/documents/swf_clear.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/262990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0478","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foundrynet:edgeiron:4802f:*:*:*:*:*:*:*","matchCriteriaId":"C3D99A0B-D57A-4028-98F9-31A169F7E3E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101666425609914&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8592.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4330","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101666425609914&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8592.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0479","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gravity_storm_software:service_pack_manager_2000:6.0:*:*:*:*:*:*:*","matchCriteriaId":"70C198EE-40B1-4E91-9935-B0A44B01CA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity_storm_software:service_pack_manager_2000:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B8D55BBF-6370-4852-8A97-06CF8E789D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gravity_storm_software:service_pack_manager_2000:6.3:*:*:*:*:*:*:*","matchCriteriaId":"8522DD08-5DA0-497C-AE2C-A61016E0AC40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0284.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8607.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4347","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0284.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8607.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0480","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user \"skank\" on a machine \"starscream\" to become a key manager when the \"first time connection\" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_nokia:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0DFE9D25-058F-4A43-BC35-F381F4D3306F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101666833321138&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101675086010051&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101684141308876&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4331","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101666833321138&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101675086010051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101684141308876&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0481","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/263429","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8604.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/263429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8604.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0482","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newlog:netsupport_manager:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A01211AA-FADF-43E6-A0D5-31626A7D365C"},{"vulnerable":true,"criteria":"cpe:2.3:a:newlog:netsupport_manager:6.10:*:*:*:*:*:*:*","matchCriteriaId":"BE503B62-1EF4-4248-BB5C-F209645AD97A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0285.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8610.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4348","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8610.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0483","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"E3ED3BFC-C8CF-4537-832C-0D00400AC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.4:*:*:*:*:*:*:*","matchCriteriaId":"8720AE61-41C7-4EA8-8C01-81AC0BFACBCC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/263337","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8618.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4333","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/263337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8618.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0484","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=16128","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101683938806677&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/262999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/263259","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8591.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4325","source":"cve@mitre.org"},{"url":"http://bugs.php.net/bug.php?id=16128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101683938806677&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/262999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/263259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8591.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0485","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:*","matchCriteriaId":"7A58C09D-72A0-48E1-ABF0-49EBECA5D02B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101684260510079&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=vuln-dev&m=101681724810317&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=101684260510079&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=vuln-dev&m=101681724810317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2002-0486","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:7.0:*:*:*:*:*:*:*","matchCriteriaId":"CB53D82C-0BC1-4B24-A209-12C7FA302999"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/263485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4344","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8614","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/263485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0487","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript \"session timeout\" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:7.0:*:*:*:*:*:*:*","matchCriteriaId":"CB53D82C-0BC1-4B24-A209-12C7FA302999"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8612.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/263485","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4346","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8612.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/263485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0488","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux_directory_penguin:linux_directory_penguin_traceroute:1.0:*:*:*:*:*:*:*","matchCriteriaId":"05597456-67D2-49D7-9958-A59D4CA65947"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8600.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-directory.com/scripts/traceroute.pl","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/263285","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4332","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8600.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-directory.com/scripts/traceroute.pl","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/263285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0489","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux_directory_penguin:nslookup:1.0:*:*:*:*:*:*:*","matchCriteriaId":"34696E26-DFE0-4C97-9C0F-D2394C47FE84"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101684215209558&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8601.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4353","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101684215209558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8601.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0490","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain mail message headers via numerous parameters in write.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:instant_web_mail:instant_web_mail:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F61E0C8E-7C59-4D06-BBDF-254891F3F517"},{"vulnerable":true,"criteria":"cpe:2.3:a:instant_web_mail:instant_web_mail:0.56:*:*:*:*:*:*:*","matchCriteriaId":"1CEFD56D-959B-4BB6-8376-CE3062F1CCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:instant_web_mail:instant_web_mail:0.57:*:*:*:*:*:*:*","matchCriteriaId":"E7C10550-FD9A-4467-B904-33CF68B2419C"},{"vulnerable":true,"criteria":"cpe:2.3:a:instant_web_mail:instant_web_mail:0.58:*:*:*:*:*:*:*","matchCriteriaId":"5C550C08-5DC2-4386-B4F2-8B7B31887538"},{"vulnerable":true,"criteria":"cpe:2.3:a:instant_web_mail:instant_web_mail:0.59:*:*:*:*:*:*:*","matchCriteriaId":"64AE4E6A-8881-4949-93A2-03894FBD0679"}]}]}],"references":[{"url":"http://instantwebmail.sourceforge.net/#changeLog","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8650.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264041","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4361","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://instantwebmail.sourceforge.net/#changeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8650.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0491","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileges by setting the admin cookie to an arbitrary value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alguest:alguest:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2A88DBC9-9F49-4C29-9628-EBB52CDB7F1D"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8623.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/263902","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4355","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8623.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/263902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0492","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dcscripts:dcshop:1.002_beta:*:*:*:*:*:*:*","matchCriteriaId":"059C1720-9768-4224-8C66-2C6ECF5A708A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0302.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0302.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0493","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-254"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.2","matchCriteriaId":"857B5A3C-17BD-4339-9280-075445009EE6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101709002410365&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.apachelabs.org/tomcat-dev/200108.mbox/%3C20010810000819.6350.qmail%40icarus.apache.org%3E","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9863.php","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101709002410365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.apachelabs.org/tomcat-dev/200108.mbox/%3C20010810000819.6350.qmail%40icarus.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9863.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0494","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nWebSight Directory System, WebSight Directory System, 0.1.1","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websight_directory_system:websight_directory_system:0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FA3A9B-C539-474B-AFF5-8807B1838291"}]}]}],"references":[{"url":"http://sourceforge.net/forum/forum.php?forum_id=163389","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8624.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/263914","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4357","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=163389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8624.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/263914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0495","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript:cssearch_professional:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3","matchCriteriaId":"C278C82B-A954-4468-AA06-D139D03DBE5D"}]}]}],"references":[{"url":"http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.iss.net/security_center/static/8636.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264169","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4368","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.iss.net/security_center/static/8636.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0496","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:southwest:southwest:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7BE67726-B31E-400D-A315-7BAEC71E80C3"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8626.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264168","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4362","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8626.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0497","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mtr:mtr:0.41:*:*:*:*:*:*:*","matchCriteriaId":"495D7CF0-7D5E-4055-81EA-F60F642BBB69"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0048.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-124","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8367.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4217","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8367.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0498","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:etnus:totalview:5.0.0_4:*:*:*:*:*:*:*","matchCriteriaId":"163092F1-E894-4743-A3ED-3EC32C8F40E6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8635.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4365","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8635.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0499","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*","matchCriteriaId":"4817429F-B24F-47E3-BB3B-7EF9036D5F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html","source":"cve@mitre.org"},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8634.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264117","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4367","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-13/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8634.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/264117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0500","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0331.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8658.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4371","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0331.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8658.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0501","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are inserted into logging messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:m5pre1:*:*:*:*:*:*:*","matchCriteriaId":"530D1254-DC0A-4A7C-9520-D0F45B9AF278"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/264450","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=165094","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8653.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3516","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4378","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/264450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=165094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8653.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0502","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:nfuse:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A163741E-6E5A-4238-95F9-18591ACCF960"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/251737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/251923","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3926","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/251737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/251923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0503","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en boilerplate.asp para Citrix NFuse 1.5 permite a usuarios identificados remotamente leer ficheros mediante un .. (punto punto) en el parámetro NFuse_Template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:nfuse:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1F3B8088-43A3-421F-97B5-4BD4970F2B53"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0343.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8654.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4382","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0343.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8654.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0504","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos de sitios cruzados (cross-site scripting) en  Citrix NFuse 1.6 y anteriores no pone entre comillas a los resultados del método getLastError, lo que permite a atacantes remotos ejecutar comandos en otros clientes mediante el parámetro NFuse_Application para lanzar launch.jsp o launch.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:nfuse:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"1B508D1D-267D-47BC-9D0B-C0E4F0030171"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:nfuse:1.51:*:*:*:*:*:*:*","matchCriteriaId":"F4A451DF-C634-4C51-A0ED-26FA6A485A86"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0334.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8659.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0334.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8659.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-0505","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords."},{"lang":"es","value":"Fuga de memoria en la autenticación Call Telephony Integration (CTI) Framework en Cisco CallManager 3.0 y 3.1 anteriores a 3.1(3) permite a atacantes remotos causar una denegación de servicio (caída y recarga) mediante una serie de fallos de autenticación, por ejemplo mediante contraseñas incorrectas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/callmanager-ctifw-leak-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8655.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4370","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/callmanager-ctifw-leak-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8655.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0506","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt."},{"lang":"es","value":"Desbordamiento de buffer en newt.c de la librería de ventanas newt (libnewt) 0.50.33 y anteriores que podría permitir a atacantes causar una denegación de servicio o ejecutar código arbitrario en programas que usen libnewt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"C1DE93B9-1ADD-4B19-BA32-7D9F9CCD293F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6EAAC51F-9DC5-4026-8147-1B74975D6183"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/264699","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8700.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4393","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/264699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8700.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0507","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA."},{"lang":"es","value":"Una interacción entre Microsoft Outlook Web Access (OWA) con RSA SecurID permite a usuarios locales evitar la autenticación SecurID para un usuario anterior mediante varios envios de una petición de autenticación OWA con la contraseña adecuada del usuario anterior, que es acaba siendo aceptada por OWA."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"EC01670D-4550-4034-86A5-7879B6334241"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*","matchCriteriaId":"B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*","matchCriteriaId":"E3983529-F4E3-4883-97AF-5BFC87AC3E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"34300FD4-EC3B-4206-B6C0-1345F17EC5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"47132D0D-7691-40A3-A4BF-37D2ACE580C3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rsa:securid:5.0:*:*:*:*:*:*:*","matchCriteriaId":"A00A9D51-90B1-4D58-839F-AD93AD015B80"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/264705","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8681.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4390","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/264705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8681.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0508","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog."},{"lang":"es","value":"wwwisis 3.45 y anteriores permite a atacantes remotos ejecutar comandos arbitrarios o leer ficheros mediante los parámetros \r\nprolog\r\nepilog"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wwwisis:wwwisis:3.3:*:*:*:*:*:*:*","matchCriteriaId":"57DDC4B5-53D9-424B-B55C-885A8D44EB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wwwisis:wwwisis:3.45:*:*:*:*:*:*:*","matchCriteriaId":"38BF341D-EB78-4270-A17C-F169C2C5BE28"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0077.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/264682","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/265456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.bireme.br/security.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8660.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4383","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4384","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/264682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/265456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.bireme.br/security.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8660.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0509","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521."},{"lang":"es","value":"Transparent Network Substrate (TNS) Listener en Oracle 9i 9.0.1.1 permite a atacantes remotos causar una denegación de servicio (saturáción de CPU) mediante un paquete TCP malformado al puerto 1521."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/264697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8657.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4391","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/264697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8657.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0510","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux."},{"lang":"es","value":"La implementación de UDP en los kernels 2.4.x de Linux mantiene el campo de identificación de IP a 0 en todos los paquetes no fragmentados, lo que permite a atacantes remotos determinar que el sistema está ejecutando Linux."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat do not consider this to be a security issue and there are many ways that you can identify or fingerprint a Linux machine.  Users that wish to block fingerprinting can use various techniques to disguise their operating system, for example see\nhttp://www.infosecwriters.com/text_resources/pdf/nmap.pdf\n","lastModified":"2008-03-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8588.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4314","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8588.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/262840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0511","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host names."},{"lang":"es","value":"La configuración por defecto del Demonio de Caché del Servico de Nombres (ncsd) en Caldera OpenLinux 3.1 y 3.1.1 usa registros PTR en caché en vez de consultar al servidor DNS autoritativo para el registo A, lo que podría hacer facilitar a atacantes remotos evitar restricciones de acceso basadas en nombres de máquinas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nscd:nscd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"19CD45A1-C6F5-4992-AD88-6B4F6609189B"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-013.0.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8745.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4399","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-013.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8745.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0512","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries."},{"lang":"es","value":"starkde en KDE para Caldera OpenLinux 2.3 a 3.1.1 establece la variable de entorno LD_LIBRARY_PATH incluyendo el directorio actual de trabajo (.) lo que podría permitir a usuarios locales ganar privilegios de otros usuarios locales que ejecuten starkde mediante librerías que sean caballos de troya."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59A82AD5-A42D-49FF-A9D4-A57C8433A5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C31B1A4A-96AD-4322-8AF3-733D66DBB50E"}]}]}],"references":[{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8737.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4400","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.calderasystems.com/support/security/advisories/CSSA-2002-005.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8737.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0513","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator."},{"lang":"es","value":"El guión (script) de administración PHP en popper_mod 1.2.1 y anteriores se basa en autenticación de Apache con .htaccess, lo que permite a atacantes remotos ganar privilegios si el guión no es configurado adecuadamente por el administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symatec:popper_mod:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8516A639-CBD1-4AAF-868B-5377A9BE9FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symatec:popper_mod:1.2:*:*:*:*:*:*:*","matchCriteriaId":"188C56B1-4838-4D90-A307-32779C5FC220"},{"vulnerable":true,"criteria":"cpe:2.3:a:symatec:popper_mod:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"105621FF-74A7-428E-9C56-95DF99B3282F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/265438","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8746.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4412","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.symatec-computer.com/forums/viewtopic.php?t=14","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://online.securityfocus.com/archive/1/265438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8746.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.symatec-computer.com/forums/viewtopic.php?t=14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-0514","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL."},{"lang":"es","value":"PF en OpenBSD 3.0 con la regla return-rst establece el TTL (Time to Live) a 128 en el paquete RST, lo que permite a atacantes remotos determinar si un puerto está siendo filtrado porque el TTL es diferente del de por defecto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8738.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/265188","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4401","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8738.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/265188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0515","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs."},{"lang":"es","value":"IPFilter 3.4.25 y anteriores establece un TTL distinto cuando un puerto está siendo filtrado a cuando no lo está, lo que permite a atacantes remotos identificar puertos filtrados comparando los TTL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phildev:ipfilter:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.25","matchCriteriaId":"799CA85E-75CF-4D30-8746-C42293404170"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8738.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/265188","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4403","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8738.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/265188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0516","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie."},{"lang":"es","value":"SquirreMail 1.2.5 y anteriores permite a usuarios autenticados ejecutar código arbitrario modificando la variable THEME en una cookie"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0350.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0386.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8671.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4385","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0386.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8671.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0517","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm or (2) xterm."},{"lang":"es","value":"Desbordamiento de búfer en la librería X11 (libX11) en Caldera Open UNIX 8.0.0, UnixWare 7.1.1 y posiblemente en otros sistemas operativos, permite a usuarios locales ganar privilegios de root mediante un argumento -xrm largo en programas como (1)dtterm o (2) xterm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.15/CSSA-2002-SCO.15.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0099.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7282.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8828.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/169059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/249106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.15/CSSA-2002-SCO.15.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0099.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7282.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8828.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/169059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/249106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0518","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or (2) by killing and restarting a process that listens on the same socket, which does not properly clear the old inpcb pointer on restart."},{"lang":"es","value":"Los mecanismos SYN cache (syncache) y SYN cookie (syncookie) en FreeBSD 4.5 y anteriores, permite a atacantes remotos provocar la Denegación de Servicios (por caida) por algunos de los siguiente métodos:\r\n\r\n mediante un paquete SYN aceptado utilizando syncookies, que provoca que las opciones TCP del conector (socket) referencien a un puntero nulo.\r\n eliminando y reiniciando un proceso que espera en el mismo conector (socket) que no eliminó adecuadamente el contenido anterior del puntero inpcb en el reinicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:20.syncache.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8873.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8875.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6046","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4524","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:20.syncache.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8873.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8875.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0520","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en functions-inc.asp de ASP-Nuke RC1 permite a atacantes remotos la ejecución de rutinas bajo la identidad de otro usuario de ASP-Nuke insertándolas en una etiqueta IMG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*","matchCriteriaId":"938ABD92-4141-4270-A48B-19B512C84D42"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/266705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8829.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4475","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/266705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8829.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4475","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0521","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL in profile.asp."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en ASP-Nuke RC2 y anteriores, permite a atacantes remotos la ejecución de código la obtención de privilegios de otros usuarios de ASP-Nuke mediante una rutina e:\r\n\r\nel parámetro name en downloads.asp\r\nel parámetro message en Post.asp\r\n una dirección URL en profile.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*","matchCriteriaId":"938ABD92-4141-4270-A48B-19B512C84D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*","matchCriteriaId":"2B143E89-D58C-42DC-96B0-F7292A1ECBDE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/266705","source":"cve@mitre.org"},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8830.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8831.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4477","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4481","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/266705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8830.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8831.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0522","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the \"pseudo\" cookie."},{"lang":"es","value":"ASP-Nuke RC2 y anteriores, permite a atacantes remotos eludir la autenticación y obtener privilegios mediante la modificación de la cookie: 'pseudo'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*","matchCriteriaId":"938ABD92-4141-4270-A48B-19B512C84D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*","matchCriteriaId":"2B143E89-D58C-42DC-96B0-F7292A1ECBDE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/266705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8832.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4484","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/266705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8832.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0523","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid \"pseudo\" cookie."},{"lang":"es","value":"ASP-Nuke RC2 y anteriores, permiten a atacantes remotos listar todos los usuarios conectados mediante el envío de una cookie: 'pseudo' no válida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*","matchCriteriaId":"938ABD92-4141-4270-A48B-19B512C84D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*","matchCriteriaId":"2B143E89-D58C-42DC-96B0-F7292A1ECBDE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/266705","source":"cve@mitre.org"},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8833.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/266705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8833.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0524","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message."},{"lang":"es","value":"ASP-Nuke RC2 y anteriores permite a atacantes remotos conocer la ruta absoluta del servidor mediante:\r\n\r\nuna llamada a database-inc.asp con cookies incorrectas\r\nuna llamada a Post.asp con ciertos argumentos, la cual filtra la ruta en un mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc1:*:*:*:*:*:*:*","matchCriteriaId":"938ABD92-4141-4270-A48B-19B512C84D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:rc2:*:*:*:*:*:*:*","matchCriteriaId":"2B143E89-D58C-42DC-96B0-F7292A1ECBDE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/266705","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8833.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/82/266705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.asp-nuke.com/news.asp?date=20020412&cat=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/ASPNuke.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8833.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0525","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A2480B45-A626-49F5-A48B-BA6DFAA4411B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.1:*:*:*:*:*:*:*","matchCriteriaId":"21969A37-9F10-4D70-AC73-F3DB4D169AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2:*:*:*:*:*:*:*","matchCriteriaId":"94FD2948-EF52-464B-A605-DA3806037762"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1CC41E6D-B892-4888-8AEE-12287935F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7DED2B74-71B6-467C-8B07-F6F728AD7BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"862E58CF-7194-421D-9E7D-60DB8AA1F9CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8834.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4501","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8834.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0526","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls."},{"lang":"es","value":"Vulnerabilidad en inews o rnews en INN 2.2.3 y anteriores, relacionada con llamadas poco seguras a open()."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inn:inn:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.3","matchCriteriaId":"A1F41D37-251E-45A1-BFE6-956D946B8B4C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42803","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0527","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO forwards a packet with bad IP options."},{"lang":"es","value":"Watchguard SOHO firewall anteriores 5.0.35 permite a atacantes remotos provocar la Denegación de Servicios (caida y reinicio), cuando SOHO envía un paquete con las opciones IP erróneas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"36070C85-EBD9-4A79-B31F-F2A7F5DE118E"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"1BA0FFC0-E58D-4A60-9389-844D83373C78"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.31:*:*:*:*:*:*:*","matchCriteriaId":"25A53541-CF4D-452A-B01D-44E33770B0B2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0006.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/266380","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8774.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4447","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/266380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8774.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0528","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.35:*:*:*:*:*:*:*","matchCriteriaId":"50480EED-CCD7-4494-BF47-C64DA5036857"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0009.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/266948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8814.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4491","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/266948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8814.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0529","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Photosmart printer driver for Mac OS X installs the hp_imaging_connectivity program and the hp_imaging_connectivity.app directory with world-writable permissions, which allows local users to gain privileges of other Photosmart users by replacing hp_imaging_connectivity with a Trojan horse."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:photosmart_print_driver:1.2.1:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"E635F85D-F28A-467C-BD05-9FC2EAE3B3E4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0169.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8856.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4518","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0169.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8856.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0530","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:web_search:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9FEBE635-2B9A-49F1-9568-C2CB9AA76EC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0010.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2002/Apr/0126.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/bugtraq/2002/Apr/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0531","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in emumail.cgi in EMU Webmail 4.5.x and 5.1.0 allows remote attackers to read arbitrary files or list arbitrary directories via a .. (dot dot) in the type parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4202D61D-D727-40D7-BAC4-8EF3EA824CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_red_hat_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6E730ED-DB66-4E3C-816D-BFDB9E26C98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_red_hat_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"97FDBEF6-425A-44DC-B668-B306720AB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_unix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"050D6915-EF9C-4C5C-BFA1-C8A445058D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_unix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"91BBEE72-62E8-4CC3-B2DD-727407151BC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0066.html","source":"cve@mitre.org"},{"url":"http://www.emumail.com/downloads/download_unix.html/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8766.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4435","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.emumail.com/downloads/download_unix.html/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8766.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0532","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file that contains a pageroot specifier that contains shell metacharacters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4202D61D-D727-40D7-BAC4-8EF3EA824CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_red_hat_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6E730ED-DB66-4E3C-816D-BFDB9E26C98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_red_hat_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"97FDBEF6-425A-44DC-B668-B306720AB666"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_unix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"050D6915-EF9C-4C5C-BFA1-C8A445058D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emumail_unix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"91BBEE72-62E8-4CC3-B2DD-727407151BC9"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/266930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8836.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4488","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/266930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8836.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0533","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \\0 characters within [code] tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E15A5879-39FE-4BFF-B391-52EAA58D1A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"581594BF-92CE-4B16-95DC-200E11C64591"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E3575646-AF8E-4D33-97DE-E6EA468D9973"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B4E7219-C05D-4269-990B-4B523564BF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A729BD82-D5BA-4BF9-812C-ADACEF42F68F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0005.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101794993119738&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/265798","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8764.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4434","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=101794993119738&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/265798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8764.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0534","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostBoard 2.0.1 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \\0 characters within [code] tags."},{"lang":"es","value":"PostBoard 2.0.1 y anteriores con BBcode permite a atacantes remotos causar una denegación de servicio (saturación de CPU) y corromper la base de datos mediante caractéres nulos en etiquetas [code]."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postboard:postboard:2.0:*:*:*:*:*:*:*","matchCriteriaId":"39CE2C7F-06B4-41F7-823E-1EA4063F5683"},{"vulnerable":true,"criteria":"cpe:2.3:a:postboard:postboard:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9240838D-1251-4F67-960A-FF9888C55861"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267936","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8883.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4562","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8883.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0535","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postboard:postboard:2.0:*:*:*:*:*:*:*","matchCriteriaId":"39CE2C7F-06B4-41F7-823E-1EA4063F5683"},{"vulnerable":true,"criteria":"cpe:2.3:a:postboard:postboard:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9240838D-1251-4F67-960A-FF9888C55861"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DD378628-2AA0-4244-A4D7-8591BEB7A926"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.70:*:*:*:*:*:*:*","matchCriteriaId":"ED90D204-84B5-4EA4-B21D-A6CE37E45CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.71:*:*:*:*:*:*:*","matchCriteriaId":"D14AA995-3B50-4B91-9634-0D63B0BD35EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.703:*:*:*:*:*:*:*","matchCriteriaId":"BFC564FD-9700-4979-93C0-BA93E57FEF03"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267936","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8881.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4559","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4561","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8884","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8881.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0536","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3AE1DA09-E7A2-41EB-92DB-A4DA42EA0477"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0036.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0143.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8755.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5153","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4424","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8755.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0537","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, which allows remote attackers who can access the admin.html file to gain administrative privileges to SWS."},{"lang":"es","value":"El fichero admin.html en StepWeb Search Engine (SWS) 2.5 almacena contraseñas en enlaces a manager.pl, lo cual permite a atacantes remotos con acceso al fichero admin.html la obtención de privilegios de administrador de SWS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stepweb:sws:2.5:*:*:*:*:*:*:*","matchCriteriaId":"27B6F214-9F79-4BD4-8DE7-49F517ABAE39"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8849.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4503","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8849.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0538","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's \"FTP PORT\" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the \"FTP bounce\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:6.5.2:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"0306D0E7-691F-46EB-9133-F585000476A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"8656778B-9299-436B-AF8A-64C042273751"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"8D5B3D26-F6FB-4D38-99B5-4AAF8C62F82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5:*:windows_nt:*:*:*:*:*","matchCriteriaId":"D585A9BA-7F89-4382-95BB-823B83E5F222"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5.3:*:solaris:*:*:*:*:*","matchCriteriaId":"4BBE1CA5-CDB0-4C9C-A6AB-0727C56E419F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1.x:*:*:*:*:*:*:*","matchCriteriaId":"DEA864B8-61DF-465F-A021-C8D6C9CB4827"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0CAE17C6-FD3E-4846-A706-78246B37BFA1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8847.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.04.17.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8847.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0539","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie."},{"lang":"es","value":"Demarc PureSecure 1.05 permite  a atacantes remotos la obtención de privilegios de administrador mediante un ataque de inyección de SQL en una sesión almacenada en la cookie: s_key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:demarc_security:puresecure:1.0.5_for_unix:*:*:*:*:*:*:*","matchCriteriaId":"DA0689AF-AE66-412F-B0D0-891447239526"},{"vulnerable":true,"criteria":"cpe:2.3:a:demarc_security:puresecure:1.0.5_for_windows:*:*:*:*:*:*:*","matchCriteriaId":"65B27315-03F4-4BE9-A432-EFF128817418"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0168.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267941","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8854.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5239","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4520","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8854.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0540","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel CVX 1800 is installed with a default \"public\" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cvx_1800_multi-service_access_switch:3.6.3:patch24:*:*:*:*:*:*","matchCriteriaId":"016659DB-2A62-4046-89F5-E69B0E2A3D51"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cvx_1800_multi-service_access_switch:3.6.3:patch25:*:*:*:*:*:*","matchCriteriaId":"040364B5-1143-4A9E-88AD-CEADB0405957"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:cvx_1800_multi-service_access_switch:3.6.3:patch5:*:*:*:*:*:*","matchCriteriaId":"ED6905CD-4CC4-449B-8EC7-A5E0F46D421D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0272.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267627","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8848.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/403315","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4507","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0272.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8848.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/403315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0541","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581."},{"lang":"es","value":"Desbordamiento de búfer en Tivoli Storage Manager TSM :\r\n\r\nServer o Storage Agents 3.1 a la  5.1\r\nTSM Client Acceptor Service 4.2 y 5.1\r\n\r\npermite a atacantes remotos realizar un ataque de Denegación de Servicio (caida) y posiblemente la ejecución de código arbitrario mediante una petición HTTP GET larga a los puertos 1580 o 1581."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"74E4A983-9053-405D-BA3D-BAE8B47A1EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_storage_manager:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AB1B6BE3-9554-41DF-A994-82CEAF88BA90"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8817.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8825.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4500","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tivoli.com/support/storage_mgr/flash_httpport.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/267143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8817.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8825.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tivoli.com/support/storage_mgr/flash_httpport.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0542","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101855467811695&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267089","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8818.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata30.html#mail","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4495","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101855467811695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/267089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8818.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata30.html#mail","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0543","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDFD934-AA49-4FA8-813A-9040AAA49515"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.aprelium.com/forum/viewtopic.php?t=24","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8805.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4466","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.aprelium.com/forum/viewtopic.php?t=24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8805.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0544","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges."},{"lang":"es","value":"Versiones anteriores a la 1.0.3 de Aprelium Abyss Web Server (abyssws) almacenan la contraseña de la consola de administración en texto plano en el fichero abyss.conf, lo cual permite a usuarios locales con acceso a dicho fichero, la obtención de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDFD934-AA49-4FA8-813A-9040AAA49515"}]}]}],"references":[{"url":"http://www.aprelium.com/news/abws103.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4467","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.aprelium.com/news/abws103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0545","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts with invalid usernames and passwords."},{"lang":"es","value":"Cisco Aironet anteriores a la 11.21 con Telnet habilitado, permite a atacantes remotos una Denegación de Servico (reinicio) mediante una serie de intentos de acceso con nombres de usuario y contraseñas no válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap340:*:*:*:*:*:*:*:*","versionEndIncluding":"11.21","matchCriteriaId":"AD16F9CC-C57E-47D2-9783-79F21C229C0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap350:*:*:*:*:*:*:*:*","versionEndIncluding":"11.21","matchCriteriaId":"53F38982-CCC7-4A71-983F-097455488B9D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:aironet_ap350:11.21:*:*:*:*:*:*:*","matchCriteriaId":"97943532-2C6A-4867-BD40-1B848BD2009A"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/Aironet-Telnet.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8788.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4461","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/Aironet-Telnet.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8788.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0546","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en la zona de navegación de Winamp 2.78 y 2.79 permite a atacantes remotos la ejecución de código mediante etiquetas ID3v1 o ID3v2 en un fichero MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0026.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0049.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8753.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4414","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8753.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0547","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag."},{"lang":"es","value":"Desbordamiento de búfer en la zona de navegación de Winamp 2.79 y versiones anteriores, permite a atacantes remotos causar una Denegación de Servicios (caída) y posiblemente la ejecución arbitraria de código mediante una cadena larga de caracteres en el campo title de una etiqueta ID3v2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.79","matchCriteriaId":"81BD191B-9302-43CE-A948-81CEE87D5520"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0373.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8946.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4609","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.winamp.com/download/newfeatures.jhtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0373.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8946.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.winamp.com/download/newfeatures.jhtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0548","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anthill:anthill:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.6.1","matchCriteriaId":"680E7F31-4714-4A29-A7E8-D300297E9B1D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8771.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4443","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8771.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0549","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Anthill permite a atacantes remotos la ejecución de código bajo la identidad de otro usuario de Anthill."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anthill:anthill:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.6.1","matchCriteriaId":"680E7F31-4714-4A29-A7E8-D300297E9B1D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8770.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8770.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0550","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gcf:dynamic_guestbook:3.0:*:*:*:*:*:*:*","matchCriteriaId":"861666CB-5216-44E1-B717-8D6CCF93AE5A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8762.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4423","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8762.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0551","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gcf:dynamic_guestbook:3.0:*:*:*:*:*:*:*","matchCriteriaId":"861666CB-5216-44E1-B717-8D6CCF93AE5A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8763.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4422","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8763.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0552","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly other attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:melange:melange_chat_system:2.0.2_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"DAC3A14C-8396-4591-8DB9-9C15BDE7524D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267932","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8842.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8845.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8846.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4509","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8842.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8845.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8846.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0553","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E570DC91-4BAC-47F6-ADC9-A2E88B542FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84D6D226-C939-4B25-9848-3564351D86D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4DD0ED9-9F0B-4835-868C-395BC1204665"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9F6C1ADC-7FAB-4F7D-B9C9-A7D7C338FD5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:2.4:*:*:*:*:*:*:*","matchCriteriaId":"7D54AFB1-B800-4BF8-9158-398C779B6F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:turnkey_solutions:sunshop_shopping_cart:2.5:*:*:*:*:*:*:*","matchCriteriaId":"92357E69-4F42-42BC-B9CB-1D10734EAB2F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0154.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8840.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4506","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8840.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0554","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.10:*:*:*:*:*:*:*","matchCriteriaId":"C54E0F87-144A-471B-B947-D6C50E4B021C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.11:*:*:*:*:*:*:*","matchCriteriaId":"280BF016-9B3D-471B-ADA6-A6112A0FD018"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.12:*:*:*:*:*:*:*","matchCriteriaId":"BA4F7156-5B59-412F-ACFC-8594E43B3CDF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8826.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4496","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8826.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0555","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.10:*:*:*:*:*:*:*","matchCriteriaId":"C54E0F87-144A-471B-B947-D6C50E4B021C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.11:*:*:*:*:*:*:*","matchCriteriaId":"280BF016-9B3D-471B-ADA6-A6112A0FD018"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.12:*:*:*:*:*:*:*","matchCriteriaId":"BA4F7156-5B59-412F-ACFC-8594E43B3CDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_web_datablade:4.13:*:*:*:*:*:*:*","matchCriteriaId":"DFA57559-7E04-43CB-BA5E-8E963BCF7F68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8827.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4498","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8827.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0556","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL."},{"lang":"es","value":"Vulnerabilidad de atraviesamiento de directorios en Quik-Serv HTTP server 1.1B permite a atacantes remotos la lectura de ficheros arbitrarios mediante un .. (punto punto) en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deep_forest_software:quik-serv_webserver:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"D3DC7971-C48B-458F-81BA-5122FC6D1F3E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0051.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8754.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4425","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8754.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0557","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell, or (3) atrun to change to a different user's directory, possibly due to memory allocation failures or an incorrect call to auth_approval()."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8625.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata30.html#approval","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4338","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8625.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata30.html#approval","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0558","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.85:*:*:*:*:*:*:*","matchCriteriaId":"BE989197-8D9D-4E3D-8B54-0D41E37E44DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.93:*:*:*:*:*:*:*","matchCriteriaId":"8F5C57E6-2397-44B0-82EC-E6E2CC561E35"},{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.95:*:*:*:*:*:*:*","matchCriteriaId":"1E140CB7-0806-466C-9902-76F2FA6D70EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.96:*:*:*:*:*:*:*","matchCriteriaId":"721905D8-9662-4632-B6CC-EC323634DB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.97:*:*:*:*:*:*:*","matchCriteriaId":"B1BD9E10-4807-4CF9-BA3E-529F8666C9D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6165.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/6165.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/2489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0559","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/254426","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/313280","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/659043","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/750299","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/878603","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/923395","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4032","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8095","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8096","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8097","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8098","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/313280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/659043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/750299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/878603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/923395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0560","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/307835","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4294","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/307835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0561","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"11D27BB6-DFA0-4CB7-B546-0E00C096BF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/611776","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4292","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/611776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0562","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301440005580&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/698467","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4034","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301440005580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/698467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0563","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"11D27BB6-DFA0-4CB7-B546-0E00C096BF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009167","source":"cve@mitre.org"},{"url":"http://www.appsecinc.com/Policy/PolicyCheck7024.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/168795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13152","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/705","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4293","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8455","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.appsecinc.com/Policy/PolicyCheck7024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/168795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0564","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/193523","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/193523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0565","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301440005580&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/547459","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4034","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8100","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101301440005580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/547459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0566","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"11D27BB6-DFA0-4CB7-B546-0E00C096BF37"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/805915","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8099","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/805915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0567","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3104552F-31AD-4CBE-8F6E-5E410D2F9EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F3651861-9C23-4AB1-B795-E44C912B8AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7F232E30-578B-440E-98FE-A52FF171F11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0E7675AD-40A0-4BC5-9823-3AC330EE95CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"92829B90-6F6A-4FAF-85A9-731D4F3212C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6EC6CED6-002B-4C69-A700-70FE667BAB9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9C84852A-1153-46A7-9B82-D05F4A6043D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB401046-E029-4CD1-A937-E9E70A081BF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"453891B9-C354-461F-97FA-330165B92255"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED700CB5-6896-41D1-ABEF-98FC159940F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EB365BBC-9611-4F6A-99B3-09FEA903E618"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EC58370-C10D-4559-81C8-C67B64EE2502"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"18BFD76C-1BB0-4227-AD6E-D6CBC426900B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"390EFE5A-C0D0-4BC0-9B27-3D8D3039A651"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6C0CBCA0-A0D1-4B0D-ABA5-2DF86294259C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"49EB78D7-01BA-4903-A7F7-F12608112E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34DC1C91-85DC-440C-8928-990496D74F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"62770611-5C6E-487F-A21D-5BA839466CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F7210473-5E57-47A3-ADDE-9E8C4B3121B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CA2CFD69-2241-4065-8BE2-F654B640EED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"73D7AA72-29C3-45FB-87EF-D9AD087774FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"52AB4EEE-706E-4CB0-B805-63F514A6073E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301332402079&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/180147","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4033","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8089","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101301332402079&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/180147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0568","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/476619","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4290","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/476619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0569","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8453.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/977251","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4298","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101301813117562&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8453.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/977251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0570","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7769","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0571","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0175.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/sql_joins_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-071.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8855.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5236","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4523","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0175.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/sql_joins_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-071.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8855.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0572","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268970","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/269102","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-072.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8920.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/809347","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/6095","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4568","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/268970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/269102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-072.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8920.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/809347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/6095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0573","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0049.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270268","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-10.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8971.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/638099","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/778","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4639","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A41","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A79","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/270268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/8971.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/638099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A41","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A79","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0574","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5","matchCriteriaId":"2BCDB223-15E8-4E63-BB82-446AFBDE52F9"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8893.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/5232","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4539","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8893.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/5232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0575","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F2EDC0-3189-4523-882B-9188C852F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2991C07-5486-4590-A74E-46A379DD3339"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EB9BE06-0A36-4853-ADF4-9C1A1854278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC57F38-6545-497B-B6DA-FCAF51755988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*","matchCriteriaId":"EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*","matchCriteriaId":"0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*","matchCriteriaId":"4B235167-9554-4431-88C5-9472DD36FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E05D8E86-EC01-4589-B372-4DEB7845C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0211BCE3-0DED-40BA-8A21-1A97B91F71C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5AD7BB30-AC79-4153-852C-1053DCF4DE53"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-022.2.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102167972421837&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101924296115863&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268718","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269701","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8896.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/781","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4560","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-022.2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102167972421837&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=101924296115863&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/268718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/269701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8896.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0576","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C334CA02-D4EC-40D0-B75F-AFBC0F3903E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"292DA1C8-5B98-4552-B51B-B0C3F230321F"},{"vulnerable":true,"criteria":"cpe:2.3:a:allaire:coldfusion_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"35039D6D-B761-4079-BF53-FF0770D76909"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0028.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268263","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8866.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22906","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3337","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4542","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/268263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8866.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0577","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB008E3-9A00-4D28-8826-A9FCC9F65314"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0023.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/656","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8939.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/977779","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4582","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5518","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8939.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/977779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0578","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aci:4d_webserver:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"FDA76F49-F68C-42E5-B738-D247FA834243"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0579","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8900.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4552","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8900.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0580","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8902.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4553","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8902.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0581","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8903.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4555","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8903.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0582","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8905.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8905.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0583","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8905.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4554","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8905.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0584","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:workforceroi:xpede:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA6DCABA-0203-4F65-8D89-C486F60E72DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8907.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4556","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8907.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0585","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0034.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9020.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4680","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5490","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9020.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0586","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E02E404B-8361-4531-A732-DFDA0762E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4F8E77A-603D-42F3-93F1-69851F791C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"817E4138-D68E-47A8-AD73-3BC27201999F"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"699C682E-674A-47EE-AE03-9AB41351D14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"DD496C02-BA3B-4BEB-82C4-3F8D4A524920"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA118AF0-1883-45BB-B9E6-01D04E5B67E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"A64990D8-CEED-400D-A2BB-478C8E8CD868"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E143C7F6-3AAE-4E55-804B-CEF0EE809960"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C219CB1A-0283-4B5B-B73F-576A0F07499A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8860.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4535","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8860.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0587","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E02E404B-8361-4531-A732-DFDA0762E7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4F8E77A-603D-42F3-93F1-69851F791C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"817E4138-D68E-47A8-AD73-3BC27201999F"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"699C682E-674A-47EE-AE03-9AB41351D14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"DD496C02-BA3B-4BEB-82C4-3F8D4A524920"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FA118AF0-1883-45BB-B9E6-01D04E5B67E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"A64990D8-CEED-400D-A2BB-478C8E8CD868"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E143C7F6-3AAE-4E55-804B-CEF0EE809960"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:aol_server:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C219CB1A-0283-4B5B-B73F-576A0F07499A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/aolserver/aolserver/nspd/log.c.diff?r1=1.4&r2=1.4.6.1","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/aolserver/aolserver/nspd/log.c.diff?r1=1.4&r2=1.4.6.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0588","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5C507F1D-AABE-4CD2-872A-9E69BD95DCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"1E9D28F7-F1C7-41F5-AF9D-2F7E8C208FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"B1576BF6-DD2D-42D2-AF94-7038F4FA509A"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.5:*:*:*:*:*:*:*","matchCriteriaId":"6C35B36B-F06C-4936-B589-59919938DAD4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/268231","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://orbit-net.net:8001/php/pvote/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8877.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4540","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/268231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://orbit-net.net:8001/php/pvote/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8877.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0589","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5C507F1D-AABE-4CD2-872A-9E69BD95DCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"1E9D28F7-F1C7-41F5-AF9D-2F7E8C208FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"B1576BF6-DD2D-42D2-AF94-7038F4FA509A"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_korbett:pvote:1.5:*:*:*:*:*:*:*","matchCriteriaId":"6C35B36B-F06C-4936-B589-59919938DAD4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/268231","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://orbit-net.net:8001/php/pvote/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8878.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4541","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/268231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://orbit-net.net:8001/php/pvote/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8878.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0590","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the (1) title or (2) body of posts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icredibb:icredibb:1.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"9F584B27-0887-4D88-8D90-885BF1189F0D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0263.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8879.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4548","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0263.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8879.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0591","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E00F0805-8C73-43B1-87AC-744434046E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3098DC2A-6A68-4160-9DAC-8F31A49BA45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D7577EED-D28B-430A-B554-CE40D9154893"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E81E472E-45B5-465B-B2D7-40F906AC31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8_beta:*:*:*:*:*:*:*","matchCriteriaId":"1029CF68-C425-4FFD-9D47-2EDB724CF6C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8870.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4526","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8870.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0592","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.0.912:*:*:*:*:*:*:*","matchCriteriaId":"60A5F43B-BF1D-4186-A72B-1DD5367A494B"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.0.996:*:*:*:*:*:*:*","matchCriteriaId":"F4D7D3BC-DE4A-4D56-A239-90A5D23BDA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.0_n:*:*:*:*:*:*:*","matchCriteriaId":"ED10DFD8-2532-466D-8EBB-F05081F2935D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.1.1236:*:*:*:*:*:*:*","matchCriteriaId":"CA2FD74E-8AB0-4A19-AE4E-0823F1AC63DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.5.1366:*:*:*:*:*:*:*","matchCriteriaId":"0D371BDC-9E31-4EB1-88E9-82C2976086E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:2.5.1598:*:*:*:*:*:*:*","matchCriteriaId":"64B46D19-9103-40C5-A6A4-D5BE8DF8276E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.0.1415:*:*:*:*:*:*:*","matchCriteriaId":"02FC8258-541C-47D9-81B7-F211451B1C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.0.1470:*:*:*:*:*:*:*","matchCriteriaId":"D47319C5-1E96-4AEB-ABA9-638DFF22BD56"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.0_n:*:*:*:*:*:*:*","matchCriteriaId":"483C0045-4C10-4120-AB89-C36467993E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1635:*:*:*:*:*:*:*","matchCriteriaId":"7577D890-E06A-477C-80BE-48075FB16437"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1670:*:*:*:*:*:*:*","matchCriteriaId":"34B6D42F-9FD9-4E0D-BB59-8E65E817889C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1808:*:*:*:*:*:*:*","matchCriteriaId":"9C2B7D7B-DB48-458B-9CA5-813782BA600D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:3.5.1856:*:*:*:*:*:*:*","matchCriteriaId":"FF19BBC6-C4F2-4636-8650-E178FFD6BF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E00F0805-8C73-43B1-87AC-744434046E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3098DC2A-6A68-4160-9DAC-8F31A49BA45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*","matchCriteriaId":"8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D7577EED-D28B-430A-B554-CE40D9154893"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*","matchCriteriaId":"172E406F-108C-4D9A-80AB-78CDF134C4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E81E472E-45B5-465B-B2D7-40F906AC31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*","matchCriteriaId":"50A04B5F-F17B-4177-861B-66DFD4FBE225"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*","matchCriteriaId":"E80E2514-9F43-48FB-B55E-094F45088D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*","matchCriteriaId":"2E553111-8B78-4B66-95BC-FD0EE897DDC4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/269006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4574","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8931","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0593","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:6.1:*:*:*:*:*:*:*","matchCriteriaId":"0F009302-6798-4189-BE56-FB8E67C64592"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5421CDE-6C31-42FF-8A06-23A6207D1B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.01:*:*:*:*:*:*:*","matchCriteriaId":"6469EB31-32FF-415C-82DD-670513911371"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/8039","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8976.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4637","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/270249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/8039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8976.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0594","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galeon:galeon_browser:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9E89FB22-EF04-446F-AF36-44878AB57AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:galeon:galeon_browser:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"184CDE30-30DE-49F5-A44D-36CA3852BF12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5421CDE-6C31-42FF-8A06-23A6207D1B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.01:*:*:*:*:*:*:*","matchCriteriaId":"6469EB31-32FF-415C-82DD-670513911371"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F112CED-879B-4A19-993A-16858B4EC16C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7D7FA24-4B6F-4D67-95BE-46819033CA6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9B316E0-4A05-411A-8279-404C82288BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B91D7920-86E6-4842-897A-553F018AD493"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270249","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8977.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-192.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-046.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4640","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/270249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8977.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-192.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0595","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:reporting_center:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"3BC9E32C-8C76-45C7-84AF-597BF21DECE4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8864.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4531","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8864.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0596","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:reporting_center:4.0d:*:*:*:*:*:*:*","matchCriteriaId":"3BC9E32C-8C76-45C7-84AF-597BF21DECE4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8865.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/wtr.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10447","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8865.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/wtr.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0597","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0025.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268066","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ320751","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8867.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/693099","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5179","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4532","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/268066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ320751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8867.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/693099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0598","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foundstone:fscan:1.12:*:*:*:*:*:*:*","matchCriteriaId":"6817C619-6D42-4F9B-AC61-E7142A847ABC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/268581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.foundstone.com/knowledge/fscan112_advisory.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8895.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4549","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/268581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.foundstone.com/knowledge/fscan112_advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8895.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0599","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blahz-dns:blahz-dns:0.2:*:*:*:*:*:*:*","matchCriteriaId":"031503A7-F68E-404F-9D9F-38AA9D45459E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=87004","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8951.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5178","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4618","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=87004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8951.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0600","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4_1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"06A9B61C-C250-4C7C-A396-5EEC664EF905"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4_1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6E0A425C-FD5F-4383-98A2-B664DD1449C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4_1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"955A41BC-4778-4A42-9929-29FC0A3C7844"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos:4_1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"29F8D229-133F-4890-AFF4-7FDC355F6397"},{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:lukemftp:1.5:*:*:*:*:*:*:*","matchCriteriaId":"066AA8A7-F0B0-48D6-BF76-86FBB71FDCC1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0339.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8938.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4592","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0339.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8938.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0601","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:information_security_systems:realsecure_network_sensor:5.0_xpu_3.4:*:*:*:*:*:*:*","matchCriteriaId":"45D5AE3B-D92B-467D-9B54-AB58D688181B"},{"vulnerable":true,"criteria":"cpe:2.3:a:information_security_systems:realsecure_network_sensor:5.5.1_xpu_3.4:*:*:*:*:*:*:*","matchCriteriaId":"1F0A6726-B4F0-4096-B238-588BBB963EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:information_security_systems:realsecure_network_sensor:5.5.2_xpu_3.4:*:*:*:*:*:*:*","matchCriteriaId":"37058054-4E43-4E62-93FD-CC5B11705BD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:information_security_systems:realsecure_network_sensor:5.5_xpu_3.4:*:*:*:*:*:*:*","matchCriteriaId":"FDA63B23-82BF-431F-8B13-56ED721BB01D"},{"vulnerable":true,"criteria":"cpe:2.3:a:information_security_systems:realsecure_network_sensor:6.0_xpu_3.4:*:*:*:*:*:*:*","matchCriteriaId":"FD99286A-76EE-48DA-8799-F84680E244D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:information_security_systems:realsecure_network_sensor:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1D2CD327-BFD4-4000-94BA-B1533EA3C771"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/alerts/advise116.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8961.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5165","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4649","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/alerts/advise116.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8961.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5165","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0602","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snapgear:snapgear_lite\\+_firewall:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ABAD8E01-3995-418D-8F25-5E05669A8127"},{"vulnerable":true,"criteria":"cpe:2.3:a:snapgear:snapgear_lite\\+_firewall:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"57266B8D-4249-4C30-997A-615DF5B95D32"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102035583114759&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4657","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4658","source":"cve@mitre.org"},{"url":"http://www.snapgear.com/releases.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8986","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102035583114759&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.snapgear.com/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0603","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packet to UDP port 500."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snapgear:snapgear_lite\\+_firewall:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ABAD8E01-3995-418D-8F25-5E05669A8127"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102035583114759&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8987.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4659","source":"cve@mitre.org"},{"url":"http://www.snapgear.com/releases.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102035583114759&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8987.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.snapgear.com/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0604","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number of packets with malformed IP options."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snapgear:snapgear_lite\\+_firewall:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"ABAD8E01-3995-418D-8F25-5E05669A8127"},{"vulnerable":true,"criteria":"cpe:2.3:a:snapgear:snapgear_lite\\+_firewall:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"57266B8D-4249-4C30-997A-615DF5B95D32"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102035583114759&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8988.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4660","source":"cve@mitre.org"},{"url":"http://www.snapgear.com/releases.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102035583114759&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8988.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.snapgear.com/releases.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0605","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote attackers to execute arbitrary code via a long movie parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0051.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102039374017185&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102038919414726&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8993.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/support/flash/ts/documents/buf_ovflow_623.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5177","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4664","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102039374017185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102038919414726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8993.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/support/flash/ts/documents/buf_ovflow_623.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0606","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long commands such as login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3com:3cdaemon:2.0:revision_10:*:*:*:*:*:*","matchCriteriaId":"1670B891-D496-41BE-871C-5501C9D0A738"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0428.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8970.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4638","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0428.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8970.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0607","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*","matchCriteriaId":"C4396E99-B5C8-4914-A3DB-76E22A10AE84"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8898.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4558","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8898.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0608","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long \"220\" banner."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matu:matu_ftp:1.74:*:*:*:*:*:*:*","matchCriteriaId":"5B40EFF7-C451-4D51-B8EC-E8C8B089A44D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0310.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8911.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4572","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8911.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0609","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with \"SA1457 out of i_port_timeout.fix_up_message_frame\") via malformed IP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BE46649B-4577-4DEF-BB79-71E0B96260BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A239948-8AF4-430D-85DD-4DEF1C44CE6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A5692819-DB9B-4389-8942-9B04366FE33C"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4047","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8901.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4536","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/4047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8901.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0610","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BE46649B-4577-4DEF-BB79-71E0B96260BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"3A239948-8AF4-430D-85DD-4DEF1C44CE6D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:mpe_ix:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A5692819-DB9B-4389-8942-9B04366FE33C"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4082","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-075.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8990.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/551683","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4652","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/4082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/m-075.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8990.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/551683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0611","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified dot dot) in the (1) head or (2) foot parameters, which are not properly filtered."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craig_patchett:fileseek:*:*:*:*:*:*:*:*","matchCriteriaId":"B204BEA7-71D0-4A52-8F59-F769DC2755CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8858.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8858.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0612","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craig_patchett:fileseek:*:*:*:*:*:*:*:*","matchCriteriaId":"B204BEA7-71D0-4A52-8F59-F769DC2755CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8857.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8857.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0613","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dnstools_software:dnstools:2.0_beta3:*:*:*:*:*:*:*","matchCriteriaId":"50E3EF1F-52F3-4397-BB86-B2E517BD99DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnstools_software:dnstools:2.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"F40D48B5-2366-44A0-B869-F1C7B0ADCDB7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0390.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.dnstools.com/dnstools_2.0.1.tar.gz","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8948.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4617","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0390.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.dnstools.com/dnstools_2.0.1.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8948.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0614","sourceIdentifier":"cve@mitre.org","published":"2002-06-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-survey:php-survey:2000-04-20:*:*:*:*:*:*:*","matchCriteriaId":"554DC73D-972F-4A19-A4D5-0FFBE3A62996"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-survey:php-survey:2000-04-21:*:*:*:*:*:*:*","matchCriteriaId":"AECF8789-EE25-4915-BD79-831EB5492998"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-survey:php-survey:2000-06-14:*:*:*:*:*:*:*","matchCriteriaId":"390FA997-483B-47D2-9453-ED2638E43569"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-survey:php-survey:2000-06-14b:*:*:*:*:*:*:*","matchCriteriaId":"60DA163D-E092-498B-B386-ED0F499E2386"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-survey:php-survey:2000-06-15:*:*:*:*:*:*:*","matchCriteriaId":"2D194B43-AC99-4F0D-9A3C-4D53755620CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-survey:php-survey:prebeta2000-03-27:*:*:*:*:*:*:*","matchCriteriaId":"F1D3E2A3-43BB-44EB-87C7-B056E985C7B6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8950.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4612","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8950.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0615","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka \"Media Playback Script Invocation\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"27C6E1BC-406E-4B0B-B513-33226AC4482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"C619E79B-90FB-4812-B0F3-115B47498492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9422.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5110","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9422.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0616","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the \"Excel Inline Macros Vulnerability.\""},{"lang":"es","value":"El Modelo de Seguridad de Macros en Microsoft Excel 2000 y 2002 para Windows permite a atacantes remotos ejecutar código adjuntando una macro inline a un objeto dentro de un libro de trabajo de Excel. También conocida como \"Vulnerabilidad de Macros inline de Excel\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"27C6E1BC-406E-4B0B-B513-33226AC4482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"C619E79B-90FB-4812-B0F3-115B47498492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9397.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5063","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9397.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0617","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka \"Hyperlinked Excel Workbook Macro Bypass.\""},{"lang":"es","value":"El modelo de seguridad de macros en Microsoft Excel 2000 y 2002 para Windows permite a atacantes remotos ejecutar código creando un hiperenlace o dibujando una forma en un libro fuente que apunta a un libro destino que contiene un macro de autoejecución. También conocida como \"Evitación de Macro de Libro de Excel hiperenlazado\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"27C6E1BC-406E-4B0B-B513-33226AC4482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"C619E79B-90FB-4812-B0F3-115B47498492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"}]}]}],"references":[{"url":"http://www.osvdb.org/5175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5064","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9398","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0618","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka \"Excel XSL Stylesheet Script Execution\"."},{"lang":"es","value":"El Modelo de Seguridad de Macros en Microsoft Excel 2000 y 2002 permite a atacantes remotos ejecutar código en la zona Ordenador Local incrustando scripts HTML en un libro Excel que contiene una hoja de estilos XLS. También conocido como \"Ejecución de Script en hoja de estilo XLS en Excel\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"27C6E1BC-406E-4B0B-B513-33226AC4482D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"C619E79B-90FB-4812-B0F3-115B47498492"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=102256054320377&w=2","source":"cve@mitre.org"},{"url":"http://www.guninski.com/ex%24el2.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9399.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4821","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102256054320377&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/ex%24el2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9399.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0619","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a \"Variant of MS00-071, Word Mail Merge Vulnerability\" (CVE-2000-0788)."},{"lang":"es","value":"La Herramienta de Integración de Correo (Merge Mail) en Microsoft Word 2002 para Windows, si Microsoft Access está presente en el sistema, permite a atacantes remotos ejecutar scripts de Visual Basic (VBA) en un documento integrado con correo guardado en formato HTML. También conocido como \"Variante de MS00-071, Vulnerabilidad de Integración de Correo de Word\" (CVE-2000-0788)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102139136019862&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9077.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5066","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102139136019862&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9077.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0620","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"AF65806C-05BF-4EB7-976B-3346F2D64886"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"C73B40C1-B8D7-46FB-B327-8C93F2ACDD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"DD28CDF4-00E9-4F61-8201-76FB44544A33"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4853","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0621","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"AF65806C-05BF-4EB7-976B-3346F2D64886"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"C73B40C1-B8D7-46FB-B327-8C93F2ACDD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"DD28CDF4-00E9-4F61-8201-76FB44544A33"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9424.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5172","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5108","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9424.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0622","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute commands by passing the commands as input to the OWC package installer, aka \"OWC Package Command Execution\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"AF65806C-05BF-4EB7-976B-3346F2D64886"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"C73B40C1-B8D7-46FB-B327-8C93F2ACDD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"DD28CDF4-00E9-4F61-8201-76FB44544A33"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9425.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5170","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5111","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9425.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0623","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data, aka \"New Variant of the ISAPI Filter Buffer Overrun\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"AF65806C-05BF-4EB7-976B-3346F2D64886"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"C73B40C1-B8D7-46FB-B327-8C93F2ACDD9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"DD28CDF4-00E9-4F61-8201-76FB44544A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:commerce_server:2002:*:*:*:*:*:*:*","matchCriteriaId":"B64979B9-F0D7-4A74-8B2C-FECD0B61F21A"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9426.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5163","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5112","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9426.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0624","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication, aka \"Unchecked Buffer in Password Encryption Procedure.\""},{"lang":"es","value":"Desbordamiento de búfer en la función de encriptación de contraseñas en  Microsoft SQL Server 2000, incluyendo Microsoft SQL Server Desktop Engine (MSDE) 2000, permite a atacantes remotos la obtención del control sobre la base de datos y la ejecución de código arbitrario mediante SQL Server Authentication .\r\nEsta vulnerabilidad también es conocida como Unchecked Buffer in Password Encryption Procedure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msde:2000:*:*:*:*:*:*:*","matchCriteriaId":"3FF06B44-FC10-49CD-954E-9C4058731A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0631","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020607-02-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9418.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5092","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020607-02-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9418.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0632","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server."},{"lang":"es","value":"Vulnerabilidad en SGI BDS (Bulk Data Sevice) BDSPro 2.4 y anteriore permite a clientes leer ficheros arbitrarios en un servidor BDS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020804-01-P","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9825.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5448","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020804-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9825.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0637","sourceIdentifier":"cve@mitre.org","published":"2002-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places (aka \"space gap\"), such as (1) Content-Type :\", (2) \"Content-Transfer-Encoding :\", (3) no space before a boundary declaration, or (4) \"boundary= \", which is processed by Outlook Express."},{"lang":"es","value":"Interscan VirusWall build 1462 permite a atacantes remotos evadir la protección mediante mensajes de correo con cabeceras que no cumplen la especificaciónes RFC por tener (o faltarle) caractéres de espacio en lugares inesperados (también conocido como \"space gap\"); como en:\r\n\r\n\"Content-Type :\"\r\n\"Content-Transfer-Encoding :\"\r\nSin espacio antes de una declaración de límites, o\r\n \"boundary= \", que es procesado por Outlook Express."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:*:*:*:*:*:*","matchCriteriaId":"C7A7881A-BC30-471E-8D8F-F764F26DF8F8"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9464.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5KP000A7QE.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9464.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5KP000A7QE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0638","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh."},{"lang":"es","value":"setpwnam.c en el paquete util-linux, como se incluye en Red Hat Linux 7.3 y antieriores, y en otros sistemas operativos, no bloquea adecuadamente un fichero temporal cuando se modifica /etc/passwd, lo que puede permitir a usuarios locales ganar privilegios mediante una compleja condición de carrera que usa un descriptor de fichero abierto en utilidades como chfn y chsh."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_single_network_firewall:7.2:*:*:*:*:*:*:*","matchCriteriaId":"7A188467-3856-4599-A2CD-BD2655974B63"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"B345284D-6842-47C0-B823-B5DDC30CC8A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"E4853E92-5E0A-47B9-A343-D5BEE87D2C27"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*","matchCriteriaId":"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*","matchCriteriaId":"613A22EC-D93C-48B0-B97C-3E0DDFBD0B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"97E09AD9-F057-4264-88BB-A8A18C1B1246"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DFA94D5-0139-490C-8257-0751FE9FBAE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:alpha:*:*:*:*:*","matchCriteriaId":"6931FB54-A163-4CE3-BBD9-D345AA0977A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.0:*:sparc:*:*:*:*:*","matchCriteriaId":"5ABD1331-277C-4C31-8186-978243C62255"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"2EC4D3AB-38FA-4D44-AF5C-2DCD15994E76"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:alpha:*:*:*:*:*","matchCriteriaId":"C89454B9-4F45-4A42-A06D-ED42D893C544"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.1:*:sparc:*:*:*:*:*","matchCriteriaId":"1E64093E-7D53-4238-95C3-48ED5A0FFD97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:alpha:*:*:*:*:*","matchCriteriaId":"6EAAC51F-9DC5-4026-8147-1B74975D6183"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-043.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000523","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102795787713996&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4320","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-132.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9709.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/405955","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-047.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5164","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-137.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5344","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-043.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102795787713996&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-132.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9709.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/405955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-047.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0639","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue did not affect the versions of OpenSSH as shipped with Red Hat Enterprise Linux 3 or later.\n\nThis issue did not affect the OpenSSL packages as shipped with Red Hat Enterprise Linux 2.1 as they were not compiled with S/Key or BSD_AUTH support.  The upstream patch for this issue and CVE-2002-0640 was included in an errata so that users recompiling OpenSSL with support for those authentication methods would also be protected:\nhttps://rhn.redhat.com/errata/RHSA-2002-131.html","lastModified":"2008-05-15T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionStartIncluding":"2.9.9","versionEndIncluding":"3.3","matchCriteriaId":"E68E2B14-A81E-482E-8DAF-FDDC29FF2158"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102514371522793&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102514631524575&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102521542826833&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.cert.org/advisories/CA-2002-18.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-134","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9169.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/369347","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2177.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6245","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5093","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://twitter.com/RooneyMcNibNug/status/1152332585349111810","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102514371522793&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102514631524575&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102521542826833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.cert.org/advisories/CA-2002-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9169.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/369347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2177.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://twitter.com/RooneyMcNibNug/status/1152332585349111810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2002-0640","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is using PAM modules with interactive keyboard authentication (PAMAuthenticationViaKbdInt)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B6E307F1-C765-409C-835C-133026A5179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA997F5E-29FE-454A-9006-001D732CD4B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"EED5E506-9D2B-4CAF-8455-B9BE7696E49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE7CB94E-0479-4939-86F6-0B4BEDE2E739"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*","matchCriteriaId":"78135400-BA1A-42AA-BE17-5588442BCF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*","matchCriteriaId":"78F2EDC0-3189-4523-882B-9188C852F793"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*","matchCriteriaId":"E2991C07-5486-4590-A74E-46A379DD3339"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EB9BE06-0A36-4853-ADF4-9C1A1854278A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8FC57F38-6545-497B-B6DA-FCAF51755988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*","matchCriteriaId":"EC30FD61-10DA-4C9B-BCE8-AD75DCEB40BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*","matchCriteriaId":"EC1DF4CE-E71C-4C10-9F82-B9ECDC94933F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*","matchCriteriaId":"0238F009-4BBA-4E6B-9E2A-6045BA9BBE9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*","matchCriteriaId":"4B235167-9554-4431-88C5-9472DD36FCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E05D8E86-EC01-4589-B372-4DEB7845C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*","matchCriteriaId":"764AD252-CA2F-4A87-BCAA-7747E8C410E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*","matchCriteriaId":"269BB9F7-55E5-4CB3-8429-C37C7132799F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F639-31A0-4026-B6D4-51BA79FB1D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0211BCE3-0DED-40BA-8A21-1A97B91F71C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*","matchCriteriaId":"B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5AD7BB30-AC79-4153-852C-1053DCF4DE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*","matchCriteriaId":"9039BE91-AF0A-41E7-8F9F-15375890E120"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*","matchCriteriaId":"08BCB2EA-DF9D-4853-805B-29FA6274E2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*","matchCriteriaId":"0F93417F-2498-4576-9F5D-B59F77D39669"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102514371522793&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102514631524575&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102521542826833&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102532054613894&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-18.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-134","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/369347","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2177.html","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_024_openssh_txt.html","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/839","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-127.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-131.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5093","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-030.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102514371522793&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102514631524575&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102521542826833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102532054613894&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/369347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_024_openssh_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2024/07/01/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-131.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0641","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query."},{"lang":"es","value":"Desbordamiento de búfer en el procedimiento de inserción masiva (bulk insert) en Microsoft SQL Server 2000, incluyendo Microsoft SQL Server Desktop Engine (MSDE) 2000, permite a atacantes con privilegios de administrador de bases de datos, la ejecución de código arbitrario mediante un nombre largo de fichero en la consulta  BULK INSERT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msde:2000:*:*:*:*:*:*:*","matchCriteriaId":"3FF06B44-FC10-49CD-954E-9C4058731A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102639885223746&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/682620","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/ms-sqlbi.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4847","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102639885223746&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/682620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/ms-sqlbi.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0642","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, has insecure permissions, which allows local users to gain privileges, aka \"Incorrect Permission on SQL Server Service Account Registry Key.\""},{"lang":"es","value":"La clave del registro que contiene información sobre el servicio SQL Server en Microsoft SQL Server 2000, incluyendo Microsoft SQL Server Desktop Engine (MSDE) 2000, posee unos permisos inseguros, lo cual permite a usuarios locales la obtención de privilegios. Esta vulnerabilidad también es conocida como Incorrect Permission on SQL Server Service Account Registry Key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msde:2000:*:*:*:*:*:*:*","matchCriteriaId":"3FF06B44-FC10-49CD-954E-9C4058731A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9523.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/796313","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5205","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1025","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9523.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/796313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0643","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka \"SQL Server Installation Process May Leave Passwords on System.\""},{"lang":"es","value":"La instalación de Microsoft Data Engine 1.0 (MSDE 1.0), y Microsoft SQL Server 2000 crea ficheros setup.iss con permisos inseguros que no son eliminados después de la instalación, lo cual posibilita a usuarios locales la obtención de datos confidenciales, incluyendo contraseñas débilmente encriptadas, para obtener privilegios.\r\n\r\nEsta vulnerabilidad también es conocida como SQL Server Installation Process May Leave Passwords on System."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102640092826731&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102640394131103&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/338195","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5203","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-035","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102640092826731&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102640394131103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/338195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0644","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de buffer en varios Comprobadores de Consistencia de Base de Datos (Database Consistency Checkers - DBCCs) en Microsoft SQL Server 2000 y Microsoft Desktop Engine (MSDE) 2000 permite a miembros de los grupos db_owner y db_ddladmin ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0645","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en procedimientos almacenados en Microsoft SQL Server 2000 y Microsoft Desktop engine (MSDE) 2000 puede que permita a usuarios autenticados ejecutar comandos arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0647","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code, aka \"Buffer Overrun in Legacy Text Formatting ActiveX Control\"."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX antiguo usado para mostrar texto especialmente formateado en Microsoft Internet Explorer 5.01, 5.5 y 6.0 permite a atacantes remotos ejecutar código arbitrario. También conocida como \"Desbordamiento de búfer en control ActiveX antiguo de formato de texto\" (Buffer Overrun in Legacy Text Formatting ActiveX Control"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9935.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5558","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9935.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0648","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose \"src\" attribute redirects to a local file."},{"lang":"es","value":"La capacidad de isla de datos <script> (legacy - legado - para compatibilidad con anteriores versiones) en XML en Microsoft Internet Explorer 5.01, 5.5 y 6.0 permite a atacantes remotos leer ficheros XML de su elección, y parte de otros ficheros, mediante una URL cuyo atributo \"src\" redirige a un fichero local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103011639524314&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9936.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5560","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1026","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1148","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1207","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A776","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103011639524314&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9936.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0649","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm."},{"lang":"es","value":"Multiples desbordamientos de buffers en  el Servicio de Resolución en SQL Server 2000 y Microsoft Desktop Engine 2000 (MSDE) permite a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario mediante paquetes UDP enviados al puerto 1434 en los que \r\n(1) un byte 0x04 causa al hilo de ejecución del Monitor SQL generar un nombre de clave del registro largo, o (2) un byte 0x08 con una cadena larga causa corrupción en la pila, tal como se realiza en los exploits por el gusano Slammer/Sapphire."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102760196931518&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102760479902411&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7945","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2003-04.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/399260","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/484891","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/308306/30/26180/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308321/30/26180/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308324/30/26180/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308388/30/26180/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308393/30/26180/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308396/30/26150/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308418/30/26150/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308419/30/26150/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308760/30/26120/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/308806/30/26120/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/309096/30/26120/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/309324/30/26120/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/309776/30/26090/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5310","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102760196931518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102760479902411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2003-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/399260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/484891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/308306/30/26180/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308321/30/26180/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308324/30/26180/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308388/30/26180/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308393/30/26180/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308396/30/26150/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308418/30/26150/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308419/30/26150/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308760/30/26120/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/308806/30/26120/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/309096/30/26120/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/309324/30/26120/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/309776/30/26090/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0650","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a \"ping\" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop."},{"lang":"es","value":"El mecanismo de mantenimiento de conexión (keep-alive) en Microsoft SQL Server 2000 permite a atacantes remotos causar una denegación de servicio (consumición de ancho de banda)  mediante un paquete de estilo \"ping\" al servicio de resolución (puerto UDP 1434) con una IP falsificada de otro sistema SQL Server, lo que hace que los dos servidores intercambien paquetes en bucle infinito."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102760196931518&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102760479902411&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9662.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5312","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102760196931518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102760479902411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9662.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0651","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6D7C7524-6943-4D94-8835-0221F0F0CD63"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA2002-006.txt.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.39","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/UnixWare/CSSA-2002-SCO.37","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020701-01-I/","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0001.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0001.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/engarde/2002-q3/0002.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0000.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102513011311504&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102520962320134&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102579743329251&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-139.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-19.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9432.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/803539","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-043.php","source":"cve@mitre.org"},{"url":"http://www.pine.nl/advisories/pine-cert-20020601.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-119.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-133.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-167.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-154.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5100","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4190","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.ORG/pub/NetBSD/security/advisories/NetBSD-SA2002-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.39","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/updates/UnixWare/CSSA-2002-SCO.37","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020701-01-I/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/engarde/2002-q3/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102513011311504&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102520962320134&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102579743329251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-139.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9432.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/803539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-043.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pine.nl/advisories/pine-cert-20020601.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0652","sourceIdentifier":"cve@mitre.org","published":"2002-07-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs()."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102459162909825&w=2","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020605-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102459162909825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0653","sourceIdentifier":"cve@mitre.org","published":"2002-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modssl:mod_ssl:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.9","matchCriteriaId":"844D1E7A-906B-421C-8C22-A612E16C72C5"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-031.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0350.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0018.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000504","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102513970919836&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102563469326072&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=vuln-dev&m=102477330617604&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-135","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9415.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-048.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-134.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-135.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-136.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-146.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5084","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-031.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0350.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102513970919836&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102563469326072&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=vuln-dev&m=102477330617604&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2002/dsa-135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9415.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-048.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-134.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-136.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-146.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0654","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked."},{"lang":"es","value":"Apache 2.0 a 2.0.39 en Windows, OS2 y Netware, permite a atacantes remotos determinar la ruta completa del servidor mediante\r\n\r\n una petición de un fichero .var, donde el mensaje de error muestra muestra la ruta al archivo, o\r\n mediante un mensaje de error que ocurre cuando un script (proceso hijo) no puede ser invocado."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.40:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*","matchCriteriaId":"BBD08D4C-3C73-4AAE-8343-BBE487CF6040"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*","matchCriteriaId":"F88372A5-FDF3-4B75-BB4C-8D9C9E8AD850"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*","matchCriteriaId":"432DA9CE-EB82-406B-AD23-FD565E6C91BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102951160411052&w=2","source":"cve@mitre.org"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9875.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9876.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5486","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102951160411052&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9875.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9876.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0655","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"OpenSSL 0.9.6.d y anteriores, y 0.9.7-beta2 y anteriores, no manejan adecuadamente las representaciones ASCII de enteros en plataformas de 64 bits, lo que podría permitir a atacantes causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DABDE61F-A7DD-40A4-9569-8525A63BAA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FFAA0056-56FF-4D0F-8B44-066A4BFED1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3C821C-C479-4AAC-84EA-63C798CAB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCAF6167-65C1-4ACB-A75A-53922B64D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/308891","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5364","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/308891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0656","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3."},{"lang":"es","value":"Desbordamiento de búfer en OpenSSL 0.9.6d y anteriores, y 0.9.7-beta2 y anteriores, permite a atacantes remotos ejecutar código arbitrario mediante \r\nuna clave maestra de cliente larga en SSL2 o\r\nun ID de sesión largo en SSL3"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DABDE61F-A7DD-40A4-9569-8525A63BAA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FFAA0056-56FF-4D0F-8B44-066A4BFED1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3C821C-C479-4AAC-84EA-63C798CAB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCAF6167-65C1-4ACB-A75A-53922B64D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9714.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9716.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/102795","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/258555","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5362","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5363","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9714.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9716.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/102795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/258555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0657","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key."},{"lang":"es","value":"Desbordamiento de búfer en OpenSSL 0.9.7 anterior a 0.9.7-beta3, con Kerberos activado, permite a atacantes ejecutar código arbitrario mediante una clave maestra larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9715.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/561275","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5361","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9715.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/561275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-046.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0658","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack."},{"lang":"es","value":"La librería OSSF mm (libmm) anterior a 1.2.0 permite al usuario local de Apache ganar privilegios mediante ficheros temporales, posiblemente mediante un enlace simbólico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"270D8217-749C-42AA-BFCF-29F30A005F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"19AD7B27-55CB-4B74-8FF8-51055303E237"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"563BCC1D-D9B7-4A4D-B236-80CD4F3CEA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"61D170FC-54D4-47E0-B2D1-DB595A856962"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B9853936-1570-4EF1-91D2-DA3E75B5896B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"26C013B0-9AAC-40A0-9FC8-D28E1C0AEDFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5D97522C-3140-4321-AE49-381E950EC5B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"5B0B47A8-1730-44FA-BEB4-4EEDA53B9E06"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"89674C7D-1C76-490D-8357-69C395BBED51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1EB315F4-5225-4EA6-A48F-8AC7546B0155"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"034F3E12-D0ED-4533-8CA3-D7BDE44DFA51"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1935CCB9-24A8-4B04-BBA7-5452B622A646"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"35D77BDD-F1F0-4E63-AFFE-E52F167A7E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4CFDE079-DBEE-43C4-A8E6-0BDF15E2E471"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6B39122A-961C-4A63-BEA3-E45B14AC4053"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"EB1AE08F-D8B1-4A3E-B032-1A58408C79B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ossp:mm:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0EB8773A-D67C-4411-8AEB-00BC31A269A0"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4392","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-153.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-154.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-156.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-137","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9719.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-163.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-158.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5352","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9719.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-158.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0659","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings."},{"lang":"es","value":"La librería ASN1 de Open SSL 0.9.6d y anterior, y 0.9.7-beta2 y anterior, permite que atacantes remotos provoquen una denegación de servicio por medio de codificaciones inválidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.1c:*:*:*:*:*:*:*","matchCriteriaId":"14D983EC-61B0-4FD9-89B5-9878E4CE4405"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"B5D7BE3C-8CA2-4FB2-B4AE-B201D88C2A9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"BC4C5F05-BC0B-478D-9A6F-7C804777BA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"8847BD34-BDE6-4AE9-96D9-75B9CF93A6A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"4EDB5A09-BE86-4352-9799-A875649EDB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"F03FA9C0-24C7-46AC-92EC-7834BC34C79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"B5E4742C-A983-4F00-B24F-AB280C0E876D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6a:*:*:*:*:*:*:*","matchCriteriaId":"8A0628DF-3A4C-4078-B615-22260671EABF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6b:*:*:*:*:*:*:*","matchCriteriaId":"962FCB86-15AD-4399-8B7D-EC1DEA919C59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DABDE61F-A7DD-40A4-9569-8525A63BAA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FFAA0056-56FF-4D0F-8B44-066A4BFED1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6C3C821C-C479-4AAC-84EA-63C798CAB00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:corporate_time_outlook_connector:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCAF6167-65C1-4ACB-A75A-53922B64D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000516","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-160.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-161.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9718.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/748355","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5366","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-160.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-164.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-23.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9718.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/748355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0660","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"FD7F0CDA-F270-40C5-AE72-D3F0856883B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C96453B9-3278-4063-BD27-2890CCEC338B"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2002-151.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-152.html","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2002/dsa-140","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-151.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2002/dsa-140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0661","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \\ (backslash) characters."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.40:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:win32:*:*:*:*:*","matchCriteriaId":"BBD08D4C-3C73-4AAE-8343-BBE487CF6040"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:beta:win32:*:*:*:*:*","matchCriteriaId":"F88372A5-FDF3-4B75-BB4C-8D9C9E8AD850"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.34:beta:win32:*:*:*:*:*","matchCriteriaId":"432DA9CE-EB82-406B-AD23-FD565E6C91BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"}]}]}],"references":[{"url":"http://httpd.apache.org/info/security_bulletin_20020908a.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102892744011436&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102951160411052&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9808.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5434","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://httpd.apache.org/info/security_bulletin_20020908a.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102892744011436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102951160411052&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9808.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0662","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files."},{"lang":"es","value":"scrollkeeper-get-cl en ScrollKeeper 0.3 a 0.3.11 permite a usuarios locales crear y sobreescribir ficheros mediante un ataque de enlaces simbólicos (symink attack) en los ficheros temporales scrollkeeper-tempfile.x"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7FB5B0E1-E5CC-4E80-8E95-715D1EB5ADF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"73C5F64D-B1E2-4C3A-8472-A5479B02DE82"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D482F314-8176-4D97-883F-DAA6A324300F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DDE67216-5BF6-43F3-B616-24BBC23A2ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"BE26906A-1F31-47BC-BAB7-7DCA1050265C"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.6:*:*:*:*:*:*:*","matchCriteriaId":"CA5090AD-E38C-4E86-811A-92DCA3252129"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB2E2CD6-385D-4E7A-809A-0994CFF648E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.8:*:*:*:*:*:*:*","matchCriteriaId":"A077409B-CE7C-4CBB-9215-A4530625A4CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.9:*:*:*:*:*:*:*","matchCriteriaId":"D18E80E6-33CE-4FA9-9AD4-AA0FFCB51EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.10:*:*:*:*:*:*:*","matchCriteriaId":"034A6584-2ED3-487A-844D-6686752730FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:dan_mueth:scrollkeeper:0.3.11:*:*:*:*:*:*:*","matchCriteriaId":"C4C8881E-3BC5-41BD-A58D-6431CE66251F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103098575826031&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103115387102294&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-160","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10002.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-186.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5602","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103098575826031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103115387102294&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10002.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0663","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large outgoing HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2001:*:*:*:*:*:*:*","matchCriteriaId":"2D2C8E23-852E-4715-9D8D-18F26B1263A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2001_3.0.4.91:*:*:*:*:*:*:*","matchCriteriaId":"DBA12C64-055D-4A98-A2C1-84FC2928E028"}]}]}],"references":[{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.07.15.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a071502-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9579.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4366","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5237","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.07.15.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2002/a071502-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9579.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0664","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts."},{"lang":"es","value":"Las listas de control de acceso (ACLs) de la base de datos de administración en ZMerge 4.x y 5.x provee a usuarios arbitrarios (incluyendo usuarios anónimos) con nivel de acceso de Manager, lo que permite a los usuarios leer o modificar guiones (scripts) para importar y exportar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:granite_software:zmerge:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D207BA8E-6A2D-4088-AB60-7CC4EE3AD885"},{"vulnerable":true,"criteria":"cpe:2.3:a:granite_software:zmerge:5.0:*:*:*:*:*:*:*","matchCriteriaId":"74C281C6-A491-47FF-A52E-FAB6E7AA626E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103134154721846&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10057.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5101","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103134154721846&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10057.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0665","sourceIdentifier":"cve@mitre.org","published":"2002-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL."},{"lang":"es","value":"Macromedia JRun Administration Server permite a atacantes remotos evitar la autenticación para entrar en el sistema, mediante un caracter '/' extra en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0133.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102529402127195&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9450.php","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5118","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102529402127195&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9450.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0666","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors."},{"lang":"es","value":"Implementaciones de IPSEC, incluyendo FreeS/WAN y KAME no calculan adecuadamente la longitud de los datos de autenticación, lo que permite a atacantes remotos causar una denegación de servicio (kernel panic) mediante paquetes Encapsulating Security Payload (EPS) cortos falsificados, lo que resulta en errores de enteros sin signos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9:*:*:*:*:*:*:*","matchCriteriaId":"9A66D34B-9044-4F34-B367-55967EE92FE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"907622BF-3B1E-4A89-A414-60DD0559463E"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"308CBFAA-D513-4593-81E8-4CC025E5853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"7711EC06-B983-4E8C-AC4A-24C3A5AD64AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"29E5A0BA-BC40-4D53-8A34-D9E1D88C0453"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AEEA91E2-C599-4192-8BBC-A151A1D283A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"F10EA9F4-5878-4AFB-BAB6-B2C9728AF3DE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:sh3:*:*:*:*:*","matchCriteriaId":"52F2B17F-A169-402C-AA05-0DE5D805BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:x86:*:*:*:*:*","matchCriteriaId":"BD44E15F-D216-404F-8585-D278175C2A0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:beta:*:*:*:*:*:*","matchCriteriaId":"9DDC444D-E763-4685-97F8-A027DF6F804D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DD478B7E-83ED-47CD-AE00-705F2255E64C"},{"vulnerable":true,"criteria":"cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.2:*:*:*:*:*:*:*","matchCriteriaId":"AC90C735-4002-40A3-B0C8-A684A5DF99A7"},{"vulnerable":true,"criteria":"cpe:2.3:h:global_technology_associates:gnat_box_firmware:3.3:*:*:*:*:*:*:*","matchCriteriaId":"236F09EF-A0B5-465D-9041-D389AB3EAA97"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:bluefire_ix1035_router:*:*:*:*:*:*:*:*","matchCriteriaId":"BBB64A3D-0C14-441D-8A4E-E4EF94FA7A34"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:ix1010:*:*:*:*:*:*:*:*","matchCriteriaId":"3D7FB074-B218-408B-AA86-941824B1758B"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:ix1011:*:*:*:*:*:*:*:*","matchCriteriaId":"9D4FB687-87F6-47CC-95F8-EB4D4396184D"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:ix1020:*:*:*:*:*:*:*:*","matchCriteriaId":"98BA9566-EE28-4025-A6DC-B7F81FC41BE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:ix1050:*:*:*:*:*:*:*:*","matchCriteriaId":"4331351A-D97B-4874-8370-83A20E598E9D"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:ix2010:*:*:*:*:*:*:*:*","matchCriteriaId":"3C8AA729-DF24-4AA2-800C-1DFEF9E1EF18"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc","source":"cve@mitre.org"},{"url":"http://razor.bindview.com/publish/advisories/adv_ipsec.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-201","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10411.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/459371","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6011","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://razor.bindview.com/publish/advisories/adv_ipsec.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10411.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/459371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0667","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone."},{"lang":"es","value":"La telefonía basada en voz sobre IP de Pingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, posee por defecto una contraseña de administrador nula, lo cual podría permitir a atacantes remotos la obtención de accesos al teléfono."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9562.php","source":"cve@mitre.org"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5214","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9562.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0668","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forwarding settings and hijack calls."},{"lang":"es","value":"El interfaz web de la telefonía basada en voz sobre IP dePingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, permite a usuarios autentificados la modificación de los valores del establecimiento de llamada (Call Forwarding settings) y la intercepción de llamadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5144","source":"cve@mitre.org"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9563","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0670","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing."},{"lang":"es","value":"El interfaz web de la telefonía basada en voz sobre IP dePingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, utiliza nombres de usuario y contraseñas cifradas en Base64 para autenticación básica en HTTP, lo cual permite a atacantes remotos en robo y la fácil decodificación de contraseñas mediante la intercepción de información que navega por la red ('sniffing')."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9565.php","source":"cve@mitre.org"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9565.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0671","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing."},{"lang":"es","value":"La telefonía basada en voz sobre IP dePingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, descarga aplicaciones de telefonía de un sitio web, pero no verifica la integridad de dichas aplicaciones, lo cual podría permitir a atacantes remotos la instalación de caballos de troya mediante la falsificación de la dirección IP origen de los paquetes (spoofing) en el DNS."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-494"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:pingtel:xpressa_firmware:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D73ABE8-8E28-4891-ACAF-576160B57D0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:pingtel:xpressa_firmware:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"39AA87AF-76F7-4B5C-ADD1-2A5211CBC78F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:pingtel:xpressa:-:*:*:*:*:*:*:*","matchCriteriaId":"534786F9-4EFA-40C5-89F9-3625563000CA"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9566.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5224","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9566.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0672","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null."},{"lang":"es","value":"La telefonía basada en voz sobre IP dePingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, permite a atacantes con acceso físico, la restauración de los valores por defecto sin ninguna autentificación, gracias a una opción del menú que asigna al administrador una contraseña nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9567.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9567.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0673","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions."},{"lang":"es","value":"El proceso de entrada a la telefonía basada en voz sobre IP dePingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4,  permite a atacantes con acceso físico al teléfono, terminar la sesión del usuario actual y re-entrar utilizando MyPingtel Sign-In para lograr acceos remoto y llevar a cabo acciones no autorizadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9568.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9568.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0674","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not \"time out\" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication."},{"lang":"es","value":"La telefonía basada en voz sobre IP de Pingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, no posee 'tiempo máximo de espera' (time out) en las sesiones inactivas de administrador, lo cula podría permitir a otros usuarios realizar tareas de administrador si tal administrador no explicita el fin de su sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5221","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9569","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0675","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone."},{"lang":"es","value":"La telefonía basada en voz sobre IP de Pingtel xpressa SIP desde la versión 1.2.5 hasta la 1.2.7.4, no requiere privilegios de administrador para realizar una actualización del firmware, lo que permite a usuarios no autorizados a actualizar dicha telefonía."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9570.php","source":"cve@mitre.org"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5223","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a071202-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9570.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0676","sourceIdentifier":"cve@mitre.org","published":"2002-07-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"http://www.cunap.com/~hardingr/projects/osx/exploit.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9502.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5176","source":"cve@mitre.org"},{"url":"http://www.cunap.com/~hardingr/projects/osx/exploit.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9502.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0677","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure."},{"lang":"es","value":"El sevidor de bases de datos CDE ToolTalk (ttdbserver) permite a atacantes remotos sobrescribir posiciones arbitrarias de memoria con ceros, y posiblemente ganar privilegios, mediante un arguemnte de descriptor de fichero en una llamada al  procedimiento AUTH_UNIX, que es usado como índice de tabla en el procedimiento _TT_ISCLOSE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7:*:*:*:*:*:*:*","matchCriteriaId":"42AA34B0-4A86-4864-8C10-456DDD152989"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"B99D6418-D27D-45FC-B220-5DC85A22ABC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:dextop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE1691F6-D053-42AA-925E-14C43308A30B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021102-02-P","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102635906423617&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-20.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/975403","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1099","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A91","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021102-02-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102635906423617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/975403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A91","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0678","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure."},{"lang":"es","value":"El servidor de bases de datos CDE ToolTalk (ttdbserver) permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque en enlaces simbólicos (symlink attack) en el fichero de registro (log) de transacciones usado por el procedimiento RPC _TT_TRANSACTION"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BDB26B9B-75E4-4E4F-9B4F-2621FE673C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA04F71A-0CBA-4479-A5BA-58AED5F67B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:dextop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE1691F6-D053-42AA-925E-14C43308A30B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0002.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102635906423617&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-20.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9527.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/299816","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5083","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102635906423617&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9527.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/299816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0679","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure."},{"lang":"es","value":"Desbordamiento de búfer en el servidor de bases de datos RPC ToolTalk (rpc.ttdbserverd) de Common Desktop Environment (CDE) permite a atacantes remotos ejecutar código arbitrario mediante un argumento al procedimiento T_TT_CREATE_FILE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.0:*:*:*:*:*:*:*","matchCriteriaId":"BDB26B9B-75E4-4E4F-9B4F-2621FE673C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA04F71A-0CBA-4479-A5BA-58AED5F67B60"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:dextop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE1691F6-D053-42AA-925E-14C43308A30B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102917002523536&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46366&zone_32=category%3Asecurity","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY32792&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY32793&apar=only","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-26.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9822.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/387387","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5444","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A177","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A192","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102917002523536&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46366&zone_32=category%3Asecurity","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY32792&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY32793&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9822.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/387387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0680","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence.  NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en GoAhead Web Server 2.1 permite a atacantes remotos mediante una URL con una \"/\" (carácter barra) codificada (%5C) en una secuencia .. (punto punto)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"21EFC04A-DC4A-4491-BAFC-996F8C127438"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"40304420-26E0-4F6D-B368-7BBC068CCCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B147EAF-E6A0-4D0C-8C27-BA27F844A816"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B729D721-2FD3-4522-8CB3-526B7454D124"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"56B99EBA-8968-4948-9650-36CC2B95AD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:orange_software:orange_web_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"59488ECB-385F-4B28-AAE2-9CF099F06627"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:montavista_software:hard_hat_linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C58D55E-7434-434E-A3F6-2DA9C782C162"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102631742711795&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102709382714597&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/81099","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102631742711795&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102709382714597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/81099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0681","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a \"404 not found\" message, which does not quote the script."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (cross-site scripting) en GoAhead Web Server 2.1 permite a atacantes remotos ejecutar secuencias de comandos como otros usuarios web mediante un script en una URL que genera un mensaje \"404 no encontrado\", que no le pone comillas al script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"21EFC04A-DC4A-4491-BAFC-996F8C127438"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"40304420-26E0-4F6D-B368-7BBC068CCCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B147EAF-E6A0-4D0C-8C27-BA27F844A816"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B729D721-2FD3-4522-8CB3-526B7454D124"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"56B99EBA-8968-4948-9650-36CC2B95AD01"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102631742711795&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/81099","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9518.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5198","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102631742711795&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/81099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9518.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0682","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (cross-site scripting) en Apache Tomcat 4.0.3 permite a atacantes remotos ejecutar secuencias de comandos como otro usuario web mediante un script en la URL mapeado a /servlet/, que no filtra el script cuando una excepción es lanzada por el servelt (throw exception de Java)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102631703811297&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4973","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5193","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9520","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102631703811297&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0683","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Carello 1.3 permite a atacantes remotos la ejecución de programas en el servidor mediante un .. (punto punto) en el parámetro VBEXE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pacific_software:carello:1.3:*:*:*:*:*:*:*","matchCriteriaId":"5BA5C6EB-3EBF-48EA-BBE4-8D6ABE704F9A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0015.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102631808212876&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9521.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6592","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102631808212876&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9521.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0684","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr."},{"lang":"es","value":"Desbordamiento de búfer en las funciones de resolución de DNS que buscan nombres de red y direcciones, como en BIND 4.9.8 y glibc 2.2.5 y anteriores, permiten que servidores DNS remotos ejecuten código arbitrario por medio de una subrutina usada por funciones tales como getnetbyname y getnetbyaddr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"D5272D01-D7FC-41DA-B565-9054AA55FABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0064E411-C26F-4831-B7C4-63E2E1EF98DF"}]}]}],"references":[{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102581482511612&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-139.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/542971","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102581482511612&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/542971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0685","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message."},{"lang":"es","value":"Desbordamiento de búfer en el plug-in de cifrado PGP para Outlook, usado en NAI PGP Destokp Security 7.0.4, Personal Security 7.0.3 y Freeware 7.0.3 (Utilidades Norton), permite a atacantes remotos modificar el montón (heap) y ganar privilegios mediante un mensaje de correo electrónico grande y malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:desktop_security:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"325CDE2D-6C39-4433-AA49-71D1B18188C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6E218A3A-1AC5-456F-93B7-FD27E282F739"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"56051D4A-7A78-423B-9F96-AF73C5451A36"}]}]}],"references":[{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.04/hotfix/ReadMe.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102634756815773&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102639521518942&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9525.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/821139","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4364","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5202","source":"cve@mitre.org"},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.04/hotfix/ReadMe.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102634756815773&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102639521518942&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9525.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/821139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0686","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter."},{"lang":"es","value":"Desbordamiento de búfer en la búsqueda de componentes para iPlanet Web Server (iWS) 4.1 y 6.0 permite a atacantes remotos la ejecución arbitraria de código mediante un argumento largo en el parámetro NS-rel-doc-name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B2091816-7705-462D-BB91-76D07B9A1F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"25F0A9AF-D3CE-44A3-B989-7A54E8578A51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102622220416889&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9506.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/612843","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/vna/sun-iws.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4851","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102622220416889&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9506.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/612843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/vna/sun-iws.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0687","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"through the web code\" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers."},{"lang":"es","value":"La capacidad through the web code de Zope desde la versión 2.0 a la 2.5.1 b1, permite a usuarios no fiables parar el servidor mediante ciertas cabeceras."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.1b1","matchCriteriaId":"EC7D1226-F918-4D63-BD84-2946DFE286E7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9621.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5166","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-060.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5813","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2002-04-15/security_alert","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9621.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5166","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2002-04-15/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0688","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes."},{"lang":"es","value":"El plug-in de capacidad de soporte de índice ZCatalog para Zope 2.4.0 a 2.5.1 permite a usuarios anónimos y código no de confianza evadir ciertas restricciones y llamar a métodos arbitrarios de ínidices de catálogos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"54DFA87E-DC83-40A8-AAC1-40B37F024255"},{"vulnerable":true,"criteria":"cpe:2.3:a:zope:zope:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"484BD5DA-B3D7-41C4-8E02-AE8C4EBEC5A2"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-490","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9610.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-060.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5812","source":"cve@mitre.org"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9610.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zope.org/Products/Zope/Hotfix_2002-06-14/security_alert","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0691","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of \"Cross-Site Scripting in Local HTML Resource\" as identified by CAN-2002-0189."},{"lang":"es","value":"Microsoft Internet Explorer 5.01 y 5.5 permite a atacantes remotos ejecutar secuencias de comandos en la zona del PC local mediante una URL que hace referencia un ficherio de recurso local HTML, una variante de la vulnerabilidad \"Secuencias de comandos en sitios cruzados en recurso HTML local (Cross-Site Scripting in Local HTML Resource)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9938.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5561","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9938.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0692","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request."},{"lang":"es","value":"Desbordamiento de búfer en Intérprete SmartHTML (shtml.dll) en Microsoft FrontPage Server Extensions (FPSE) 2000 y 2002 permite a atacantes remotos causar una denegación de servicio (consumición de CPU) o ejecutar código arbitrario, mediante cierto tipo de petición de fichero web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage_server_extensions:2000:*:*:*:*:*:*:*","matchCriteriaId":"30681E33-8D2B-46A6-ABFE-490B2F686304"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage_server_extensions:2002:*:*:*:*:*:*:*","matchCriteriaId":"E7E274F0-F1B8-4C3D-961B-80B92830ABF9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10194.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10195.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/723537","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5804","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-053","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10194.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10195.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/723537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0693","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function."},{"lang":"es","value":"Desbordamiento de búfer en el control ActiveX de ayuda HTML (hhctrl.ocx) en Microsoft Windows 98, 98 SE, Me, NT4, 2000 y XP, permite a atacantes remotos ejecutar código arbitrario mediante un parámetro largo en la función Alink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103365849505409&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103419115517344&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103435279404182&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10253.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5874","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103365849505409&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103419115517344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103435279404182&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10253.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0694","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka \"Code Execution via Compiled HTML Help File.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10254.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A403","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10254.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0695","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command."},{"lang":"es","value":"Desbordamiento de búfer en el componente Transact-SQL (T-SQL) OpenRowSet de Microsoft Data Access Components (MDAC), versiones 2.5 hasta 2.7 para SQL Server 7.0 ó 2000 permite que atacantes remotos ejecuten código arbitrario por medio de una sentencia que llama al comando OpenRowSet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1B1985AB-FCAB-4ABC-BF03-9E11CD015596"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D331DB4-AA55-4E1B-8B73-14EE2F13E09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A3BFD086-7F94-4482-AC27-E4FAD418B767"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.1.1.3711.11:ga:*:*:*:*:*:*","matchCriteriaId":"ADD39E09-B345-4796-9C67-B2087F806988"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*","matchCriteriaId":"49A5B686-0B8A-4904-8166-24D899D24ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:gold:*:*:*:*:*:*","matchCriteriaId":"092A2E97-C8C4-4F4F-9EC1-70E64DF0052D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"950834D8-A6CE-4636-9ABC-47528001983D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"0D819A49-C10C-47C8-8A82-6CAE4FD5396D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*","matchCriteriaId":"01EAE3CC-D507-40A4-9198-873EE0E3DCE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:gold:*:*:*:*:*:*","matchCriteriaId":"CE28EB73-C986-4184-9C82-AC55432B3BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:sp1:*:*:*:*:*:*","matchCriteriaId":"9BA9FEED-B40F-4673-B9D0-265B4BDC6411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:sp2:*:*:*:*:*:*","matchCriteriaId":"7B11B6C6-D76E-4B6D-9792-89DE5569EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.7:*:*:*:*:*:*:*","matchCriteriaId":"307B13E2-EB93-420B-B47E-0681864DC429"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.7:gold:*:*:*:*:*:*","matchCriteriaId":"6FC21845-6911-4FA4-9B9A-19F533ED3E1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.12.4202.3:*:*:*:*:*:*:*","matchCriteriaId":"D627CFF6-F877-48CB-8C86-F8EF961C08C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:microsoft_data_access_components:2.12.4292.3_ga_clean:*:*:*:*:*:*:*","matchCriteriaId":"2ADFE032-610E-4009-A29D-9E4E64A2427E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9734.php","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/mssql-ors.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5372","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9734.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/mssql-ors.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0696","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames."},{"lang":"es","value":"Microsoft Visual FoxPro 6.0 no registra sus ficheros asociados con Internet Explorer, lo que permite a atacantes remotos ejecutar sin advertencias aplicaciones Visual FoxPro mediante código HTML que hace referencia a nombres de ficheros especialmente creados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_foxpro:6.0:*:*:*:*:*:*:*","matchCriteriaId":"8936D267-41DF-4310-A990-5883787728E3"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-120.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10035.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5633","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/m-120.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10035.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0697","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials."},{"lang":"es","value":"Microsoft Metadirectory Services (MMS) 2.2 permite que atacantes remotos se salten la autentificación y modifiquen datos importantes usando un cliente LDAP para conectarse directamente a MMS y saltarse las comprobaciones de credenciales para MMS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:metadirectory_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"894495FD-6B65-4FC1-A4EF-1F695452352C"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9657.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5308","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9657.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0698","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response."},{"lang":"es","value":"Desbordamiento de búfer en Internet Mail Connector (IMC) para Microsoft Exchange Server 5.5 permite que atacantes remotos ejecuten código arbitrario por medio de una petición EHLO desde un sistema con un nombre largo obtenido por búsqueda DNS inversa, lo cual provoca el desbordamiento de búfer en la respuesta de IMC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"EC01670D-4550-4034-86A5-7879B6334241"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*","matchCriteriaId":"B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*","matchCriteriaId":"E3983529-F4E3-4883-97AF-5BFC87AC3E86"}]}]}],"references":[{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20759","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ326322","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9658.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5306","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ326322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9658.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0699","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML."},{"lang":"es","value":"Vulnerabilidad desconocida en el Control ActiveX de Enrolamiento de Certificados (Certificate Enrollment) en Microsoft Windows 98, Windows 98 Segunda Edición, Windows Millenium, Windows NT 4.0, Windows 2000 y Windows XP, permite a atacantes remotos borrar certificados digitales en el sistema de un usuario mediante HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0700","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka \"Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:content_management_server:2001:*:*:*:*:*:*:*","matchCriteriaId":"6EA42FEC-8770-4409-A0EB-A8DD2BB1480C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:content_management_server:2001:sp1:*:*:*:*:*:*","matchCriteriaId":"307A2076-1512-4A42-94D9-1E90593F0FFF"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9783.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5420","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9783.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5420","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0701","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner to obtain sensitive information that the process obtained while it was running with the extra privileges."},{"lang":"es","value":"ktrace en sistemas opertativos basados en BSD permite al propietario de un proceso con privilegios especiales trazar el proceso después de que sus privilegios han sido bajados, lo que puede permitir al propietario obtener información sensible que el proceso obtuviera mientras corría con privilegios extra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:6.2:stable:*:*:*:*:*:*","matchCriteriaId":"32FCB0B3-8FBE-49FA-B17E-0D5462C9E5B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102650797504351&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9474.php","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata.html#ktrace","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5133","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102650797504351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9474.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata.html#ktrace","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0702","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"747BD317-A9FF-41CD-95D4-FAEA3BA6DBD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc1:*:*:*:*:*:*","matchCriteriaId":"A0148CB1-A2F1-4B66-9F25-B1F7C54A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2DE1BF66-E066-4043-AE4F-2558B23FF759"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc3:*:*:*:*:*:*","matchCriteriaId":"35D41D26-8318-45D0-AD6F-2043AD74F993"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc4:*:*:*:*:*:*","matchCriteriaId":"45242D44-9BDC-4DB1-B24A-4227C76C6F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc5:*:*:*:*:*:*","matchCriteriaId":"76051D4C-4C8C-4010-AE73-A4AAE7CF823E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc6:*:*:*:*:*:*","matchCriteriaId":"AC3987D7-24DD-49A4-84FB-61E9171FFF61"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc7:*:*:*:*:*:*","matchCriteriaId":"3AF3A0F6-8C85-4288-821E-418DE6A37AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc8:*:*:*:*:*:*","matchCriteriaId":"F2D64F9C-6B3A-4E53-A717-4FF7CC56E842"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0063.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000483","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102089498828206&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-12.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9039.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/854315","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-037.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_19_dhcp.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4701","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-028.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102089498828206&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9039.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/854315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-037.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_19_dhcp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0703","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gisle_aas:digest-md5:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F388F7DB-7B49-4A7A-A502-7D3289236B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gisle_aas:digest-md5:2.17:*:*:*:*:*:*:*","matchCriteriaId":"543E9F44-5B20-4BC2-857D-640AFA51D883"},{"vulnerable":true,"criteria":"cpe:2.3:a:gisle_aas:digest-md5:2.18:*:*:*:*:*:*:*","matchCriteriaId":"BBD2AFAF-7836-42B3-B8C7-BE7A7018964C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gisle_aas:digest-md5:2.19:*:*:*:*:*:*:*","matchCriteriaId":"705C6EC0-1152-4C7A-9CC9-938AD16403A8"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2002-081.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9051.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-035.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4716","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9051.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-035.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0704","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Network Address Translation (NAT) capability for Netfilter (\"iptables\") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-212"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.4","versionEndIncluding":"2.4.18","matchCriteriaId":"A5BC6E85-625D-4A3E-83C7-55DD44A2276A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102088521517722&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://online.securityfocus.com/advisories/4116","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9043.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-030.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-086.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4699","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102088521517722&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://online.securityfocus.com/advisories/4116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9043.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-030.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0705","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Reports Server for SurfControl SuperScout WebFilter stores the \"scwebusers\" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*","matchCriteriaId":"00357092-1EB0-47E0-8F58-6E40D26DCD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E4D1AD52-6B1F-453E-8C01-730B229FF97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94D2D054-356F-469B-A30B-7583FDBC08B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*","matchCriteriaId":"65AAA83F-B6AA-4E48-9AF6-BC2E5AB89DCA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10248.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3489","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5856","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10248.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0706","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function."},{"lang":"es","value":"UserManager.js en el Web Reports Server para SurfControl SuperScout WebFilter utiliza cifrado débil para las funciones de administrador, lo cual permite a atacantes remotos descifrar la contraseña de administrador mediante una clave incluida en el código de una función Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*","matchCriteriaId":"00357092-1EB0-47E0-8F58-6E40D26DCD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E4D1AD52-6B1F-453E-8C01-730B229FF97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94D2D054-356F-469B-A30B-7583FDBC08B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*","matchCriteriaId":"65AAA83F-B6AA-4E48-9AF6-BC2E5AB89DCA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10247.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3491","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10247.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0005.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0707","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow."},{"lang":"es","value":"El Servidor de Informes (Web Reports Server) de SurfControl SuperScout WebFilter permite a atacantes remotos causar la denegación de servicios (consumo de CPU) mediante una petición larga GET, posiblemente debido a una desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*","matchCriteriaId":"00357092-1EB0-47E0-8F58-6E40D26DCD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E4D1AD52-6B1F-453E-8C01-730B229FF97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94D2D054-356F-469B-A30B-7583FDBC08B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*","matchCriteriaId":"65AAA83F-B6AA-4E48-9AF6-BC2E5AB89DCA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10242.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5854","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10242.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0708","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences."},{"lang":"es","value":"Vulnerabilidad de Atravesamiento de directorios en los Servidores Web de Informes para SurfControl SuperScout WebFilter que permite a los atantes la lectura arbitraria de ficheros vía peticiones HTTP que contengan  la secuencia \"...\" (tres puntos)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*","matchCriteriaId":"00357092-1EB0-47E0-8F58-6E40D26DCD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E4D1AD52-6B1F-453E-8C01-730B229FF97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94D2D054-356F-469B-A30B-7583FDBC08B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*","matchCriteriaId":"65AAA83F-B6AA-4E48-9AF6-BC2E5AB89DCA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10244.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5857","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10244.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0709","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs."},{"lang":"es","value":"Vulnerabilidades de Inyección de SQL en el Servidor de Informes (Web Reports Server) de SurfControl SuperScout WebFilter permite a los atacantes remotos la ejecución de consultas SQL arbitrarias, mediante la opción RunReport en SimpleBar.dll, y posiblemente otras DLLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*","matchCriteriaId":"00357092-1EB0-47E0-8F58-6E40D26DCD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E4D1AD52-6B1F-453E-8C01-730B229FF97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94D2D054-356F-469B-A30B-7583FDBC08B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*","matchCriteriaId":"65AAA83F-B6AA-4E48-9AF6-BC2E5AB89DCA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10245.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5859","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103359690824103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10245.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0710","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en sendform.cgi 1.44 y anteriores, permite a atacantes remotos la lectura arbitraria de ficheros especificando los archivos deseados en el parámetro BlurbFilePath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rod_clark:sendform.cgi:1.4:*:*:*:*:*:*:*","matchCriteriaId":"E0A17321-A774-4FFA-933A-69E2B0D456C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rod_clark:sendform.cgi:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"E21B3CFC-BE2A-4565-87D1-9463061855AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rod_clark:sendform.cgi:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"954D0FCF-1975-432D-8BFC-506928287CC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rod_clark:sendform.cgi:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"57667163-D641-4DF0-A9C1-49B951C0D615"},{"vulnerable":true,"criteria":"cpe:2.3:a:rod_clark:sendform.cgi:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E24130E4-CBC8-405C-892F-B9908FE7C333"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102809084218422&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9725.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3568","source":"cve@mitre.org"},{"url":"http://www.scn.org/~bb615/scripts/sendform.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5286","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102809084218422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9725.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scn.org/~bb615/scripts/sendform.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0711","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service."},{"lang":"es","value":"Vulnerabilidad desconocida en Cluster Interconnect en HP TruCluster Server 5.0A, 5.1 y 5.1A puede permitir a atacantes remotos causar una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:trucluster_server:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"CBFB42E5-EE46-4891-A463-819AF6F61EAC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:trucluster_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7DEF291-FBB9-4BD3-8FA6-4E6744C86A7D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:trucluster_server:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"9CD5A412-ADBD-4420-85BD-A8A892405BCF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103651974926272&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10551.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4633","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6102","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103651974926272&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10551.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/4633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0713","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.stable6","matchCriteriaId":"74F11907-5BBD-450F-B338-34013E58E0D8"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102674543407606&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-130.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9480.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9481.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9482.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5155","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5156","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5157","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_3.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102674543407606&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9480.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9481.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9482.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0714","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.stable6","matchCriteriaId":"74F11907-5BBD-450F-B338-34013E58E0D8"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102674543407606&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-130.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9479.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5924","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5158","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_3.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102674543407606&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9479.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0715","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.stable6","matchCriteriaId":"74F11907-5BBD-450F-B338-34013E58E0D8"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102674543407606&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-130.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9478.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5154","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_3.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-046.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102674543407606&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-130.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9478.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-044.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/Advisories/SQUID-2002_3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/bugs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0716","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102323070305101&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102323386107641&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9271.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4938","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102323070305101&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102323386107641&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9271.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0717","sourceIdentifier":"cve@mitre.org","published":"2002-07-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102734515923277&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102734516023281&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-21.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9635.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/929115","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=102734515923277&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102734516023281&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9635.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/929115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2002-0718","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka \"Program Execution via MCMS Authoring Function.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:content_management_server:2001:*:*:*:*:*:*:*","matchCriteriaId":"6EA42FEC-8770-4409-A0EB-A8DD2BB1480C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:content_management_server:2001:sp1:*:*:*:*:*:*","matchCriteriaId":"307A2076-1512-4A42-94D9-1E90593F0FFF"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9784.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5421","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9784.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0719","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:content_management_server:2001:*:*:*:*:*:*:*","matchCriteriaId":"6EA42FEC-8770-4409-A0EB-A8DD2BB1480C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:content_management_server:2001:sp1:*:*:*:*:*:*","matchCriteriaId":"307A2076-1512-4A42-94D9-1E90593F0FFF"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9785.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5422","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9785.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0720","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code."},{"lang":"es","value":"Una rutina manejadora en el Network Connection Manager (NCM) permite a usuarios locales ganar privilegios mediante un complejo ataque que hace que el manejador corra en el contexto LocalSystem con código especificado por el usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9856.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5480","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-042","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A26","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9856.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A26","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0721","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt."},{"lang":"es","value":"Microsoft SQL Server 7.0 y 2000 se instala con permisos débiles para ciertos procedimientos almacenados (stored procedures) extendidos que están asociados con funciones de ayuda, lo que podría permitir a usuairos sin privilegios, y posiblemente atacantes remotos, ejecutar procedimentos almacenados con privilegios de administrador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0087.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102950473002959&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102950792606475&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/399531","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/818939","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/939675","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/mssql-esppu.txt","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-043","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102950473002959&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102950792606475&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/399531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/818939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/939675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/mssql-esppu.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0722","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue box to trick users into thinking that the file type is safe to download, aka \"File Origin Spoofing.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*","matchCriteriaId":"3BFFB565-F656-43E3-89E1-E412DC4C9D41"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103054692223380&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9937.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5559","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103054692223380&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9937.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0723","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka \"Cross Domain Verification in Object Tag.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9537.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5196","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9537.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0724","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka \"Unchecked Buffer in Network Share Provider Can Lead to Denial of Service\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103011556323184&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/250635","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/311619","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/342243","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-045","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A189","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103011556323184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/250635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/311619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/342243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0725","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file."},{"lang":"es","value":"El sistema de archivos NTFS en Windows NT4.0 y Windows 2000 SP2 permite a atacantes locales ocultar las actividades de uso de ficheros mediante un enlace duro al fichero objetivo, lo que causa la auditoría se haga sobre el enlace y no sobre el fichero objetivo."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*","matchCriteriaId":"FF99A17F-9469-4937-A23B-FD5C8B37087B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2000/a081602-1.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9869.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5484","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.atstake.com/research/advisories/2000/a081602-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9869.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0726","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via a long server name field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:tsac_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"CD7A78E3-D25A-4A22-B5C7-6EE10A750C69"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a082802-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9934.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5554","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-046","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a082802-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9934.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0727","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method."},{"lang":"es","value":"La función de Host en Microsoft Office Web  Componentes (OWC) 2000 y 2002 está expuesta en componentes marcados como seguros para secuencias de comandos (scripting), lo que permite a atacantes ejecutar comandos arbitrarios mediante el método setTimeout."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2000:*:*:*:*:*:*:*","matchCriteriaId":"A431CA59-8BD3-48CB-82BC-8FDCFE7440FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*","matchCriteriaId":"316D6CD7-3B2B-499C-ADBE-088981DFD306"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*","matchCriteriaId":"2AE2D3E0-49E4-410E-B63A-753BDE8995BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101829645415486&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8777.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3006","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4449","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101829645415486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8777.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0728","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk."},{"lang":"es","value":"Desbordamiento de búfer en la lectura progresiva con libpng 1.2.4 y 1.0.14 permite que atacantes remotos provoquen una denegación de servicio por medio de un stream de datos PNG que tiene más datos IDAT de los que se indican en el chunk IHDR."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"26C6F860-C157-4FBA-ABD9-7C4451B241D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7A243D85-1BF9-4F26-9BFE-54AA2C92C577"}]}]}],"references":[{"url":"ftp://swrinde.nde.swri.edu/pub/png-group/archives/png-list.200207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000512","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-152.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-140","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-049.php","source":"cve@mitre.org"},{"url":"ftp://swrinde.nde.swri.edu/pub/png-group/archives/png-list.200207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-049.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0729","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator."},{"lang":"es","value":"Microsoft SQL Server 2000 permite que atacantes remotos provoquen una denegación de servicio por medio de un paquete 0x08 mal construido al que le falta un separador de punto y coma."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102760196931518&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102760479902411&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102760196931518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102760479902411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0730","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados en guestbook.pl para el Philip Chinery's Guestbook  1.1 permite que atacantes remotos ejecuten Javascript o HTML por medio de campos como el nombre, la dirección de e-mail o la página de inicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:philip_chinery:philip_chinerys_guestbook:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0CE974DE-7559-4E05-B9CF-85BBF79B2F6E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8916.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4566","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8916.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0731","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados en los scripts de muestra para vqServer permite que atacantes remotos ejecuten código arbitrario por medio de un link que contiene el script en argumentos a scripts de demostración como \"respond.pl\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.9:*:*:*:*:*:*:*","matchCriteriaId":"C0535279-4365-4DB8-9532-F2AA40F5FE2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.9.30:*:*:*:*:*:*:*","matchCriteriaId":"A992C284-2A13-4E7F-9589-0FCECBD9FD67"},{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.9.47:*:*:*:*:*:*:*","matchCriteriaId":"B0F68A5D-493E-43FC-94AD-A1D64AC6779C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vqsoft:vqserver:1.9.55:*:*:*:*:*:*:*","matchCriteriaId":"A8EF5BF5-CDFF-476C-84D7-D0F0070DF514"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8935.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4573","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8935.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0732","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados  en MyGuestbook 1.0  permite que atacantes remotos ejecuten código script arbitrario o inyecten HTML por medio de campos como \"nombre de usuario\" o \"comentarios\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:levcgi.com:myguestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5C14378A-00F5-469E-94B2-0A92581CF721"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0422.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8968.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.levcgi.com/programs.cgi?program=myguestbook&action=history","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/4651","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0422.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8968.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.levcgi.com/programs.cgi?program=myguestbook&action=history","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/4651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0733","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message."},{"lang":"es","value":"Vulnerabilidad de secuencia de comandos en sitios cruzados en thttpd 2.20 y anteriores permite a atacantes remotos la ejecución arbitraria de rutinas mediante una URL a una página inexistente, lo cual provoca que thttpd inserte la rutina en un mensaje de error 404."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.20b:*:*:*:*:*:*:*","matchCriteriaId":"888C5BBF-F578-4B17-BC5E-645BC7BFC5E7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0155.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.acme.com/software/thttpd/#releasenotes","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes1.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9029.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5125","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4601","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.acme.com/software/thttpd/#releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9029.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0734","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, which allows remote attackers to execute arbitrary PHP code via a URL that sets the $b2inc variable to point to a malicious program stored on a remote server."},{"lang":"es","value":"b2edit.showposts.php en B2 2.0.6pre2 y anteriores no carga correctamente el fichero b2config.php en algunas configuraciones, lo cual permite a atacantes remotos la ejecución arbitraria de código PHP mediante una URL que situa a la variable $b2inc apuntando a un programa  'Caballo de Troya' almacenado en un servidor remoto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michel_valdrighi:b2:0.6_pre:*:*:*:*:*:*:*","matchCriteriaId":"6794C12B-FCBD-445B-BC6E-F69532F988DF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0027.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://cafelog.com/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9013.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4673","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://cafelog.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9013.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0735","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función logging() en el módulo de autenticación de C-Note Squid LDAP 2.0.2 y anteriores  permite que un atacante remoto provoque una denegación de servicio y, posiblemente, ejecute código arbitrario desencadenando mensajes de log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:c-note:squid_auth_ldap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"54B44E66-15D8-4A88-AC2D-48DC9E266222"},{"vulnerable":true,"criteria":"cpe:2.3:a:c-note:squid_auth_ldap:1.0.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"B7841A24-8B16-4E97-808A-5F97FC6B93F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:c-note:squid_auth_ldap:1.2_b2:*:*:*:*:*:*:*","matchCriteriaId":"F46058D7-47B7-4926-8CE1-7383F6AC370B"},{"vulnerable":true,"criteria":"cpe:2.3:a:c-note:squid_auth_ldap:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3626ACF5-73C9-413B-956E-D3405B1BAF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_180:*:*:*:*:*:*:*","matchCriteriaId":"EE3D662B-1908-4DC7-8BE7-6DBC1B1AF5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_181:*:*:*:*:*:*:*","matchCriteriaId":"8D4E9E35-BE21-41B5-9595-371D1D7146B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_183:*:*:*:*:*:*:*","matchCriteriaId":"DA053296-A9AD-4534-9EFA-9F3C95DAF973"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_184:*:*:*:*:*:*:*","matchCriteriaId":"58A1A31A-166C-4A7B-AC38-C6A1F673D539"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_185:*:*:*:*:*:*:*","matchCriteriaId":"5FDC0A38-1291-43EF-BC5F-9374DDB14D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_185.1:*:*:*:*:*:*:*","matchCriteriaId":"9C32D721-7493-40C7-AD52-07DDE4839FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_185.2:*:*:*:*:*:*:*","matchCriteriaId":"E03A9BAD-3794-4417-BE51-7E5E3F36A531"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_185.3:*:*:*:*:*:*:*","matchCriteriaId":"1105FF78-F6BC-4A2E-860B-39E45A9B66D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_186:*:*:*:*:*:*:*","matchCriteriaId":"60A9FDE7-0DA7-40A1-B439-E069F7B42180"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_187:*:*:*:*:*:*:*","matchCriteriaId":"AB9BE217-7E39-4E73-8FF3-60CC08B13079"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_188:*:*:*:*:*:*:*","matchCriteriaId":"58FAF535-B643-4DE1-B13D-C349EC03B54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:build_189:*:*:*:*:*:*:*","matchCriteriaId":"6D658F88-C016-4C4B-B4E1-B2A8C0C68107"},{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:pam_ldap:build_143:*:*:*:*:*:*:*","matchCriteriaId":"EF9E106F-6FA4-4415-97B8-8C92D4088548"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102070267500932&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271173","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9019.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102070267500932&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/271173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9019.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0736","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank."},{"lang":"es","value":"Microsoft BackOffice 4.0 and 4.5, cuando se configura para ser accesible por otros sistemas, permite a los atacantes remotos saltarse la autenticación y acceder a las páginas administrativas ASP por medio de una petición HTTP con un tipo de autorización (auth_type) que no está en blanco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:backoffice:4.0:*:*:*:*:*:*:*","matchCriteriaId":"60EAD9D1-B3E1-4DE3-9FCE-CBC2BC025561"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:backoffice:4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6B7299F-C779-4E04-AA33-F91467A9EC37"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/support/kb/articles/q316/8/38.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8862.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4528","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/support/kb/articles/q316/8/38.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8862.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0737","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character."},{"lang":"es","value":"El servidor web Sambar anterior a la versión 5.2 beta 1 permite a atacantes remotos obtener código fuente de los scrips de servidor, o provocar una denegación de servicio por medio de dispositivos DOS, usando una URL que acaba con un espació  y un caracter nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"A167B292-3A6A-4C8D-BABD-7ACAD9D7149C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0026.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268121","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8876.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5123","source":"cve@mitre.org"},{"url":"http://www.sambar.com/security.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4533","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/268121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8876.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sambar.com/security.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0738","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using \"&={script}\" syntax."},{"lang":"es","value":"MHonArc 2.5.2 y anteriores no filtra adecuadamente Javascript de e-mails archivados, lo que permitiría a atacantes remotos ejecutar script en clientes web por medio de (1) separar el tag SCRIPT en trozos más pequeñas, (2) incluir el script en un argumento SRC del tag IMG, o (3) usando \"\"&={script}\"\" sintaxis."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mhonarc:mhonarc:2.5:*:*:*:*:*:*:*","matchCriteriaId":"273DC66A-836F-4A89-9989-73391AEF4111"},{"vulnerable":true,"criteria":"cpe:2.3:a:mhonarc:mhonarc:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"203DDEC1-6CE6-46BB-8136-83A216660650"},{"vulnerable":true,"criteria":"cpe:2.3:a:mhonarc:mhonarc:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0DF67263-0614-457E-80E0-38EEE786DD5A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0260.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-163","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8894.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mhonarc.org/MHonArc/CHANGES","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4546","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8894.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mhonarc.org/MHonArc/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0739","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page."},{"lang":"es","value":"Scripting de sitio cruzado en PostCalendar 3.02 permite que atacantes remotos inserten HTML arbitrario y script, y roben cookies, modificando una entrada de calendario en su página \"preview\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postcalendar:3.0:*:*:*:*:*:*:*","matchCriteriaId":"59855406-4013-4898-96B7-BBCF4D5207D0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0288.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8899.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4563","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8899.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0740","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument."},{"lang":"es","value":"Desbordamiento de búfer en slrnpull para el paquete SLRN, cuando tiene activo el bit setuid o setgid, permite que usuarios locales obtengan privilegios mediante un argumento -d (SPOOLDIR) largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slrn_development_team:slrn:0.9.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1CB49EE1-B605-48CB-8478-28942E87D561"},{"vulnerable":true,"criteria":"cpe:2.3:a:slrn_development_team:slrn:0.9.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DDE3F362-F540-4F19-810B-D8556F7E8945"},{"vulnerable":true,"criteria":"cpe:2.3:a:slrn_development_team:slrn:0.9.6.4:*:*:*:*:*:*:*","matchCriteriaId":"F5CF58A5-5548-4280-BEA3-967AEB2E910C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269667","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/270235","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8910.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4569","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/269667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/270235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8910.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0741","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC."},{"lang":"es","value":"psyBNC 2.3 permite que atacantes remotos causen una denegación de servicio enviando un comando PASS con un argumento muy largo y matando rápidamente la conexión, que no es terminada adecuadamente por psyBNC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psychoid:psybnc:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E6AB8BED-ECE2-4EE3-B148-F1797C492DD5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0322.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269131","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8912.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4570","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0322.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/269131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8912.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0742","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pioout on AIX 4.3.3."},{"lang":"es","value":"Desbordamiento de búfer en pioout sobre AIX 4.3.3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0743","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow."},{"lang":"es","value":"mail y mailx en AIX 4.3.3 generan un \"core dump\" cuando se les llama con un argumento muy largo, indicando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0744","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow."},{"lang":"es","value":"namerslv en AIX 4.3.3 crea un core cuando se le llama con un argumento muy largo, posiblemente como resultado del desbodamiento de un búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0745","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uucp in AIX 4.3.3."},{"lang":"es","value":"Desbordamiento de búfer en uucp en 4.3.3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0746","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument."},{"lang":"es","value":"Vulnerabilidad en template.dhcpo en AIX 4.3.3 relacionada con un argumento \"linker\" inseguro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0747","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lsmcode in AIX 4.3.3."},{"lang":"es","value":"Desbordamiento de búfer en lsmcode en AIX 4.3.3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q2/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0748","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations."},{"lang":"es","value":"LabVIEW Web Server 5.1.1 hasta 6.1 permite que atacantes remotos provoquen una denegación de servicio mediante una petición GET de HTTP que acaba en dos caracteres de nueva línea, en vez de la combinación esperada (retorno de carro + nueva línea)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_instruments:labview:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"0414122B-69F6-4634-91E0-356EB8C218F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_instruments:labview:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2EA20D27-ED92-49CA-9BA5-C75C664F8BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_instruments:labview:6.1:*:*:*:*:*:*:*","matchCriteriaId":"DA2673D0-B731-4596-8C79-020A2ECBF2BE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0323.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://digital.ni.com/public.nsf/websearch/4C3F86E655E5389886256BA00064B22F?OpenDocument","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8919.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4577","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://digital.ni.com/public.nsf/websearch/4C3F86E655E5389886256BA00064B22F?OpenDocument","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8919.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0749","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field."},{"lang":"es","value":"El script cgi csMailto.cgi permite que atacantes remotos ejecuten código arbitrario mediante metacaracteres de la shell en el campo \"form-attachment\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csmailto:*:*:*:*:*:*:*:*","matchCriteriaId":"7836EB22-C26E-45B9-873D-E7789E276BC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8930.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4579","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8930.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0750","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field."},{"lang":"es","value":"El script cgi csMailto.cgi permite que atacantes remotos lean cualquier fichero, especificando el nombre del fichero en el campo \"form-attachment\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csmailto:*:*:*:*:*:*:*:*","matchCriteriaId":"7836EB22-C26E-45B9-873D-E7789E276BC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0751","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a \"spam proxy\" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters."},{"lang":"es","value":"El script cgi csMailto.cgi permite que atacantes remotos usen csMailto como un \"proxy de spam\" y envíen mail a cualquier usario, por medio de los parámetros \"form-to\", \"form-from\" o \"form-results\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csmailto:*:*:*:*:*:*:*:*","matchCriteriaId":"7836EB22-C26E-45B9-873D-E7789E276BC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4579","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0752","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file."},{"lang":"es","value":"El script cgi csMailto.cgi deja datos en un fichero que es accesible desde el documento raíz del web, lo que permitiría que atacantes remotos obtengan información privada accediendo a estos ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csmailto:*:*:*:*:*:*:*:*","matchCriteriaId":"7836EB22-C26E-45B9-873D-E7789E276BC8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0753","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie."},{"lang":"es","value":"Desbordamiento de búfer en Talentsoft Web+ 5.0 permite que atacantes remotos ejecuten código arbitrario mediante una petición HTTP con una cookie larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+_server:4.6:*:*:*:*:*:*:*","matchCriteriaId":"0C824ABB-FA91-4C52-9D2E-AC7BD334CFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:talentsoft:web\\+_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"29247C6B-6359-43C6-A1D1-4E17D4CDF4A3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0210.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8861.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4530","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0210.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8861.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0754","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them."},{"lang":"es","value":"Kerberos 5 su (k5su) en FreeBSD 4.4 y anteriores se basa en la llamada al sistema getlogin para determinar si el usuario que esta ejecutando k5su es root, lo cual podría permitir a procesos sin privilegios, la obtención de permisos si ese proceso tiene un getlogin como root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freebsd:heimdal:0.4e:*:*:*:*:*:*:*","matchCriteriaId":"01C49637-6EB4-4842-B331-67F01C48B686"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4e:*:*:*:*:*:*:*","matchCriteriaId":"D034C52F-7D52-427B-A803-97ABD587306D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:07.k5su.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7956.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3919","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:07.k5su.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7956.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0755","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root."},{"lang":"es","value":"Kerberos 5 su (k5su) en FreeBSD 4.5 y anteriores no verifican que el usuario sea miembro del grupo antes de otorgarle privilegios de superusuario, de modo podría permitir a usuarios no autorizados la ejecución de comandos como root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release:*:*:*:*:*:*","matchCriteriaId":"41AF7A5F-3CB3-4CE9-B7AF-20338D15EFEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:24.k5su.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9125.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4777","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:24.k5su.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9125.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0756","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en la página de autenticación de:\r\n\r\n Webmin 0.96\r\n Usermin 0.90\r\n\r\nque permite  a atacantes remotos la inserción de código en una página de error y posiblemente el robo de cookies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"CD343610-8BE2-4916-AF30-66B21330D84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"0D54B4D9-5218-41F9-A701-F960199EE520"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"B352FF6B-989C-4540-B434-9452851F745C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0B0813F3-1886-481E-8822-4BD199C4934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*","matchCriteriaId":"6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C5C38C77-246F-41A9-A3D5-99C2DDA1DAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*","matchCriteriaId":"C1F2D028-F2F9-4CE0-A24B-7DB44D488D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*","matchCriteriaId":"82EE7A9B-5688-4933-95B9-476873D44A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*","matchCriteriaId":"30A57D7A-B989-4D82-B667-029A245AA6D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*","matchCriteriaId":"C664186B-DD40-490B-B2DE-4279B00102F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9036.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4694","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9036.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0757","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations."},{"lang":"es","value":"Webmin 0.96 y Usermin 0.90 con tiempo de espera para contraseñas habilitado, permite a atacantes locales y posiblemente a remotos, evitar la autenticación y obtener privilegios mediante ciertos caracteres de control en la información de autenticación, que podría forzar a Webmin o Usermin a aceptar combinaciones arbitrarias de usuario/sesión (username/session ID)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"CD343610-8BE2-4916-AF30-66B21330D84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"0D54B4D9-5218-41F9-A701-F960199EE520"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"B352FF6B-989C-4540-B434-9452851F745C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0B0813F3-1886-481E-8822-4BD199C4934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*","matchCriteriaId":"6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C5C38C77-246F-41A9-A3D5-99C2DDA1DAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*","matchCriteriaId":"C1F2D028-F2F9-4CE0-A24B-7DB44D488D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*","matchCriteriaId":"82EE7A9B-5688-4933-95B9-476873D44A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*","matchCriteriaId":"30A57D7A-B989-4D82-B667-029A245AA6D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*","matchCriteriaId":"C664186B-DD40-490B-B2DE-4279B00102F2"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271466","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9037.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4700","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9037.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0758","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file."},{"lang":"es","value":"La rutina ifup-dhcp en el paquete sysconfig de SuSE 8.0, permite a atacantes remotos la ejecución arbitraria de comandos mediante respuestas spoofed DHCP, las cuales son almacenadas y ejecutadas en un fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9040.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_016_sysconfig_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4695","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9040.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_016_sysconfig_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0759","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive."},{"lang":"es","value":"bzip2 anteriores a 1.0.2 en FreeBSD 4.5 y anteriores, y otros Sistemas Operativos, no usan la etiqueta O_EXCL para crear ficheros durante la descomprensión y no alertan al usuario de que un fichero ya existente podría ser sobreescrito, lo cual podría permitir a atacantes remotos la sobreescritura de ficheros mediante un archivo bzip2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"325C63C7-740D-42E1-B8B1-51125DE57F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0a:*:*:*:*:*:*:*","matchCriteriaId":"550690C7-32D0-4126-B272-D2254A2EF434"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0b:*:*:*:*:*:*:*","matchCriteriaId":"DFE746CF-6890-4259-A9DB-5F77B592D1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0c:*:*:*:*:*:*:*","matchCriteriaId":"6C95FE39-842A-45D1-A858-D438C0C15B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"D8AD6CE9-FCE5-4926-A1D1-0706DFE4A6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5b:*:*:*:*:*:*:*","matchCriteriaId":"D54DD36D-7A6C-4649-855A-D81F29FFB6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5c:*:*:*:*:*:*:*","matchCriteriaId":"0B87D623-6CF8-4BDB-A9FB-CF07589AF1CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5d:*:*:*:*:*:*:*","matchCriteriaId":"5FE3BFE7-75B6-4284-9EDC-78D452CD9174"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B10B3BF9-BE42-468D-89E8-8D4A5FEDC734"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E55F00B1-D48B-40A6-872F-959598D7E6E4"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9126.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4774","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9126.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0760","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed."},{"lang":"es","value":"Condición de Carrera (Race condition) en bzip2 anteriores a 1.0.2 en FreeBSD 4.5 y anteriores, y otros Sistemas Operativos, descomprime ficheros con permiso de lectura a todo el mundo antes de establecer los permisos especificados en el archivo bzip2, lo cual podría permitir a usuarios locales la lectura de ficheros según estan siendo descomprimidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"325C63C7-740D-42E1-B8B1-51125DE57F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0a:*:*:*:*:*:*:*","matchCriteriaId":"550690C7-32D0-4126-B272-D2254A2EF434"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0b:*:*:*:*:*:*:*","matchCriteriaId":"DFE746CF-6890-4259-A9DB-5F77B592D1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0c:*:*:*:*:*:*:*","matchCriteriaId":"6C95FE39-842A-45D1-A858-D438C0C15B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"D8AD6CE9-FCE5-4926-A1D1-0706DFE4A6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5b:*:*:*:*:*:*:*","matchCriteriaId":"D54DD36D-7A6C-4649-855A-D81F29FFB6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5c:*:*:*:*:*:*:*","matchCriteriaId":"0B87D623-6CF8-4BDB-A9FB-CF07589AF1CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5d:*:*:*:*:*:*:*","matchCriteriaId":"5FE3BFE7-75B6-4284-9EDC-78D452CD9174"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B10B3BF9-BE42-468D-89E8-8D4A5FEDC734"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E55F00B1-D48B-40A6-872F-959598D7E6E4"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9127.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4775","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9127.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0761","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended."},{"lang":"es","value":"bzip2 anterioes a 1.0.2 en FreeBSD 4.5 y anteriores, y otros Sistemas Operativos, utilizan los permisos de enlaces simbólicos (symbolic links) en lugar de los del archivo actual cuando crea un nuevo fichero, lo cual podría causar que el fichero fuese extraido con unos permisos menos restrictivos de lo que se pretendía."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"325C63C7-740D-42E1-B8B1-51125DE57F61"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0a:*:*:*:*:*:*:*","matchCriteriaId":"550690C7-32D0-4126-B272-D2254A2EF434"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0b:*:*:*:*:*:*:*","matchCriteriaId":"DFE746CF-6890-4259-A9DB-5F77B592D1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.0c:*:*:*:*:*:*:*","matchCriteriaId":"6C95FE39-842A-45D1-A858-D438C0C15B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:*","matchCriteriaId":"D8AD6CE9-FCE5-4926-A1D1-0706DFE4A6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5b:*:*:*:*:*:*:*","matchCriteriaId":"D54DD36D-7A6C-4649-855A-D81F29FFB6C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5c:*:*:*:*:*:*:*","matchCriteriaId":"0B87D623-6CF8-4BDB-A9FB-CF07589AF1CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:0.9.5d:*:*:*:*:*:*:*","matchCriteriaId":"5FE3BFE7-75B6-4284-9EDC-78D452CD9174"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B10B3BF9-BE42-468D-89E8-8D4A5FEDC734"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E55F00B1-D48B-40A6-872F-959598D7E6E4"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9128.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4776","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9128.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0762","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files."},{"lang":"es","value":"El paquete shadow en SuSE 8.0 permite a usuarios locales la destrucción de los ficheros /etc/passwd y /etc/shadowo asignar privilegios extra de grupo a algunos usuarios cambiando los límites del tamaño del fichero antes de las llamadas a programas que modifican el fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9102.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_17_shadow.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9102.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_17_shadow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0763","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server."},{"lang":"es","value":"Vulnerabilidad en la administrador del servidor para HP VirtualVault 4.5 en HP-UX 11.04 permite a servidores web externos o procesos externos con privilegios, evitar las restricciones de acceso y establecer conexión con el servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.5:*:*:*:*:*:*:*","matchCriteriaId":"2609CA23-B892-428D-93D1-D210B8D5741D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0037.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9038.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4690","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9038.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0764","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0147.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0153.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9107.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.phorum.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4763","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9107.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.phorum.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0765","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F48519C6-0C28-49A5-94C7-EF3AA88E2667"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0235.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9215.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata.html#sshbsdauth","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5113","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4803","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9215.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata.html#sshbsdauth","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0766","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271702","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9048.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/314963","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html#fdalloc2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5114","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5715","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4708","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9048.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/314963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html#fdalloc2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0767","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:richard_gooch:simpleinit:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EF1AF792-0B62-430C-BB35-46C2423E69CB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276739","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9357.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5001","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/276739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9357.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0768","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:lukemftp:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5","matchCriteriaId":"A9CC0822-C71D-4F6A-BB65-A4F82BA1C34C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9130.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_18_lukemftp.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9130.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_18_lukemftp.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0769","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:ata-186:*:*:*:*:*:*:*:*","matchCriteriaId":"7E19AB4C-2963-412E-B46C-17B37EF43CFA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0083.html","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ata186-password-disclosure.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9056.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9057.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4711","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4712","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/ata186-password-disclosure.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9056.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9057.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0770","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand \"$\" macros, which causes the server to expand the macros and leak the information, as demonstrated using \"say $rcon_password.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_2i_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"F9ABD6BA-1FF0-4D83-8A3C-003DCA10FD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_2i_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"929A0526-9F67-422F-9422-3E44E3FB249D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/272548","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9095.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/970915","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/11187","source":"cve@mitre.org"},{"url":"http://www.quakesrc.org/forum/topicDisplay.php?topicID=160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4744","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/272548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9095.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/970915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/11187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.quakesrc.org/forum/topicDisplay.php?topicID=160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0771","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewcvs:viewcvs:0.8:*:*:*:*:*:*:*","matchCriteriaId":"F8F85596-E372-4EAD-8F1D-F4993E156A02"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewcvs:viewcvs:0.9:*:*:*:*:*:*:*","matchCriteriaId":"11D97AD9-94E5-4541-955F-EDDECB314B4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewcvs:viewcvs:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"62688C55-70C0-4B09-9D65-4DE2271904F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"BFD8A138-B02C-461D-82DB-0F1670E98484"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0161.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9112.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4818","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9112.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0772","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*","matchCriteriaId":"94170D21-1196-4BA2-AEB9-C28A4F08B05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3364FE23-345B-428B-BF18-A0AE4D23B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"1220294A-27FC-4D1C-BFA8-2B7189E04469"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9104.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4759","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9104.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0773","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*","matchCriteriaId":"94170D21-1196-4BA2-AEB9-C28A4F08B05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3364FE23-345B-428B-BF18-A0AE4D23B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"1220294A-27FC-4D1C-BFA8-2B7189E04469"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9105.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4761","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9105.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0774","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*","matchCriteriaId":"94170D21-1196-4BA2-AEB9-C28A4F08B05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3364FE23-345B-428B-BF18-A0AE4D23B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"1220294A-27FC-4D1C-BFA8-2B7189E04469"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9131.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4779","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9131.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0775","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*","matchCriteriaId":"94170D21-1196-4BA2-AEB9-C28A4F08B05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*","matchCriteriaId":"3364FE23-345B-428B-BF18-A0AE4D23B03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CDDE2038-F5C8-49A9-86D6-E94DA2A93016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"64E9E17B-92A3-434F-B238-8B403BE4F539"},{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"1220294A-27FC-4D1C-BFA8-2B7189E04469"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://hostingcontroller.com/english/logs/sp2log.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/drivebrowse.zip","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://hostingcontroller.com/english/logs/sp2log.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.hostingcontroller.com/english/patches/ForAll/download/drivebrowse.zip","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0776","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the \"UpdateUser\" hot fix."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*","matchCriteriaId":"A7F80268-2491-4900-ABEB-9DDBC9E54DB9"}]}]}],"references":[{"url":"http://hostingcontroller.com/english/logs/sp2log.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/282129","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9554.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5229","source":"cve@mitre.org"},{"url":"http://hostingcontroller.com/english/logs/sp2log.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/282129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9554.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0777","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long \"bind DN\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB3992E3-D0C8-4A48-B4E1-D31B0D79CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"65248233-61A3-4085-8808-6FC2FD87EAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B37214DE-41E8-4DD4-AFBF-E608B88D6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6E11FF5E-9B3D-4818-B091-1286ECF47937"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58084475-62DE-482E-B34B-A09EBC190C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"838CCBFF-1CD5-4B9F-8EA3-97A097F7E69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A50719E9-10F0-4FA4-9ADF-771D8995BCBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7A965D10-F783-423B-BD70-AB11725D0172"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5700938-EE34-4A16-BE98-74EAA4A48249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF543E9-F893-4086-BD97-ECB43EEF26BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3818F47-0A00-4984-857D-DBF87DDB71B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E2D897-B37B-43E1-96D9-9BF7A5AFC842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4098FA6A-356C-4AA5-B948-AAD642354F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A7920844-DD87-47EF-B3CF-DA2DE04FC7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.1:*:*:*:*:*:*:*","matchCriteriaId":"606E35DC-DF69-4A95-9116-111D3AF28EA9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0172.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9116.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4780","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0172.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9116.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0778","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*","matchCriteriaId":"71568B23-8055-4625-A13C-E5B9032DEEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EC79750C-9CA0-4A9F-BF18-06BEF13A3F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E6766073-A568-4299-B528-3F29C5D9A421"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*","matchCriteriaId":"0F368653-EF5E-43EB-93CB-1CCD0FFD6FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5F52DDF6-B959-4221-834E-2371DF46BD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4E842071-A161-4F02-B0CC-D3A6582D9930"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*","matchCriteriaId":"2B947FCA-35E1-4F88-A8EA-7C90BBA0294F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"899E4CF2-888D-45C9-BE3A-EFAEA031AB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*","matchCriteriaId":"B7705CE1-4982-45AF-8CB1-271225180BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*","matchCriteriaId":"DDF9A0A5-3107-44F6-9383-A2FFE15377AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*","matchCriteriaId":"97C1B960-F088-4486-BB87-37BBD713F184"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*","matchCriteriaId":"ADA1C53F-0548-47ED-8C81-534D621BC00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"031184D7-F962-4490-ACFD-2BBBEA25FBE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*","matchCriteriaId":"85526696-0617-45E2-B2DA-8AAB05F0E255"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6EB111F-D6C5-4906-8316-A317B27BC599"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*","matchCriteriaId":"D3FF8F15-7851-4052-B353-76251BB55F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*","matchCriteriaId":"5362FE38-A346-4959-B1B6-E4E981BF2292"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"35B22B2B-E5F3-4A12-AF17-F8E54756FF13"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*","matchCriteriaId":"49C0C24A-36A3-4C25-9279-3E2F495AA59D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*","matchCriteriaId":"359CA948-212B-49F1-A659-7E8FC2E6F845"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*","matchCriteriaId":"C84BE6AF-044E-46D6-94F4-6A9F665F62CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*","matchCriteriaId":"A2C96FD2-7C6B-4526-A3EE-0CE578526B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4DA8998C-8D76-4D5A-842E-19DCB07AFC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_3.1:*:*:*:*:*:*:*","matchCriteriaId":"41E0ADD3-EF9C-4904-83D8-AAB9729A33C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_4.0:*:*:*:*:*:*:*","matchCriteriaId":"2A206212-F490-4A31-989F-C2F4A01B1DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA3940DE-75B0-41BF-A6B3-4D01091D7A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C9A7E8B-B8A9-430B-8712-7CA4C60B349E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2721E909-0237-4633-BAE0-758A1357B23C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_505:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"39E1C621-2D52-4BD1-BFD6-FA108585DAEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_505:3.0:*:*:*:*:*:*:*","matchCriteriaId":"67221FA2-658B-4AFD-AABA-96B2A9F1CE1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_550:*:*:*:*:*:*:*:*","matchCriteriaId":"136D64BE-D843-4D78-98CC-66B7ABB615D4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_550:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"688DA387-5DDE-4C39-B91F-3FBA96BEC442"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_550:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"88ABC2DC-FB9A-42EF-9F96-B68563EAE766"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_550:3.0:*:*:*:*:*:*:*","matchCriteriaId":"276FA49D-9757-41A9-8C76-4A721BA9CFCB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_570:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7ADDC0B5-AA92-47CD-A717-8D7A5E6429AD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_570:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A497A81D-0593-403A-BDC7-57ABD07041E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_570:3.0:*:*:*:*:*:*:*","matchCriteriaId":"52238E75-22DB-4678-A0AF-72D584DDB816"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:cache_engine_570:570:*:*:*:*:*:*:*","matchCriteriaId":"8FCDF964-0F7C-46EF-8D88-BC0CC1844CAC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_router_4430:*:*:*:*:*:*:*:*","matchCriteriaId":"B5A3BF42-76DF-47E2-A7B4-FAC4D693F493"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9082.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4751","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9082.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0779","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.6:sp1a:*:*:*:*:*:*","matchCriteriaId":"4D4622F5-35E8-4119-BB88-022049AC8762"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271475","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9031.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9031.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0780","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.6:sp1a:*:*:*:*:*:*","matchCriteriaId":"4D4622F5-35E8-4119-BB88-022049AC8762"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271475","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9032.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4697","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9032.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0781","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.6:sp1a:*:*:*:*:*:*","matchCriteriaId":"4D4622F5-35E8-4119-BB88-022049AC8762"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271475","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9033.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4698","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9033.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0782","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3DCB9A5D-862A-4266-94D3-385B611A7960"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9062.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9062.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0783","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"F49659B4-2878-4D31-BCB8-11CA38D6FA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:5.12:*:win32:*:*:*:*:*","matchCriteriaId":"FAA9EEAD-FABF-4C4A-A38E-E3A93D7E5325"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0615E0B9-EFCF-4CDD-81E3-0E351DEB2C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0:*:win32:*:*:*:*:*","matchCriteriaId":"041E7A50-D2D9-4469-88EA-D8D7CE5EC9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"964BC1D9-10D2-4064-A0AD-5DD6E6A568E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:win32:*:*:*:*:*","matchCriteriaId":"25F0B4BE-F2B7-4774-8AAC-75239180D99B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0117.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9096.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4745","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9096.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0784","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lysias:lidik_webserver:0.7b:*:*:*:*:*:*:*","matchCriteriaId":"EA2DDCAF-F707-4309-87AF-22E75CA0AB62"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0039.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9028.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.lysias.de/send/news/index.php?page=3","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4691","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9028.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.lysias.de/send/news/index.php?page=3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0785","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an \"AddBuddy\" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E00F0805-8C73-43B1-87AC-744434046E59"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3098DC2A-6A68-4160-9DAC-8F31A49BA45D"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.1.2010:*:*:*:*:*:*:*","matchCriteriaId":"8B2707D6-D5EC-4A22-B5E1-2A34913CB3FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2:*:*:*:*:*:*:*","matchCriteriaId":"D7577EED-D28B-430A-B554-CE40D9154893"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.2.1193:*:*:*:*:*:*:*","matchCriteriaId":"172E406F-108C-4D9A-80AB-78CDF134C4A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E81E472E-45B5-465B-B2D7-40F906AC31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*","matchCriteriaId":"50A04B5F-F17B-4177-861B-66DFD4FBE225"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*","matchCriteriaId":"E80E2514-9F43-48FB-B55E-094F45088D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*","matchCriteriaId":"2E553111-8B78-4B66-95BC-FD0EE897DDC4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9058.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/259435","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4709","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9058.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/259435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0786","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDDA181-C931-43A4-87EC-ACE55947FB49"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9054.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4718","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9054.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0787","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDDA181-C931-43A4-87EC-ACE55947FB49"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9053.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4717","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9053.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0788","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An interaction between PGP 7.0.3 with the \"wipe deleted files\" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:corporate_desktop:7.1:*:*:*:*:*:*:*","matchCriteriaId":"380D0E94-0977-491C-9E06-2C7D43585E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:freeware:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6E218A3A-1AC5-456F-93B7-FD27E282F739"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_security:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"56051D4A-7A78-423B-9F96-AF73C5451A36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9044.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4363","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4702","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9044.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0789","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.19","matchCriteriaId":"6DF7CD38-BE92-4FA4-B033-FCE5532550E2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0092.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9060.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mnogosearch.org/Download/mnogosearch-3.1.20.tar.gz","source":"cve@mitre.org"},{"url":"http://www.mnogosearch.org/history.html#log31","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4724","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9060.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mnogosearch.org/Download/mnogosearch-3.1.20.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mnogosearch.org/history.html#log31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0790","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://techsupport.services.ibm.com/server/aix.uhuic_getrec?args=DVsteamboat.boulder.ibm.com+DBAIX2+DA6854+STIY24556+USbin","source":"cve@mitre.org"},{"url":"http://techsupport.services.ibm.com/server/aix.uhuic_getrec?args=DVsteamboat.boulder.ibm.com+DBAIX2+DA6854+STIY24556+USbin","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0791","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"E71EBA85-5816-4A69-A5DE-EEBD25265CE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B04B18E8-A130-4BAA-8BBC-D9DF7085F9F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0059.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271589","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2962252.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9034.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4693","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/271589","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2962252.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9034.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0792","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:4.0_1.053s:*:*:*:*:*:*:*","matchCriteriaId":"46DE4E61-51CB-427D-87C8-9353E860E37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:5.0_0.038s:*:*:*:*:*:*:*","matchCriteriaId":"AD37D04D-52D7-42CF-9124-33CE72CA5B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:5.0_1.012s:*:*:*:*:*:*:*","matchCriteriaId":"0C9ECA7B-F331-44A8-BEBC-75A6F4F4412E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:5.0_2.005s:*:*:*:*:*:*:*","matchCriteriaId":"047766F1-1EC1-49F3-8994-8A3436DDDEDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:5.1_0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6288B66E-3318-4B38-A581-8A993B44C394"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*","matchCriteriaId":"98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/css-http-post-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9083.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/330275","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/686939","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4747","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4748","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/css-http-post-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9083.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/330275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/686939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0793","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:blackberry:qnx_neutrino_real-time_operating_system:4.25:*:*:*:*:*:*:*","matchCriteriaId":"C189294E-0AC1-4FAE-885B-4232D2BE6530"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9231.php","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4901","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4902","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4903","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4904","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9232","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9233","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9234","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9231.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9234","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0794","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2002-05/0349.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9209.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4879","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2002-05/0349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9209.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0795","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:27.rc.asc","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9217.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5083","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4880","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:27.rc.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9217.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0796","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102321107714554&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9241.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4932","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A114","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102321107714554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9241.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0797","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"C1A13A9E-E24A-4AEE-AD42-2BCA5990E4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102321107714554&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9242.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4933","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A62","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A94","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102321107714554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9242.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A62","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A94","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0798","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0059.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9207.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4886","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5623","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q2/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9207.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5623","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0799","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youngzsoft:cmailserver:3.30:*:*:*:*:*:*:*","matchCriteriaId":"6730890F-E9EC-47A2-ADC1-A968D3830900"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273512","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9132.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4789","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/273512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9132.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0800","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"762F8EB5-F855-4024-8B01-0AF7FDD78090"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9239.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4912","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9239.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0801","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0085.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274528","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274601","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-14.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9194.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/703835","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5082","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4873","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-14.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.iss.net/security_center/static/9194.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/703835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0802","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"2B53E079-EEF9-441F-878B-75702A030F9D"}]}]}],"references":[{"url":"http://marc.info/?l=postgresql-general&m=102032794322362","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10328.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-149.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=postgresql-general&m=102032794322362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10328.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-149.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0803","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A05.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=126801","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9300.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=126801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9300.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0804","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=129466","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9301.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6394","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=129466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9301.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0805","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=134575","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9302.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6395","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=134575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9302.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0806","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the \"del\" option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=141557","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9303.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5080","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=141557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9303.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0807","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=146447","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9304.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=146447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9304.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0808","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=107718","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9305.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=107718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9305.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0809","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=148674","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10141.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=148674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10141.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0810","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=92263","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9306.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6399","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=92263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9306.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0811","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=130821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4964","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=130821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0812","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hpe:compaq_wl310_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"E2C06859-5F8E-4CBA-8E58-F5EA5C7FB76F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hpe:compaq_wl310:-:*:*:*:*:*:*:*","matchCriteriaId":"48300418-3F55-4DA4-AA94-F51D27999D41"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:proxim:orinoco_rg-1000_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"5EAA1B06-E2DB-4A24-B9BB-CD669BAA8741"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:proxim:orinoco_rg-1000:-:*:*:*:*:*:*:*","matchCriteriaId":"569A74CF-F936-40B5-AF53-4308CE6F08E8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:proxim:orinoco_rg-1100_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"B425CBD1-E190-4D02-96CC-065225C009A8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:proxim:orinoco_rg-1100:-:*:*:*:*:*:*:*","matchCriteriaId":"9415B1E1-20D2-4ECC-AE55-481F645E8D12"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0066.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9810.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5436","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9810.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0813","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103002169829669&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/ios-tftp-long-filename-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9700.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/854","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5328","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103002169829669&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/ios-tftp-long-filename-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9700.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5328","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0814","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.0_build_2050:*:*:*:*:*:*:*","matchCriteriaId":"2A181E96-DE5F-46B6-B725-AEF77DF9AF3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0057.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102752511030425&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102765223418716&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9663.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5294","source":"cve@mitre.org"},{"url":"http://www.vmware.com/download/gsx_security.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102752511030425&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102765223418716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9663.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/download/gsx_security.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0815","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Javascript \"Same Origin Policy\" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:*","matchCriteriaId":"DA2CA2F8-260C-4559-BF24-3E321CEAE93F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102796732924658&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102798282208686&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102796732924658&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102798282208686&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0816","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3198FD9F-ACB8-4F59-A896-68A3A7287D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102709593117171&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9640.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/229867","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5272","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102709593117171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9640.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/229867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0817","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.12:*:*:*:*:*:*:*","matchCriteriaId":"919A340A-54C0-4DE3-B402-A32AAA44D4D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.16:*:*:*:*:*:*:*","matchCriteriaId":"AAE7E22D-1768-4ECD-90C6-AAF29F25ABE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.17:*:*:*:*:*:*:*","matchCriteriaId":"FF60FA58-F97F-4189-91FF-7B594729FEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.18:*:*:*:*:*:*:*","matchCriteriaId":"7E91F41A-06CF-4BDC-8E33-3A08AE40DD8B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0045.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102812622416695&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-139","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9741.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5367","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102812622416695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9741.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0818","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wwwoffle:wwwoffle:*:*:*:*:*:*:*:*","matchCriteriaId":"0118DCB4-45A2-4CEA-AE41-5EA07AB18AD9"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102821890317683&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-144","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9619.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5260","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102821890317683&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9619.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0819","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artsd:artsd:*:*:*:*:*:*:*:*","matchCriteriaId":"E6D231E9-7EAD-48E9-B275-249C948EC038"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102607688730228&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=kde-multimedia&m=102607939232023&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102614898620164&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102607688730228&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=kde-multimedia&m=102607939232023&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102614898620164&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0820","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0047.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right&th=d429cd2ef1d3a2b7&seekm=ai6c0q%242289%241%40FreeBSD.csie.NCTU.edu.tw#link16","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102979180524452&w=2","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right&th=d429cd2ef1d3a2b7&seekm=ai6c0q%242289%241%40FreeBSD.csie.NCTU.edu.tw#link16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102979180524452&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0821","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.4","matchCriteriaId":"1C628CEB-D129-4D98-AACD-7C0EA3F44F98"}]}]}],"references":[{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00005.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-0822","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.4","matchCriteriaId":"1C628CEB-D129-4D98-AACD-7C0EA3F44F98"}]}]}],"references":[{"url":"http://www.ethereal.com/appnotes/enpa-sa-00005.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/5167","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/5167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0823","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter."},{"lang":"es","value":"El desbordamiento del búfer en Winhlp32.exe permite a los atacantes remotos ejecutar código arbitrario a través de un documento HTML que llama al control HTML Help ActiveX (HHCtrl.ocx) con una ruta de acceso larga en el parámetro Item."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_help:*:*:*:*:*:*:*:*","matchCriteriaId":"81DAEFA8-676E-4E6E-A224-6850A64AC180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102822806329440&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9746.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4857","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102822806329440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9746.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0824","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freebsd:point-to-point_protocol_daemon:-:*:*:*:*:*:*:*","matchCriteriaId":"B67F5EC7-0BBD-44A3-81DA-16278249C68D"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102812546815606&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9738.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openbsd.org/errata31.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/5355","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102812546815606&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9738.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openbsd.org/errata31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/5355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0825","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:padl_software:nss_ldap:*:*:*:*:*:*:*:*","versionEndIncluding":"198","matchCriteriaId":"8B8FB428-E756-4B3F-906F-DB5F2C69C2E6"}]}]}],"references":[{"url":"http://www.padl.com/Articles/PotentialBufferOverflowin.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.padl.com/Articles/PotentialBufferOverflowin.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0826","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E33B458B-F945-4D1A-81B7-F07CCC183C14"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2002/a080802-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9794.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5427","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2002/a080802-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9794.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0827","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.27/CSSA-2002-SCO.27.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9380.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5051","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.27/CSSA-2002-SCO.27.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9380.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-0828","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2023-11-07T01:55:54.620","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-0862.  Reason: This is a duplicate of CVE-2002-0862.  Notes: All CVE users should reference CVE-2002-0862 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-0829","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:release_p4:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"56E3A0F6-E545-4F9D-B48D-C5538CF3C9DA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102865404413458&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9771.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5073","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5399","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102865404413458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9771.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0830","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:release_p7:*:*:*:*:*:*","versionEndIncluding":"4.6.1","matchCriteriaId":"9ABE47DA-4715-4330-9E68-7D686E3920BE"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-013.txt.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102865517214722&w=2","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5072","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5402","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9772","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-013.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102865517214722&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0831","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an EVFILT_WRITE filter is registered for the other end."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release:*:*:*:*:*:*","matchCriteriaId":"41AF7A5F-3CB3-4CE9-B7AF-20338D15EFEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102865142610126&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9774.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5069","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5405","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102865142610126&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9774.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0832","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102864890006745&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102864890006745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0833","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a multi-part message with a long boundary string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.0j:*:*:*:*:*:*:*","matchCriteriaId":"AB3BE848-D923-41C1-9E33-014C59770F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32956E1B-E52C-4290-ABDA-B345CD0F682B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102858453720304&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102883538924494&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9765.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5397","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102858453720304&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102883538924494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9765.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0834","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ISIS dissector for Ethereal 0.9.5 and earlier allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets."},{"lang":"es","value":"Desbordamiento de búfer en el disector ISIS para Ethereal 0.9.5 y anteriores permite  a atacantes remotos causar una denegación de servicio o ejecutar código arbitrario mediante paquetes malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8:*:*:*:*:*:*:*","matchCriteriaId":"3DBD4993-950D-4AF7-980D-18164E2AA46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*","matchCriteriaId":"9DC35478-9276-4732-9F0D-13CA958C617C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9_.0:*:*:*:*:*:*:*","matchCriteriaId":"508E58C5-E917-41F4-A4A0-C02ED4E0E240"}]}]}],"references":[{"url":"http://www.ethereal.com/appnotes/enpa-sa-00006.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00006.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-0835","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones."},{"lang":"es","value":"El servidor Preboot eXecution Environment (PXE) permite a atacantes remotos causar una denegación de servicio (caída) mediante ciertos paquetes DHCP (Dinamic Host Configuraion Protocol) de teléfonos Voz-sobre-IP (VOIP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0A218B67-B87B-4A5E-B9EF-EF39ADEAD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"59A82AD5-A42D-49FF-A9D4-A57C8433A5A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BB41DE44-C3A1-4CC9-ACA7-4EC171D68910"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openlinux_workstation:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C31B1A4A-96AD-4322-8AF3-733D66DBB50E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:pre-execution_environment:0.1:*:*:*:*:*:*:*","matchCriteriaId":"B2522945-D94F-4F8D-8705-87D15AE3B41D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"B345284D-6842-47C0-B823-B5DDC30CC8A6"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-044.0.txt","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4449","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10003.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-162.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-165.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5596","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-044.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10003.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0836","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts."},{"lang":"es","value":"El conversor dvips para ficheros Postscript en el paquete tetex llama a la función system() de forma insegura, lo que permite a atacantes ejecutar comandos arbitrarios mediante ciertos trabajos de impresión, posiblemente conteniendo fuentes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"B345284D-6842-47C0-B823-B5DDC30CC8A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8FBD5A-2FD0-43CD-AC4B-1D6984D336FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*","matchCriteriaId":"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*","matchCriteriaId":"613A22EC-D93C-48B0-B97C-3E0DDFBD0B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*","matchCriteriaId":"128F5289-E9F3-41A7-A534-FBAA8A119A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"4D1E6298-EDF5-438F-8DFD-16A514CB938A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103497852330838&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104005975415582&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-207","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10365.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/169841","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-194.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-195.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4567","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5978","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103497852330838&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104005975415582&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10365.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/169841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-070.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-194.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-195.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/4567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0837","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters (possibly \"dict\") to the wordtrans.php script."},{"lang":"es","value":"wordtrans 1.1pre8 y anteriores en el paquete wordtrans-web permite a atacantes remotos ejecutar código arbitrario o llevar a cabo ataques de guiones en sitios cruzados (cross-site scripting) mediante ciertos parámetros (posiblemente \"dict\") en el guión wordtrans.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordtrans:wordtrans-web:1.0_beta2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B9F1BE8D-5B49-45E9-B884-56754DA99D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordtrans:wordtrans-web:1.1_pre8:*:*:*:*:*:*:*","matchCriteriaId":"4767B913-1EEA-4907-A95F-D531D40647F4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103158607631137&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-188.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guardent.com/comp_news_wordtrans-web.html#","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10059.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10063.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5671","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5674","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103158607631137&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guardent.com/comp_news_wordtrans-web.html#","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10059.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10063.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0838","sourceIdentifier":"cve@mitre.org","published":"2002-10-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf."},{"lang":"es","value":"Desbordamiento de Buffer en gv 3.5.8 y anteriores, y gvv 1.0.2 y anteriores, que permite a los atacantes la ejecución arbitraria de código vía ficheros PDF o PostScript con caberceras erroneas al ser procesadas por una llamada sscanf no segura."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ggv:ggv:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"60400F6B-8835-4B75-A084-33112F6AF8DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostview:ghostview:1.3:*:*:*:*:*:*:*","matchCriteriaId":"DA5F8E03-79D8-4C2B-AD85-59D23B5B202A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostview:ghostview:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D8C56CA2-6EAA-4F86-B637-69602FCA12BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostview:ghostview:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7D3AC6EB-BEE8-404E-ABEE-3FCE9A9DEE36"},{"vulnerable":true,"criteria":"cpe:2.3:a:ghostview:ghostview:1.5:*:*:*:*:*:*:*","matchCriteriaId":"01EA37BA-1583-4B74-8578-8ED3DAC7E28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"21635C49-6F67-4852-A34B-6CA758D92F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*","matchCriteriaId":"B2CDF1F6-AEA8-493B-AF8E-B06C2AFD0DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*","matchCriteriaId":"E062D50D-DEFA-45A6-B749-E3B7CAACD621"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*","matchCriteriaId":"81853A68-8286-4159-87FC-91CE94484DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*","matchCriteriaId":"6A2C2C2E-227C-477A-8E6B-D82C941A778F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:*","matchCriteriaId":"9B0FE26D-8B0B-4620-BC5B-6C0E0D635FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"BDB7A45D-C67B-4D46-94AF-3BAA75C06157"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D68136DD-B309-47D7-9320-D48EF6E0F9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F698620-41A9-4058-B3A2-68134FDEACD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9775BB2D-B945-4533-BBA7-2602CD4B2C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0FE2C974-BC5F-4D18-8B56-6E76CFC8237F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"621BAE10-276D-44DA-A124-51D4A00E7552"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CE42231C-7764-41ED-B7A3-641CFC58BBC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4655CA87-E507-4FAF-A848-C502BE8564FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"DAE9A7B0-6DF8-44BC-A9EC-7EB89AC91722"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DB5E5D66-FF08-4B26-A2BD-421E7FFF73B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3A29A154-2CF6-441B-8715-84F49F21A15A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"185BFE23-5F13-45A1-B514-21957A613799"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-053.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000542","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103305615613319&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103305778615625&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103487806800388&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47780&zone_32=category:security","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-176","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-179","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-182","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10201.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/600777","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20021008-1.txt","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:069","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:071","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-207.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-212.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5808","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-053.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103305615613319&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103305778615625&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103487806800388&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47780&zone_32=category:security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-179","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10201.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/600777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20021008-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0839","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shared memory scoreboard in the HTTP daemon for Apache 1.3.x before 1.3.27 allows any user running as the Apache UID to send a SIGUSR1 signal to any process as root, resulting in a denial of service (process kill) or possibly other behaviors that would not normally be allowed, by modifying the parent[].pid and parent[].last_rtime segments in the scoreboard."},{"lang":"es","value":"La tabla de puntuaciones (scoreboard) en memoria compartida del demonio HTTP en Apache 1.3.x anteriores a 1.3.27 permite a cualquier usuario corriendo con la UID de Apache enviar un señas SIGUSR1 a cualquier proceso como root, resultando en un a denegación de servicio (muerte de proceso) o posiblemente otros comportamientos no no serian permitidos normalmente, mediane la modificación de los segmentos parent[].pid y parent[].last_rtime en los segmentos de la tabla de puntuaciones."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.27:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3.0","versionEndExcluding":"1.3.27","matchCriteriaId":"A8876688-B4F8-4E2E-AEB1-6E9D882E6879"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103376585508776&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/advisories/4617","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"cve@mitre.org","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-187","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-195","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/10280.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2414.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5884","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103376585508776&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/advisories/4617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/10280.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2414.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0840","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is \"Off\" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157."},{"lang":"es","value":"Vulnerabilidad de comandos en sitios cruzados (cross-site scripting, XSS) en la página de error por defecto en Apache 2.0 antes de 2.0.43, y en 1.3.x hasta 1.3.26, cuando el parámetro UseCanonicalName está desactivado, y está presente el soporte para comodines DNS, permite a atacantes ejecutar comandos como otro visitante de la página mediante la cabecera Host:"}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.43 and 1.3.27:\nhttp://httpd.apache.org/security/vulnerabilities_20.html\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:r2:*:*:*:*:*:*","matchCriteriaId":"0C57D5C2-EEFC-432B-BAF6-57984578186C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED700CB5-6896-41D1-ABEF-98FC159940F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"43116210-05B8-4241-9EC3-7697014A69A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BA359418-31C5-4FCA-AA93-83AF15D3199A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7_.0.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"BCA4CCED-0943-4212-BAC9-23BF51208A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7_.1.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"744F8147-0857-4E9F-BCA4-D24A06F82B06"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F012561-EA9E-4665-AD81-0AC7655BA22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEF5BE7D-BB10-43E5-8910-626CB6032D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0003.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530","source":"cve@mitre.org"},{"url":"http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103357160425708&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103376585508776&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4617","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-187","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-195","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/240329","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2414.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/862","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-222.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-251.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5847","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10241","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103357160425708&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103376585508776&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/240329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-251.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0843","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response."},{"lang":"es","value":"Desbordamientos de búfer en el programa de soporte ApacheBench (ab.c) en Apache anteriores a 1.3.27, y Apache 2.x anteriores a 2.0.43, permite a un servidor web malicioso causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante una respuesta larga."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.27:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:r2:*:*:*:*:*:*","matchCriteriaId":"0C57D5C2-EEFC-432B-BAF6-57984578186C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED700CB5-6896-41D1-ABEF-98FC159940F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BA359418-31C5-4FCA-AA93-83AF15D3199A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.0.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"A42CA4B3-410B-401C-98A7-A20348BAB97B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"2C7D907B-CABC-40ED-8ABD-C4C659550EB6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530","source":"cve@mitre.org"},{"url":"http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103376585508776&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4617","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21425","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-187","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-195","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10281.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2414.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5887","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5995","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5996","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3263","source":"cve@mitre.org"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2871","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103376585508776&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10281.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5887","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0844","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:distrotech:cvs:*:*:*:*:*:*:*:*","versionEndExcluding":"1.11.2","matchCriteriaId":"D5C6F868-918D-4055-A13A-4D752FC1BFD4"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-035.0.txt","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102233767925177&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-004.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4829","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9175","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-035.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102233767925177&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0845","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B2091816-7705-462D-BB91-76D07B9A1F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"25F0A9AF-D3CE-44A3-B989-7A54E8578A51"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102890933623192&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9799.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5433","source":"cve@mitre.org"},{"url":"http://www.sun.com/service/support/software/iplanet/alerts/transferencodingalert-23july2002.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102890933623192&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9799.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sun.com/service/support/software/iplanet/alerts/transferencodingalert-23july2002.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0846","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:shockwave_flash:*:*:*:*:*:*:*:*","matchCriteriaId":"DA393BF0-8A75-49D2-854E-7BBDFB1CC9E8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103072708329280&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9798.php","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-026.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-027.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5430","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103072708329280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9798.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0847","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyproxy:tinyproxy:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F3DD2102-F176-4299-9A2E-31402D9EDBA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinyproxy:tinyproxy:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"FD9A14C0-8F94-4153-9953-9EFF7C9C4B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinyproxy:tinyproxy:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"76EF36F0-1407-431D-A319-5EBB54A5DC31"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=88790","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9079.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4731","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2002/dsa-145","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=88790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9079.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.debian.org/security/2002/dsa-145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0848","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_5000_concentrator_series_software:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.14","versionEndIncluding":"5.2.23.0003","matchCriteriaId":"D0C40B67-7DCC-4F4E-A44A-B8D7BC242856"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_5000_concentrator_series_software:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.15","versionEndIncluding":"6.0.21.0002","matchCriteriaId":"21E67581-D875-4BFF-9C66-1D026FD5532B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:vpn_5000_concentrator:-:*:*:*:*:*:*:*","matchCriteriaId":"11135AA6-A0A8-49F1-96A3-57165AF05E9D"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9781.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5417","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9781.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0849","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:iscsi_driver:*:*:linux:*:*:*:*:*","matchCriteriaId":"91881A3D-13D4-429C-B97C-EFADB04E6C46"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102882056105806&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102891036424424&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9792.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5423","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102882056105806&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102891036424424&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9792.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0850","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted."},{"lang":"es","value":"Desbordamiento de búfer en PGP Corporate Desktop 7.1.1 permite a atacantes remotos ejecutar código arbitrario mediante un documento cifrado que tiene un nombre de archivo largo cuando es descifrado"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:corporate_desktop:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3E9BACA9-17B3-4C0D-B346-627285D3709D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html","source":"cve@mitre.org"},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103133995920090&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5656","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10043","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103133995920090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0851","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog."},{"lang":"es","value":"Vulnerabilidad de cadena de formateo en demonio PPP (Point to Point Protocol) RDSI en el paquete ISDN4Linux (i4l) permite a usuarios locales ganar privilegios de root mediante candenas de formato en el argumento de línea de comandos de de nombre de dispositivo, que no es adecuadamente manejado en una llamada a syslog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isdn4linux:isdn4linux:3.1_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3348734F-408A-498C-ABF9-F295F1B08687"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9811.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5437","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9811.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0852","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads."},{"lang":"es","value":"Desbordamiento de búfer en Cliente de Red Privada Virtual (VPN) de Cisco 3.5.4 y anteriores permite a atacantes remotos causar una denegación de servicio mediante\r\nun Intecambio de Clave de Intenet (Internet Key Exchange - IKE) con un contenido útil (payload) de una Índice de Parámetro de Seguridad (Security Parameter Index - SQI) largo, o\r\nun paquete IKE con un número grande de contenidos útiles válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:linux:*:*:*:*:*","matchCriteriaId":"2BD00D0A-EB6E-41AA-851D-9DD258E23BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"3FB66EB9-9FE9-4B13-9E5F-E9DEDCD0E3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:solaris:*:*:*:*:*","matchCriteriaId":"88EB557F-33CD-40FE-B470-04F93CB2F3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:linux:*:*:*:*:*","matchCriteriaId":"F2EEB23E-4592-49A1-BDC6-110580340AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"D548CEFE-1970-42D3-9039-196A3B5F5D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:solaris:*:*:*:*:*","matchCriteriaId":"2D4BDB9B-99D8-42B7-8D57-2B57029220F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:windows:*:*:*:*:*","matchCriteriaId":"2288FB91-4607-417D-8658-E1B8090BE40A"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0853","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload."},{"lang":"es","value":"El Cliente de Red Privada Virtual (VPN) de Cisco 3.5.4 y anteriores permite a atacantes remotos causar una denegación de servicio (consumición de CPU) mediante un paquete con una carga útil de longitud cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:linux:*:*:*:*:*","matchCriteriaId":"2BD00D0A-EB6E-41AA-851D-9DD258E23BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"3FB66EB9-9FE9-4B13-9E5F-E9DEDCD0E3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:solaris:*:*:*:*:*","matchCriteriaId":"88EB557F-33CD-40FE-B470-04F93CB2F3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:linux:*:*:*:*:*","matchCriteriaId":"F2EEB23E-4592-49A1-BDC6-110580340AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"D548CEFE-1970-42D3-9039-196A3B5F5D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:solaris:*:*:*:*:*","matchCriteriaId":"2D4BDB9B-99D8-42B7-8D57-2B57029220F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:windows:*:*:*:*:*","matchCriteriaId":"2288FB91-4607-417D-8658-E1B8090BE40A"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9821.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5440","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9821.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0854","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges."},{"lang":"es","value":"Desbordamiento de búfer en el demonio (daemon) ISDN Point to Point Protocol (PPP) del paquete i4l de SuSE 7.3, 8.0, y posiblemente otros sistemas operativos, podrían permitir a usuarios locales, la obtención de privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"}]}]}],"references":[{"url":"https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html","source":"cve@mitre.org"},{"url":"https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0855","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Mailman 2.0.12 permite a atacantes remotos la ejecución de rutinas como otro usuario mediante las opciones de subscripción de la lista de subscriptores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"EE33EFBF-E155-4C3B-93CC-63AA1266A8A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0268.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000522","source":"cve@mitre.org"},{"url":"http://mail.python.org/pipermail/mailman-announce/2002-July/000043.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-147","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9985.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-176.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-177.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-178.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-181.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5298","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0268.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.python.org/pipermail/mailman-announce/2002-July/000043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9985.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-176.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-181.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0856","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature."},{"lang":"es","value":"El servidor SQL*NET para Oracle 9i 9.0.x y 9.2 permite a atacantes remotos causar una denegación de sevicio (caída) mediante ciertas peticiones de depuración que no son adecuadamente manejadas por la característica de depuración"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"43116210-05B8-4241-9EC3-7697014A69A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F012561-EA9E-4665-AD81-0AC7655BA22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEF5BE7D-BB10-43E5-8910-626CB6032D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0072.html","source":"cve@mitre.org"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20941","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert38rev1.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9237.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5457","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert38rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9237.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0857","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file."},{"lang":"es","value":"Vulnerabilidad de formato de cadenas en la utilidad Oracle Listener Control (lsnrctl) en Oracle 9.2, 9.0, 8.1 y 7.3.4 permite a atacantes remotos ejecutar código arbitrario el sitstema Oracle DBA mediante la introducción de cadenas de formato en ciertas entradas en fichero de configuración listener.ora"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:7.3.4:*:*:*:*:*:*:*","matchCriteriaId":"AE07BAF7-3A9A-426B-9536-72EAB8984A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7AC3C795-3914-4941-9244-D4FB9C12C7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2:*:*:*:*:*:*:*","matchCriteriaId":"3D159781-4109-4A9B-A46B-241021FED68E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1:*:*:*:*:*:*:*","matchCriteriaId":"44943278-DF79-4C58-AA98-B3FEA6CB8F21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102933735716634&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005037","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/301059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5460","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102933735716634&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/301059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0858","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges."},{"lang":"es","value":"catsnmp en Oracle 9i y 8i se instala con un usario dbsnmp con una contraseña por defecto, lo que permite a atacantes realizar operacíones restringidadas en la base de datos y posiblemente ganar otros privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:*:*:*:*:*:*:*:*","matchCriteriaId":"DC8C65AE-EF3B-4B02-B260-B32FB674956D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:*:*:*:*:*:*:*:*","matchCriteriaId":"795F83D5-953C-4BBF-896F-DBDAB813BAE2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102918005402808&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9932.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9476","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102918005402808&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9932.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0859","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en la función OpenDataSource del motor Jet en Microsoft SQL Server 2000 permite a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D19C4A6-8BDB-4397-9C51-8C9AC2B5D4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"45162B29-C6B9-4962-ABAC-4444C080DF72"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"928EB2E1-B330-453A-BAE7-6D58C429D132"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"EE848452-B21D-47B2-9877-DCA300356563"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"1515370D-4303-4D01-AEBB-F72D94B38026"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"D81C73A0-E60F-4C2F-8587-5149BD29F2AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102450188620081&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9375.php","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/mssql-ods.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5057","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102450188620081&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9375.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/mssql-ods.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0860","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file."},{"lang":"es","value":"El método LoadText en el componente de hoja de cálculo de Microsoft Office Web Componentes (OWC) 2000 y 2002 permite a atantes remotos leer ficheros arbitrarios con Internet Explorer mediante una URL que redirige al fichero objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2000:*:*:*:*:*:*:*","matchCriteriaId":"A431CA59-8BD3-48CB-82BC-8FDCFE7440FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*","matchCriteriaId":"316D6CD7-3B2B-499C-ADBE-088981DFD306"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2000:*:*:*:*:*:*:*","matchCriteriaId":"3F09162C-01F0-4056-94D3-995713F92AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*","matchCriteriaId":"2AE2D3E0-49E4-410E-B63A-753BDE8995BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101829911018463&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8778.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3007","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4453","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101829911018463&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8778.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0861","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the \"Allow paste operations via script\" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object."},{"lang":"es","value":"Microsoft Office Web Components (OWC) 2000 y 2002 permite a atacantes remotos sortear la configuración de \"Permitir pegar mediante script\", incluso cuando está desactivada, mediante:\r\nel método Copy del objeto Cell (celda)\r\nel método Paste (pegar) del objeto Range (rango)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2000:*:*:*:*:*:*:*","matchCriteriaId":"A431CA59-8BD3-48CB-82BC-8FDCFE7440FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*","matchCriteriaId":"316D6CD7-3B2B-499C-ADBE-088981DFD306"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2000:*:*:*:*:*:*:*","matchCriteriaId":"3F09162C-01F0-4056-94D3-995713F92AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*","matchCriteriaId":"2AE2D3E0-49E4-410E-B63A-753BDE8995BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101829726516346&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8779.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4457","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101829726516346&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8779.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0862","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS."},{"lang":"es","value":"Las APIs (Application Programming Interface) \r\n\r\nCertGetCertificateChain\r\nCertVerifyCertificateChainPolicy  \r\nWinVerifyTrust\r\n\r\nen la CriptoAPI de productos de Microsoft, incluyendo Microsoft Windows 98 a XP, Office para Mac, Internet Explorer para Mac, y Outlook Express para Mac, no verifican adecuadamente las restricciones básicas de certificados X.509 firmados por CAs (Autoridad Certificadora) intermedias, lo que permite a atacantes remotos falsear los certificados de sitios de confianza mediante un ataque tipo hombre-en-el-medio en sesiones SSL, como se informó anteriormente para Internet Explorer e IIS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-295"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*","matchCriteriaId":"40FC681A-7B85-4495-8DCC-C459FE7E2F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:-:*:*:*:*:*:*:*","matchCriteriaId":"A2354216-8103-49F9-A95C-7DE4F738BBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:-:*:*:*:*:*:*:*","matchCriteriaId":"5E44D629-D3EB-4F67-BF67-B25910453562"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:-:*:*:*","matchCriteriaId":"4C5FEF8F-FB20-4518-A9ED-412B8E924AA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:-:*:*:terminal_server:*:*:*","matchCriteriaId":"E30F6C9C-3371-44FF-AD0B-3CAA0AB6F1B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:-:*:*:*:*:*:*:*","matchCriteriaId":"C37BA825-679F-4257-9F2B-CE2318B75396"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:-:*:*:*:*:*:*:*","matchCriteriaId":"2C6AE930-8EFD-4EE5-AD18-A1205B80DE60"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:-:*:*:*:*:*:*:*","matchCriteriaId":"DC52CAA4-467E-402C-BC60-AB322FC5786F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","matchCriteriaId":"387021A0-AF36-463C-A605-32EA7DAC172E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102866120821995&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102918200405308&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102976967730450&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1056","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1332","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=102866120821995&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102918200405308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=102976967730450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-0863","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka \"Weak Encryption in RDP Protocol.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_windows_server:beta3:*:standard:*:*:*:*:*","matchCriteriaId":"35C20809-70F9-4AB9-A395-FE409A0FAF66"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103235960119404&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103236181522253&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10121.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10122.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/865833","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5711","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5712","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A199","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103235960119404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103236181522253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10121.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10122.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/865833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0864","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka \"Denial of Service in Remote Desktop.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_windows_server:beta3:*:standard:*:*:*:*:*","matchCriteriaId":"35C20809-70F9-4AB9-A395-FE409A0FAF66"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103235745116592&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103236181522253&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10120.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5713","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103235745116592&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103236181522253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10120.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0865","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka \"Inappropriate Methods Exposed in XML Support Classes.\""},{"lang":"es","value":"Una clase que soporta XML (Lenguaje de Marcas eXtensible) en Microsoft Virtual Machine (VM) 5.0.3805 y anteriores expone cierto métodos inseguros, que permiten a atacantes remotos ejecutar código inseguro mediante un applet de Java. También conocida como \"Métodos inapropiados expuestos en clases de soporte XML\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:*","matchCriteriaId":"DC2655D3-B360-4F82-B9CE-EECC95E0FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:*","matchCriteriaId":"CB67AEF8-DD02-4F20-B920-AC0B26D47C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3188:*:*:*:*:*:*:*","matchCriteriaId":"B798772D-183C-4EE8-8E78-E37CCEC35B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:*","matchCriteriaId":"D133B730-EEDA-46E7-8CC4-4D0104D65C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:*","matchCriteriaId":"962D0B64-8EEE-4589-84B3-D504906AEEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*","matchCriteriaId":"FB10F6CD-E12B-469B-8634-2185172D97D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*","matchCriteriaId":"FBBEEAFB-9087-40C0-85A8-AAC82F6CD6D1"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10135.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/140898","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5752","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10135.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/140898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0866","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka \"DLL Execution via JDBC Classes.\""},{"lang":"es","value":"Las clases Java de conectividad con bases de datos (JDBC) en Microsoft Virtual Machine (VM) hasta 5.0.3805 inclusive permite a atacantes remotos cargar y ejecutar DLLs (librerías de enlace dinámico) mediante un applet de Java. También conocida como \"Ejecución DLL mediante clases JDBC\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:*","matchCriteriaId":"DC2655D3-B360-4F82-B9CE-EECC95E0FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:*","matchCriteriaId":"CB67AEF8-DD02-4F20-B920-AC0B26D47C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3188:*:*:*:*:*:*:*","matchCriteriaId":"B798772D-183C-4EE8-8E78-E37CCEC35B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:*","matchCriteriaId":"D133B730-EEDA-46E7-8CC4-4D0104D65C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:*","matchCriteriaId":"962D0B64-8EEE-4589-84B3-D504906AEEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*","matchCriteriaId":"FB10F6CD-E12B-469B-8634-2185172D97D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*","matchCriteriaId":"FBBEEAFB-9087-40C0-85A8-AAC82F6CD6D1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10133.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/307306","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5751","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10133.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/307306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0867","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka \"Handle Validation Flaw.\""},{"lang":"es","value":"la Máquina Virtual (VM) de Microsoft hasta compilación 5.0.3805 inclusive, permite a atacantes remotos causar una denegación de servicio (caída) en Internet Explorer mediante un manejador (handle) inválido en un applet de Java, también conocida como \"Fallo en Validación de Manejador\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:*","matchCriteriaId":"DC2655D3-B360-4F82-B9CE-EECC95E0FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:*","matchCriteriaId":"CB67AEF8-DD02-4F20-B920-AC0B26D47C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3188:*:*:*:*:*:*:*","matchCriteriaId":"B798772D-183C-4EE8-8E78-E37CCEC35B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:*","matchCriteriaId":"D133B730-EEDA-46E7-8CC4-4D0104D65C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:*","matchCriteriaId":"962D0B64-8EEE-4589-84B3-D504906AEEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*","matchCriteriaId":"FB10F6CD-E12B-469B-8634-2185172D97D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*","matchCriteriaId":"FBBEEAFB-9087-40C0-85A8-AAC82F6CD6D1"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10134.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/792881","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5750","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10134.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/792881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0869","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka \"Out of Process Privilege Elevation.\""},{"lang":"es","value":"Vulnerabilidad desconocida en el proceso de anfitrión (dllhost.exe) en Microsoft Internet Information Server (IIS) 4.0 a 5.1 permite a atacantes remotos ganar privilegios ejecutando una aplicación fuera de proceso que adquiere privilegios de LocalSystem, también conocida como \"Elevación de Privilegios Fuera de Proceso\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103642839205574&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10502.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103642839205574&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10502.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0870","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549."},{"lang":"es","value":"El parche original para la vulnerabilidad de evasión de autenticación (CVE-2001-0622) de Cisco Content Service Switch 11000 Series estaba incompleto, lo que aún permite a atacantes remotos ganar privilegios adicionales pidiendo directamente la URL de administración web en vez de navegando a través del interfaz, posiblemente mediante una variante del ataque original, identificado por Cisco como bug ID CSdw08559"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:*:*:*:*:*:*:*:*","matchCriteriaId":"A2759FBE-E03D-4A6D-87ED-B7EEC6992883"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*","matchCriteriaId":"98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0871","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe."},{"lang":"es","value":"xinetd 2.3.4. filtra (deja ver) descriptores de ficheros para la tubería (pipe) de señales de servicios lanzados por xinetd, lo que podría permitir a esos servicios causar una denegación de servicio mediante la tubería."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"AEC0BFFE-F6FE-4FF2-B2BA-C90CB04C588B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"82CB46D4-DF79-4464-8264-D65D0DA784E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xinetd:xinetd:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"A45BAD0A-2620-4AC2-9774-41D1D6F61F57"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102935383506155&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9844.php","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-196.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-228.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5458","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2002/dsa-151","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102935383506155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9844.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-228.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2002/dsa-151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0872","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions."},{"lang":"es","value":"l2tpd 0.67 no inicializa el generador de números aleatorios, lo que permiter a atacantes remotos secuestrar sesiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.62:*:*:*:*:*:*:*","matchCriteriaId":"1BA9CA27-499F-457F-AC0C-8F8F28FEDA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.63:*:*:*:*:*:*:*","matchCriteriaId":"86E97113-44A0-4A6A-A1E6-E91E46EB7E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.64:*:*:*:*:*:*:*","matchCriteriaId":"E2EA5E12-99C4-44ED-A6C7-B476A623E6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.65:*:*:*:*:*:*:*","matchCriteriaId":"054C8F11-4519-4911-BEAF-B0597A93E1DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.66:*:*:*:*:*:*:*","matchCriteriaId":"DD8D78FD-6ABA-4F66-BFAC-E0E0E88EFACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.67:*:*:*:*:*:*:*","matchCriteriaId":"4A65824C-1648-4E0E-B9DA-2A45C24C3D3F"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-152","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9845.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5451","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9845.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0873","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow."},{"lang":"es","value":"Vulnerabilidad en l2tpd permite a atacantes remotos sobreescribir el campo del proveedor (vendor) mediante un valor largo en el par atributo/valor, posiblemente mediante un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.62:*:*:*:*:*:*:*","matchCriteriaId":"1BA9CA27-499F-457F-AC0C-8F8F28FEDA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.63:*:*:*:*:*:*:*","matchCriteriaId":"86E97113-44A0-4A6A-A1E6-E91E46EB7E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.64:*:*:*:*:*:*:*","matchCriteriaId":"E2EA5E12-99C4-44ED-A6C7-B476A623E6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.65:*:*:*:*:*:*:*","matchCriteriaId":"054C8F11-4519-4911-BEAF-B0597A93E1DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.66:*:*:*:*:*:*:*","matchCriteriaId":"DD8D78FD-6ABA-4F66-BFAC-E0E0E88EFACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.67:*:*:*:*:*:*:*","matchCriteriaId":"4A65824C-1648-4E0E-B9DA-2A45C24C3D3F"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-152","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10460.php","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10460.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0874","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files."},{"lang":"es","value":"Vulnerabilidad en interchange 4.8.6, 4.8.3, y otras versiones cuando corren en modo INET, permite a atacantes remotos leer ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:interchange:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C32AA5E3-DE6D-4803-8BE3-6ACC9F93672D"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:interchange:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"B6947566-5459-481E-A64D-84F951D6474E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:interchange:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"EADE2853-3DE2-4C2A-94CF-99777BE0B4A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:interchange:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"9A8DF5FE-5D7B-4403-9DBB-633B2FCA55DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:interchange:4.8.5:*:*:*:*:*:*:*","matchCriteriaId":"F4C80C59-5864-4C0A-AF0C-4CB188677DDC"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-150","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0875","sourceIdentifier":"cve@mitre.org","published":"2002-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group."},{"lang":"es","value":"Vulnerabilidad en FAM 2.6.8, 2.6.6 y otras versiones permite a usuarios sin privilegios obtener los nombres de ficheros cuyo acceso está restringido al grupo de root"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:fam:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"E20CC5D1-D526-476C-926A-3A7A125A7351"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:fam:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"4A26F49E-EACD-4CE3-86E6-F76E9DADCEB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-154","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9880.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-005.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5487","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9880.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0876","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request."},{"lang":"es","value":"El servidor web en Shambala 4.5 permite a atacantes remotos causar una denegación de servicio (caida) mediante peticiones HTTP malformadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolvable_corporation:shambala_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D0038B0E-2EF8-421C-B745-03B09DC2322B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/281265","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9225.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4897","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/281265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9225.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0877","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en el servidor FTP en Shambala 4.5 permite a atacantes remotos leer ficheros arbitrarios mediante un ataque .. (punto punto) en los comandos LIST o GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolvable_corporation:shambala_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"D0038B0E-2EF8-421C-B745-03B09DC2322B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9224.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4896","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9224.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0878","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en el formulario de inicio de sesión de LogiSense software, incluyendo:\r\nHawk-i Billing\r\nHawk-i ASP\r\nDNS Manager\r\n\r\npermite a atacantes remotos evadir la autenticación mediante código SQL en el campo de contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logisense:dns_manager_system:*:*:*:*:*:*:*:*","matchCriteriaId":"F2D0C56C-F532-4547-8569-AEB234113DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:logisense:hawk-i:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4AEE0782-2AFF-405C-8C14-EF1D58A8D8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:logisense:hawk-i:asp:*:*:*:*:*:*:*","matchCriteriaId":"EDC0449B-09FA-4DE1-AB74-6E3937603488"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0010.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9268.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4931","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9268.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0879","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter."},{"lang":"es","value":"showtemp.cfm en Gafware CFXImage 1.6.6 permite a atacantes remotos leer ficheros arbitrarios mediante un .. (punto punto) o una ruta de estilo C: en el parámetro FILE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gafware:cfximage:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"35455BDA-E310-47F9-B4C1-7267C670807A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gafware:cfximage:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"890426A3-517C-461E-9A9A-D8B4CEA3D228"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0256.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9196.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4882","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9196.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0880","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) \"jolt\", (2) \"jolt2\", (3) \"raped\", (4) \"hping2\", (5) \"bloop\", (6) \"bubonic\", (7) \"mutant\", (8) \"trash\", and (9) \"trash2.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C349C1AC-7186-404B-85DA-9B743F7550F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.1:*:*:*:*:*:*:*","matchCriteriaId":"43FC552E-B05B-4DD0-9125-3FC9F348745D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D8A58EFB-252D-46C6-80AD-0E40E0235858"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF953655-CEF4-44C6-B160-958B473BD715"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"09B13B3B-8486-4731-B847-618E3B5CEA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"7A0B28F7-92B3-42BD-AE16-3AA274A146A7"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0881","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C349C1AC-7186-404B-85DA-9B743F7550F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.1:*:*:*:*:*:*:*","matchCriteriaId":"43FC552E-B05B-4DD0-9125-3FC9F348745D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D8A58EFB-252D-46C6-80AD-0E40E0235858"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF953655-CEF4-44C6-B160-958B473BD715"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"09B13B3B-8486-4731-B847-618E3B5CEA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"7A0B28F7-92B3-42BD-AE16-3AA274A146A7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273673","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9144.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4799","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/273673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9144.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0882","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C349C1AC-7186-404B-85DA-9B743F7550F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.1:*:*:*:*:*:*:*","matchCriteriaId":"43FC552E-B05B-4DD0-9125-3FC9F348745D"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:voip_phone_cp-7940:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D8A58EFB-252D-46C6-80AD-0E40E0235858"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BF953655-CEF4-44C6-B160-958B473BD715"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"09B13B3B-8486-4731-B847-618E3B5CEA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:skinny_client_control_protocol_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"7A0B28F7-92B3-42BD-AE16-3AA274A146A7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273673","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9142.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9143.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4794","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4798","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9142.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9143.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0883","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:proliant_bl_e-class_integrated_administrator_firmware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FEB2B39B-4DB1-4E08-A130-7ED534542D46"},{"vulnerable":true,"criteria":"cpe:2.3:h:compaq:proliant_bl_e-class_integrated_administrator_firmware:1.10:*:*:*:*:*:*:*","matchCriteriaId":"5D793C17-AE23-4BA4-B78E-07B2CAECB6ED"}]}]}],"references":[{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT2179.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9202.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4802","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT2179.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9202.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0884","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273584","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9150.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4791","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9150.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0885","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273584","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9150.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9150.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0886","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8EE29F62-FF38-4951-B3CB-2B9102CB9291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EEF0CEB-4CCF-46B1-99BC-8301CD422371"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"9A6E05A1-524C-441C-A4E2-F2E9DE62E82A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3875EB7E-7D22-4C3D-80CD-A7E8A249E97F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFD36C73-8CAC-4DDB-8A64-11DAC075D300"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"EC7E0234-23B5-41D4-A8B5-04C5BB881F3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B2277233-E3EB-42F0-BB02-068E50A09265"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59C80FB5-35CC-4FE2-8C98-A560B7D5C479"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"ADC81B47-C744-4776-BFB6-AA70D35A4140"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.5.015:*:*:*:*:*:*:*","matchCriteriaId":"FB66DFA6-089D-4200-87CB-AB1404A48EF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFB61AC-25EE-46E4-9F34-70569EF74CFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.7.002:*:*:*:*:*:*:*","matchCriteriaId":"E81CFA0E-04B7-406A-899B-157FC1862501"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"4737C7E7-1E40-40F6-A6B3-4CE1465F4105"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"A18E9CCC-D8EB-4778-B444-14314651CA9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.3_.053:*:*:*:*:*:*:*","matchCriteriaId":"D6D52CBF-D6F7-47C1-81E6-714F50F5E6BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FB7AF093-B5E2-4C4F-997B-5ECB5192A524"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E8FFFBE5-EE4C-4A10-8D94-015438A39C76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.2ap:*:*:*:*:*:*:*","matchCriteriaId":"A3BFEC03-6715-4821-8AA0-EF90E1D68DBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.2b:*:*:*:*:*:*:*","matchCriteriaId":"D7E7405D-78C0-4C31-A996-B1EF09EEA205"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"DDDEB295-B551-4D48-A542-1FC035C78F02"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:cbos:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5094C442-AB4F-41C3-8C83-4B7CB6E2A980"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/CBOS-DoS.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9151.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9153.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4813","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4815","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9152","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/CBOS-DoS.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9151.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9153.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9152","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0887","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C63D4FCE-5416-4DE2-8E9A-5BF057673118"},{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"CCA39EEE-1B65-43AE-80E2-078A49616DD1"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99057164129869&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9210.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4875","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=99057164129869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9210.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0888","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"3BA4FE31-7801-42E2-8E27-BCC6085D37A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"3F1D3B54-6B90-4540-9909-3A46AB94124A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9185.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4841","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9185.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0889","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1B343194-9599-4584-B32C-374C5FF6037F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:qpopper:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"71E0E350-C7C4-4DBA-8BFF-4079C8B41C90"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102003707432457&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269969","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8949.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4614","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102003707432457&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/269969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8949.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0891","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name."},{"lang":"es","value":"El Interfaz web (WebUI) de NetScreen ScreenOS desde la 2.6.1r8 a la anterior a la 3.1.0r1 permite a atacantes remotos causar la Denegación de Servicios (por caida), mediante un nombre largo de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D38841C-DF2D-41D8-BD15-EBBB9E9D83E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5r1:*:*:*:*:*:*:*","matchCriteriaId":"DDDBDBE1-E16B-4F03-9072-8B28E9467FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5r2:*:*:*:*:*:*:*","matchCriteriaId":"4E099835-7C70-44F1-9E2B-07AF5B3C0577"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5r6:*:*:*:*:*:*:*","matchCriteriaId":"D10CDE09-1896-4E99-B2A0-93F89164225A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2F43896A-2EF6-4069-8B81-815E4C232C0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*","matchCriteriaId":"6A7DFAB9-4D4D-4179-9DC4-F654D6E2DAB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*","matchCriteriaId":"26EC0CE2-5A5C-44ED-A423-CC20B7FFE22F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*","matchCriteriaId":"E2BD48EE-C23B-412C-895D-F58CD81FC673"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*","matchCriteriaId":"D7A6CA51-F121-44F7-80D1-CF38261D299C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*","matchCriteriaId":"B5064E9A-677E-418E-91A7-2DB686B662DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1CE7F646-B716-47D7-84E8-CA875A85C983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*","matchCriteriaId":"AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*","matchCriteriaId":"2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*","matchCriteriaId":"B1648D07-823B-4BF9-87EC-DB34797B5B5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.8_r1:*:*:*:*:*:*:*","matchCriteriaId":"B33B8346-B753-443F-BB24-74FF6C55340B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*","matchCriteriaId":"47DE8E73-0F1B-42E4-9BD6-7F5066D7330B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*","matchCriteriaId":"057B0387-44C0-45BE-9D91-D5A01C9D8020"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"28EB52A7-E8EC-46AA-A3F5-81BFA01666D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*","matchCriteriaId":"A25881AB-69D0-46E5-A502-C65933A457B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*","matchCriteriaId":"B14314AE-812D-4654-B6CE-43917A1F0542"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*","matchCriteriaId":"20F7E636-40E0-45CC-A39E-C8BDF9CFBE6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*","matchCriteriaId":"463EC9BA-B241-45D6-AB89-53EB8156E40F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274240","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9186.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.netscreen.com/support/ns25_reboot.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9186.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.netscreen.com/support/ns25_reboot.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0892","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new_atlanta_communications:servletexec_isapi:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2E3A55DD-A207-47F5-8EB8-859505490487"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273615","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9139.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.newatlanta.com/do/findFaq?faq_id=151","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4793","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9139.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.newatlanta.com/do/findFaq?faq_id=151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0893","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing \"..%5c\" (modified dot-dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new_atlanta_communications:servletexec_isapi:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2E3A55DD-A207-47F5-8EB8-859505490487"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273615","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9140.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4795","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9140.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0894","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new_atlanta_communications:servletexec_isapi:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2E3A55DD-A207-47F5-8EB8-859505490487"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273615","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9141.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4796","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9141.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0895","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matu:matu_ftp:1.13:*:*:*:*:*:*:*","matchCriteriaId":"5DBBDFC0-7DED-4B16-AA5D-38403550B536"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273581","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9138.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4792","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/273581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9138.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0896","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same \"watchfor\" expression do not occur after the throttle period, which could allow attackers to avoid detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swatch:swatch:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C2ED1FEF-D736-4F4F-9EBB-635354F398B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:swatch:swatch:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2B87D0BD-8BAE-4B03-8ADB-3FBE1F8784EE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/272582","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9100.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4746","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/272582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9100.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0897","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the \"/./\" directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intranet-server:localweb2000:2.1.0_standard_version:*:*:*:*:*:*:*","matchCriteriaId":"71CFF4BB-9490-4CA8-A1C3-798CCE5198EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274020","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9165.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4820","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9165.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0898","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline."},{"lang":"es","value":"Opera 6.0.1 y 6.0.2 permite a un sitio web remoto cargar ficheros arbitrarios del sistema cliente, sin preguntar al cliente, mediante una etiqueta <input type=file> que contiene un carácter de nueva línea."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:win32:*:*:*:*:*","matchCriteriaId":"25F0B4BE-F2B7-4774-8AAC-75239180D99B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.2:*:win32:*:*:*:*:*","matchCriteriaId":"4B24013D-1E3D-4880-A9D6-C3F1ABED4FF9"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=102256058220402&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274202","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9188.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.opera.com/windows/changelog/log603.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4834","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=ntbugtraq&m=102256058220402&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9188.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.opera.com/windows/changelog/log603.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0899","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot)."},{"lang":"es","value":"Falcon web server 2.0.0.1021 y anteriores permite a atacantes remotos sortear restricciones de acceso de ficheros protegidos mediante una URL cuya porción de directorio acaba en . (punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021:*:*:*:*:*:*:*","matchCriteriaId":"9EE60258-2AB3-4434-BCD5-C1B6A6DD8E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021_ssl:*:*:*:*:*:*:*","matchCriteriaId":"243F6B2E-84E5-47AD-A0B6-98E865805DFC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0084.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274205","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9179.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4833","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9179.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0900","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability."},{"lang":"es","value":"Desbordamiento de búfer en el servidor web de claves públicas pks PGP permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario mediante un argumento de búsqueda largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:pgp_public_key_server:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"79D00609-5F20-4C60-BC8E-C29CD0E0560E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:pgp_public_key_server:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0641E0CA-5A36-481E-BC33-4EC3B95010E7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274107","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9171.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubin.ch/pgp/src/patch_buffoverflow20020525","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4828","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9171.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rubin.ch/pgp/src/patch_buffoverflow20020525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0901","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Advanced Maryland Automatic Disk Archiver (AMANDA) 2.3.0.4 permite \r\na atacantes remotos, ejecutar código arbitrario mediante comandos largos al demonio amindexk, o a ciertos usuarios locales ejecutar código arbitrario mediante un argumento de línea de comando largo a los programas\r\namcheck\r\namgetidx\r\namtrmidx\r\ncreateindex-dump, or\r\ncreateindex-gnutar"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amanda:amanda:2.3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"840659FF-DA34-4D2F-A7AB-603E04902513"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274215","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9181.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9182.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4836","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4840","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9181.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9182.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0902","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (\") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en phpBB 2.0.0 (phpBB) permite a atacantes remotos ejecutar Javascript como otros usuarios de phpBB incluyendo http:// y comillas dobles (\"\") en una etiquieta IMG, lo que evade la comprobación de seguridad de phpBB, termina el parámetro src de la etiqueta HTML IMG, e injecta la secuencia de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274273","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9178.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4858","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9178.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0903","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the \"code\" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value."},{"lang":"es","value":"register.php en WoltLab Burning Board (wbboard) 1.1.1 usa un número pequeño de valores aleatorios para el parámetro \"code\" que se pasa a action.php para aprobar el nuevo registro, junto con IDs de usuario nuevo predecibles, lo que permite a atacantes remotos secuestrar nuevas cuentas de usuarios mediante ataques de fuerza bruta a la nueva ID de usuario y valor de código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2271970-E8FD-42A0-9D29-DFBF515DBD11"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274269","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9177.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4859","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9177.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0904","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument."},{"lang":"es","value":"La función SayText en Kismet 2.2.1 y anteriores permite a atacantes remotos ejecutar comandos arbitrarios medante metacaracteres de shell en el argumento essid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kismet:kismet:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A86309E7-4E08-47D1-8E7B-CBBE93560690"},{"vulnerable":true,"criteria":"cpe:2.3:a:kismet:kismet:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"27A4A2FE-43CD-47E8-BF63-763F011CC89E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102269718506080&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9213.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kismetwireless.net/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4883","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102269718506080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9213.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kismetwireless.net/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0905","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable."},{"lang":"es","value":"Desbordamiento de búfer en sqlexec en Informix SE-7.25 permite a usuarios locales ganar privilegios de root mediante una variable de entorno INFORMIXDIR larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix:7.25_.uc1_se:*:*:*:*:*:*:*","matchCriteriaId":"085F0186-B611-4EEF-BEC5-80193B46CFCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix:7.25_.uc2_se:*:*:*:*:*:*:*","matchCriteriaId":"4667DE1A-C18E-4923-B159-5477230DDB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix:7.25_.uc3_se:*:*:*:*:*:*:*","matchCriteriaId":"E6E0D7F4-12A5-4691-A0E4-6E5797E5CDFC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9219.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4891","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9219.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0906","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server."},{"lang":"es","value":"Desbordamiento de búfer en Sendmail anteriores a 8.12.5, cuando se configura para usar un mapa de DNS modificado para consultar registros TXT, permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante un servidor DNS malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"598F74BA-2B71-435E-92B8-9DEADB3311A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC4C83-4FB9-4344-AFCB-C260659F81DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*","matchCriteriaId":"CAF763B4-58E3-4868-8C92-47DE3E4E5F40"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9443.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/814627","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5122","source":"cve@mitre.org"},{"url":"http://www.sendmail.org/8.12.5.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2183","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9443.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/814627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sendmail.org/8.12.5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0907","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with \"icy-\"."},{"lang":"es","value":"Desbordamiento de búfer en SHOUTcast 1.8.9 y otras versiones anteriores a 1.8.12 permite a un DJ autenticado remotamente ejecutar código arbitrario en el servidor mediante un un valor largo en una cabecera cuyo nombre empieza con \"icy-\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:freebsd:*:*:*:*:*","matchCriteriaId":"E508D922-3817-4BD3-A4D5-B6981F10BDFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:linux:*:*:*:*:*","matchCriteriaId":"C08E8A3C-A83F-4339-AC5B-B8EC896B70A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"4A842C27-A792-4483-92EF-7CD08507C246"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:solaris:*:*:*:*:*","matchCriteriaId":"B703039B-1EC8-41D2-8365-CA7359BFDFE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.8.9:*:win32:*:*:*:*:*","matchCriteriaId":"EE770672-FF5D-41F7-A1CF-35811EF8098C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0016.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9251.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4934","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9251.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0908","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en el servidor web de Cisco IDS Device Manager anteriores a 3.1.2 permite a atacantes remotos leer ficheros arbitrarios mediante .. (punto punto) en la petición HTTPS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ids_device_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FB88FAB4-BC14-48A3-A426-D8660C391DDA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0214.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9174.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4760","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0214.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9174.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0909","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER."},{"lang":"es","value":"Múltiples desbordamientos de búfer en mnews 1.22 y anteriores permiten: \r\n a un servidor NNTP remoto ejecutar código arbitrario mediante respuestas largas, o \r\n a usuarios locales ganar privilegios mediante argumentos de línea de comando largos (-f, -n, -D, -M, -p), o mediante variables de entorno largas\r\n(JNAMES, MAILSERVER)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matsushita_research:mnews:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.2","matchCriteriaId":"FE2E16BB-4E75-4F3A-BE2D-47E68B43F857"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0287.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102306166201275&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102297259123103&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9226.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9227.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4899","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4900","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102306166201275&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102297259123103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9226.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9227.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0910","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to."},{"lang":"es","value":"Desbordamientos de búfer en el paquete netstd 3.07-17 permite a servidores DNS remotos ejecutar código arbitrario mediante una respuesta FQDN larga, como se observa en las utilidades \r\nlinux-ftpd\r\npcnfsd\r\ntftp\r\ntraceroute\r\nfrom/to"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:netstd:3.07:*:*:*:*:*:*:*","matchCriteriaId":"14E246E2-18B7-40F9-B929-5B373D7C9D23"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273987","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274143","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9164.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4816","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/273987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9164.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0911","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges."},{"lang":"es","value":"Caldera Volution Manager 1.1 almacena la contraseña del Administrador de Directorios en texto claro en el fichero slapd.conf, lo que podría permitir a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:volution_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EB5F02DB-7CF1-478D-B566-B43C9A7E960E"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-024.0.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9240.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4923","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-024.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9240.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0912","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow."},{"lang":"es","value":"El servidor UUCP (Unix to Unix CoPy) in.uucpd en Debian GNU/Linux 2.2 y posiblemente otros sistemas operativos, no termina adecuadamente cadenas largas, lo que permite a atacantes remotos causar una denegación de servicio, posiblemente debido a un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:ia-32:*:*:*:*:*","matchCriteriaId":"E9D468DB-C4AE-4ACB-B3B7-2FAEA90D6A49"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9230.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4910","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9230.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0913","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_hebditch:slurp:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"18C29AFC-1288-4BE9-9377-6EFFA2D57CB3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0014.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102323341407280&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9270.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4935","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102323341407280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9270.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0914","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.38.1:*:*:*:*:*:*:*","matchCriteriaId":"FAF5F93E-53A5-4A27-8563-14C41FA6A6E6"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=93065","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9228.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5052","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=93065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9228.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0915","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:harald_hoyer:autorun:2.7:*:*:*:*:*:*:*","matchCriteriaId":"0FAD056C-49B2-45D1-B111-630F924CBE8C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:harald_hoyer:xandros_desktop_os:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CEC2C3A8-801E-4044-9C22-CD66D3B66ABC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0260.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9211.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4884","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9211.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0916","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stellar-x_software:msntauth:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.3","matchCriteriaId":"4A1C6348-8F02-420F-AB69-7B484358AA93"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0087.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/275347","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9248.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4929","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/diff-2.4.STABLE6-2.4.STABLE7.gz","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/275347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9248.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v2/2.4/diff-2.4.STABLE6-2.4.STABLE7.gz","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0917","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:cspassword:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3A4C4A-D39A-42EF-93E4-09DA4CCF0307"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274727","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9220.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4885","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9220.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0918","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a \"remove\" option in the command parameter, which generates an error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:cspassword:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3A4C4A-D39A-42EF-93E4-09DA4CCF0307"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274727","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9221.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4887","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9221.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0919","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:cspassword:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3A4C4A-D39A-42EF-93E4-09DA4CCF0307"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274727","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9222.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4888","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9222.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0920","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:cspassword:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3A4C4A-D39A-42EF-93E4-09DA4CCF0307"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274727","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9223.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4889","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9223.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0921","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC5479CB-ABC0-4DE1-A173-C73377592CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0_professional:*:*:*:*:*:*:*","matchCriteriaId":"D1588A5C-3629-41BA-A5DB-EF181E5FEF8A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9331.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9331.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0922","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC5479CB-ABC0-4DE1-A173-C73377592CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0_professional:*:*:*:*:*:*:*","matchCriteriaId":"D1588A5C-3629-41BA-A5DB-EF181E5FEF8A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9332.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9333.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4991","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4993","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9332.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9333.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0923","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the \"Advanced Settings\" capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC5479CB-ABC0-4DE1-A173-C73377592CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0_professional:*:*:*:*:*:*:*","matchCriteriaId":"D1588A5C-3629-41BA-A5DB-EF181E5FEF8A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9333.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4994","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9333.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0924","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the \"Advanced Settings\" capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC5479CB-ABC0-4DE1-A173-C73377592CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csnews:1.0_professional:*:*:*:*:*:*:*","matchCriteriaId":"D1588A5C-3629-41BA-A5DB-EF181E5FEF8A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4451","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0925","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_mondor:mmftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.7","matchCriteriaId":"2C6DB223-E660-4142-93A6-DB40A85ED360"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_mondor:mmmail:*:*:*:*:*:*:*:*","versionEndIncluding":"0.0.13","matchCriteriaId":"278911B2-E573-4FAE-8040-D421F7A2C8F3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html","source":"cve@mitre.org"},{"url":"http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt","source":"cve@mitre.org"},{"url":"http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276523","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9336.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9337.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4990","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4999","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mmondor.gobot.ca/software/linux/mmftpd-changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mmondor.gobot.ca/software/linux/mmmail-changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9336.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9337.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0926","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_research:webmathematica:4.0_amateur:*:*:*:*:*:*:*","matchCriteriaId":"02B6C03B-E307-41AF-B59A-2C11182EFB2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:wolfram_research:webmathematica:4.0_professional:*:*:*:*:*:*:*","matchCriteriaId":"7E0708E9-E6EF-45B6-B22E-594D65F2160F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0174.html","source":"cve@mitre.org"},{"url":"http://support.wolfram.com/webmathematica/security/fileaccess.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9373.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/664323","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5035","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0174.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.wolfram.com/webmathematica/security/fileaccess.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9373.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/664323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0928","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pirch:pirch_irc:98:*:*:*:*:*:*:*","matchCriteriaId":"521A06FB-54F0-4B88-9C10-FBC836EA5D56"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0256.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9409.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5079","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9409.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0929","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B04B18E8-A130-4BAA-8BBC-D9DF7085F9F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0126.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2962999","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9428.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5097","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/servlet/tidfinder/2962999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9428.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0930","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"B04B18E8-A130-4BAA-8BBC-D9DF7085F9F0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0127.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/278689","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9429.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5099","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/278689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9429.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0931","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the \"id\" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luis_bernardo:myhelpdesk:*:*:*:*:*:*:*:*","versionEndIncluding":"2002-05-09","matchCriteriaId":"0DE9BDC6-3D87-4820-BFB9-1B1F1562FD44"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9319.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9320.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4967","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4970","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9319.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9320.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0932","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the \"id\" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luis_bernardo:myhelpdesk:*:*:*:*:*:*:*:*","versionEndIncluding":"2002-05-09","matchCriteriaId":"0DE9BDC6-3D87-4820-BFB9-1B1F1562FD44"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9321.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4971","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9321.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0933","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datalex:bookit_consumer:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"42599CA3-D963-4692-8254-2F9210C473E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0063.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9316.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4972","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9316.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0934","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jon_hedley:alienform2:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F62CB7A9-7ECC-4AD8-AC87-35DFD87D8616"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0068.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9325.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9325.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0935","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0120.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277940","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9396.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9396.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0936","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0095.html","source":"cve@mitre.org"},{"url":"http://tomcat.apache.org/security-4.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9339.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4995","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9339.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0937","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0095.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9339.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4997","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9339.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0938","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"84213205-06FB-4454-928A-CC7673F8020B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0156.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/278222","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9353.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5026","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/278222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9353.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0939","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:mscapi_csp:5.50:*:*:*:*:*:*:*","matchCriteriaId":"A57D5F39-2B2F-4CB5-94AC-4D2CE4437104"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:mscapi_csp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"7CE0D7EA-B2E0-4E49-B226-16D91DE67426"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9076.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4729","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9076.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0940","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:mscapi_csp:5.50:*:*:*:*:*:*:*","matchCriteriaId":"A57D5F39-2B2F-4CB5-94AC-4D2CE4437104"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:mscapi_csp:5.54:*:*:*:*:*:*:*","matchCriteriaId":"7CE0D7EA-B2E0-4E49-B226-16D91DE67426"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4729","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0941","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:nforce:*:*:*:*:*:*:*:*","matchCriteriaId":"6252FF68-DB64-4BEC-86D9-A8517B0F9D64"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:*:*:*:*:*:*:*:*","matchCriteriaId":"C008CC6B-6F9A-4541-97C5-7ED7C20349C4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0172.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9354.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5024","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9354.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0942","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lumigent:log_explorer:*:*:*:*:*:*:*:*","versionEndIncluding":"3.01","matchCriteriaId":"A0C0EB9F-81E2-4F85-87DF-C3B05E95B3EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0146.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277026","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9346.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lumigent.com/LogExplorer/Support/whatsnew3_03.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5016","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5017","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5018","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9346.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lumigent.com/LogExplorer/Support/whatsnew3_03.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0943","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metalinks:metacart2.sql:*:*:*:*:*:*:*:*","matchCriteriaId":"11011506-BFF3-452D-B529-4E9F24FFD834"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0200.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9393.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5042","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0200.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9393.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0944","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deepmetrix:livestats:6.2:*:*:*:*:*:*:*","matchCriteriaId":"366672E6-DA38-4076-87FF-D0062C1859CC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0207.html","source":"cve@mitre.org"},{"url":"http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9390.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5047","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.deepmetrix.com/log_analyzer/xsp/service/release_notes/index.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9390.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0945","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seanox:devwex:2002-05-20:*:*:*:*:*:*:*","matchCriteriaId":"4A893F6B-7A4D-42B5-AA1D-637DC491C0D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0056.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9298.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5047","source":"cve@mitre.org"},{"url":"http://www.seanox.de/projects.devwex.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4979","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9298.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.seanox.de/projects.devwex.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0946","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\\ (dot dot) sequences in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seanox:devwex:2002-05-20:*:*:*:*:*:*:*","matchCriteriaId":"4A893F6B-7A4D-42B5-AA1D-637DC491C0D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0056.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9299.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5048","source":"cve@mitre.org"},{"url":"http://www.seanox.de/projects.devwex.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4978","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9299.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.seanox.de/projects.devwex.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0947","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:reports:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D3DC14BC-38DB-4ED1-8A74-9C6648033BC2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0097.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276524","source":"cve@mitre.org"},{"url":"http://technet.oracle.com/deploy/security/pdf/reports6i_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9289.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/997403","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/vna/ora-reports.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4848","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://technet.oracle.com/deploy/security/pdf/reports6i_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9289.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/997403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/vna/ora-reports.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0948","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes (SSI) as the web server, via the (1) Name or (2) Email parameters, which are not properly filtered."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts_for_educators:makebook:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D772FA9D-C074-450F-BB4F-1EB70F2790E5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0094.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00135.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9356.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linguistic-funland.com/scripts/MakeBook/makebook.script","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4996","source":"cve@mitre.org"},{"url":"http://www.tesol.net/scriptmail.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9356.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linguistic-funland.com/scripts/MakeBook/makebook.script","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tesol.net/scriptmail.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0949","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:telindus:adsl_router:1110:*:*:*:*:*:*:*","matchCriteriaId":"71100A69-892D-414B-A91B-6481382E301D"},{"vulnerable":true,"criteria":"cpe:2.3:h:telindus:adsl_router:1120:*:*:*:*:*:*:*","matchCriteriaId":"5815D096-D7DA-4AA5-B2FF-5FF1970FB4B1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0028.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9277.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4946","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9277.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0950","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active_mail:1.422:*:*:*:*:*:*:*","matchCriteriaId":"9AAB6327-61C4-44D8-A9C5-1B316E434AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:transware:active_mail:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D21FD0A-86FC-4667-AD6E-DC18C6472EBD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0108.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9358.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5007","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0108.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9358.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0951","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a \"'--\" sequence in the username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ruslan_communications:body_builder:*:*:*:*:*:*:*:*","matchCriteriaId":"37812B12-3682-4DFA-9485-A11A28AC4911"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0120.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9359.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5008","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9359.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0952","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ONS15454 optical transport platform running ONS 3.1.0 to 3.2.0 allows remote attackers to cause a denial of service (reset) by sending IP packets with non-zero Type of Service (TOS) bits to the Timing Control Card (TCC) LAN interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ons-tos-vuln-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9377.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5058","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/ons-tos-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9377.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0953","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"globals.php in PHP Address before 0.2f, with the PHP allow_url_fopen and register_globals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_address:php_address:0.2e:*:*:*:*:*:*:*","matchCriteriaId":"2CB53923-A335-4CBA-8FAA-933764BAF247"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277987","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9379.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5039","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0182.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9379.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0954","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"A9C63DA6-1FBC-431A-9D8A-66EA93225294"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0121.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102651159507659&w=2","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102651159507659&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0955","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_sp_1:*:*:*:*:*:*:*","matchCriteriaId":"770ADDF9-2671-40D5-9E3F-FA543B60FD5A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9408.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5078","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9408.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0956","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent:3.1eal:*:*:*:*:*:*:*","matchCriteriaId":"C4B3C750-334F-4BF8-82F0-27C8FD7D932D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0090.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/275710","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9275.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4950","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0090.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/275710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9275.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0957","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BlackICE Agent 3.1.eal and 3.1.ebh has a high tcp.maxconnections setting, which could allow remote attackers to cause a denial of service (memory consumption) via a large number of connections to the BlackICE system that consumes more resources than intended by the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent:3.1eal:*:*:*:*:*:*:*","matchCriteriaId":"C4B3C750-334F-4BF8-82F0-27C8FD7D932D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent:3.1ebh:*:*:*:*:*:*:*","matchCriteriaId":"7F213EF9-B276-4156-8728-9446D9FE0410"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0114.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9405.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0114.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9405.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0958","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ekilat_llc:php\\(reactor\\):1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"DD3B7B58-8509-450B-8B9C-A6001E8BA029"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0034.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=91877","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9280.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4952","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=91877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9280.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0959","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:splatt:splatt_forum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1FB90EC9-7153-4BA7-B7B4-01747C72E421"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0091.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/275744","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9279.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4953","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/275744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9279.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0960","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:voxel:cbms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"28B23FBA-31C9-43AD-92CC-5E02C343458E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0043.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9294.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4957","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9294.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0961","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:voxel:cbms:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"28B23FBA-31C9-43AD-92CC-5E02C343458E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0043.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9295.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4957","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9295.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0962","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"A2196171-E460-4EE7-BE33-70A39D161A7F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html","source":"cve@mitre.org"},{"url":"http://geeklog.sourceforge.net/article.php?story=20020610013358149","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9309.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9310.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4969","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4974","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://geeklog.sourceforge.net/article.php?story=20020610013358149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9309.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9310.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0963","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"A2196171-E460-4EE7-BE33-70A39D161A7F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html","source":"cve@mitre.org"},{"url":"http://geeklog.sourceforge.net/article.php?story=20020610013358149","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9311.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4968","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://geeklog.sourceforge.net/article.php?story=20020610013358149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9311.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0964","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which reaches the player limit and prevents other players from connecting until the original responses have timed out."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.4:*:linux:*:*:*:*:*","matchCriteriaId":"15DFE5E2-45B0-49BA-B76A-8446C2482529"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"B8FCB99C-0328-4486-9AA4-704B21CF4F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4D0DDA2B-891D-4F79-BAB4-071749D70C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1E7A86C9-1E30-4D45-B600-D00931DDF92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"65FE3BD9-49DF-4F0F-9236-7C87D8C165A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"EC796554-0AC5-40DE-B3AA-69A60D7C6786"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0CA42F82-2F19-4253-B9B2-AED23607672E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0248.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9412.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5076","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0248.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9412.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0965","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0096.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276526","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/net9_dos_alert.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9288.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/630091","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4845","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/net9_dos_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9288.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/630091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0966","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aci:4d_webserver:6.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C5F5282C-E0D3-47CB-8071-FF18EB035903"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0208.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9374.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5045","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0208.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9374.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0967","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long \"ed2k:\" URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:edonkey2000:edonkey_2000_client:35.16.59:*:*:*:*:*:*:*","matchCriteriaId":"F545ABFD-088B-435B-9559-C593CBF0FAD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:edonkey2000:edonkey_2000_client:35.16.60:*:*:*:*:*:*:*","matchCriteriaId":"0E98924A-C334-4065-BAC3-0FD0F0EDC245"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/275708","source":"cve@mitre.org"},{"url":"http://www.edonkey2000.com/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9278.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5042","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4951","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/275708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.edonkey2000.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9278.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0968","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_www:*:*:*:*:*:*:*:*","versionEndIncluding":"1.16","matchCriteriaId":"EEA41D63-4E01-4FCF-B7BA-41C5C2D5A6CE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0106.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102563702928443&w=2","source":"cve@mitre.org"},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9338.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3780","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5006","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102563702928443&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.analogx.com/contents/download/network/sswww.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9338.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0969","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long \"datadir\" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group."},{"lang":"es","value":"Desbordamiento de búfer en MySQL anteriores a 3.23.50, y 4.0 beta anteriores a 4.02 sobre Windows, y posiblemente otras plataformas, permite a usuarios locales ejecutar código arbitrario mediante un parámetro datadir largo en el fichero de inicialización my.ini, cuyos permisos en Windows permiten Control Total al grupo Todos."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndExcluding":"3.23.50","matchCriteriaId":"5D1DF80B-3AFC-4AED-9A38-8438E1A09FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.2","matchCriteriaId":"82AB5E3E-3DA4-4DF5-95B2-C078F162A3A0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x86:*","matchCriteriaId":"60366048-32FE-4081-A852-04319FD7A52C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103358628011935&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.iss.net/security_center/static/10243.php","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.x","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5853","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0003.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103358628011935&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.iss.net/security_center/static/10243.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.x","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-0970","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack."},{"lang":"es","value":"La capacidad SSL en Konqueror 3.0.2 y anteriores no verifica las restriccíones básicas de una certificad intermedio firmado por una AC (Autoridad Certificadora), lo que permite a atacantes remotos falsear los certificados de sitios de confianza mediante un ataque de hombre en el medio (man-in-the-middle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F531972-E0A7-4E7C-A899-3766CEAAE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0170.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000519","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102918241005893&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-155","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20020818-1.txt","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:058","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5410","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0170.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102918241005893&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20020818-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0971","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in VNC, TightVNC, and TridiaVNC allows local users to execute arbitrary code as LocalSystem by using the Win32 Messaging System to bypass the VNC GUI and access the \"Add new clients\" dialogue box."},{"lang":"es","value":"Vulnerabilidad en VNC, TightVNC, y TridiaVNC permite a usuarios locales ejecutar código arbitrario como LocalSystem usando el sistema de mensajes de Win32 para evitar el GUI (Interfaz Gráfico de Úsuario) y acceder al cuadro de diálogo \"Añadir nuevos clientes\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3_r9","matchCriteriaId":"3CA6820A-D28A-49C6-A6D6-D54F95274FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:att:winvnc_server:3.3.3_r7:*:*:*:*:*:*:*","matchCriteriaId":"4FEAAE30-8DA0-4C04-B745-FECCEA0685ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B2F4EE57-DA68-4438-A401-BAC82B7242D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9E11A57-016E-4720-A266-A53743629CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0FD5B03E-D897-4A06-A3EF-62B13B46B7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:tridia:tridiavnc:1.5:*:*:*:*:*:*:*","matchCriteriaId":"D1E2C09A-A649-4E4C-BC75-45F456546B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:tridia:tridiavnc:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39675379-9A88-40AE-85A1-F0E4ADEA1A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:tridia:tridiavnc:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"40879BF2-41EB-4170-A7EC-223CB22A83ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tridia:tridiavnc:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"13622F73-D0BF-41DD-976F-4926FA5744CC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102994289123085&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9979.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5530","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102994289123085&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9979.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0972","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in PostgreSQL 7.2 allow attackers to cause a denial of service and possibly execute arbitrary code via long arguments to the functions (1) lpad or (2) rpad."},{"lang":"es","value":"Desbordamiento de búfer en PostgreSQL 7.2 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante argumentos largos en las funciones lpad y rpad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.3.2:*:*:*:*:*:*:*","matchCriteriaId":"FF7D1F6F-044C-478D-991D-D70281FD7C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"6EB98484-1234-4BA2-ACB0-28F4BE684D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F0D16C66-3688-4CF1-8788-F7D7766F04F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F520EC9F-7B20-4108-B3DC-ABF4947A2D6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"78D324E1-A723-4ECC-A58F-660A5125FD05"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*","matchCriteriaId":"95E0614E-0911-43EE-9F3D-2CF87E0F1851"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF09CFB-F7CE-4659-BB20-83231539F765"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102987608300785&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8034","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102987608300785&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-001.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0973","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the (1) accept, (2) getsockname, and (3) getpeername system calls, and the (4) vesa FBIO_GETPALETTE ioctl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.1:release_p10:*:*:*:*:*:*","matchCriteriaId":"01514C6C-0AFA-4668-9CE9-9429DDB888F2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102976839728706&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9903.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5493","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102976839728706&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9903.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0974","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102942549832077&w=2","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ328940","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9878.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5478","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-060","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102942549832077&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ328940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9878.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0975","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft DirectX Files Viewer ActiveX control (xweb.ocx) 2.0.6.15 and earlier allows remote attackers to execute arbitrary via a long File parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx_files_viewer_control:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.6.15","matchCriteriaId":"A6B9BB11-D4C9-44DA-BAA4-0143C4F17D27"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102953851705859&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9877.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5489","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102953851705859&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9877.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0976","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 4.0 and later allows remote attackers to read arbitrary files via a web page that accesses a legacy XML Datasource applet (com.ms.xml.dso.XMLDSO.class) and modifies the base URL to point to the local system, which is trusted by the applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A5B815D9-BC21-4A17-AF00-B8AD181027D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42502347-DD40-4F8C-9861-C0A88A3F8608"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"C375A9AA-505B-444C-A45F-2BAAD0B2CD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102960731805373&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9885.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5490","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102960731805373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9885.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0977","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:file_transfer_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"16880CAD-9465-45E0-AB71-D8A70940138C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0189.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0189.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0978","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT and TGN parameters in a call to the \"Persist\" function."},{"lang":"es","value":"El control ActiveX FTM (Microsoft File Transfer Manager), en versiones anteriores a la versión 4.0, permite a atacantes remotos la subida o descarga de ficheros arbitrarios en ubicaciones arbitrarias mediante un ataque man-in-the-middle con los parámetros TGT y TGN modificados en la llamada a la función 'Persist'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:file_transfer_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"16880CAD-9465-45E0-AB71-D8A70940138C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0189.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0189.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0979","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code."},{"lang":"es","value":"La característica de registro (logging) de la Máquina Virtual de Java en Internet Explorer escribe la salida de funciones como System.out.println a una ruta conocida, lo que puede ser usado para ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:*:*:*:*:*:*:*:*","matchCriteriaId":"D27CE372-36F6-4777-85B3-1B45A20D8360"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102961031107261&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9886.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5491","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102961031107261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9886.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0980","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL."},{"lang":"es","value":"El componente de Carpetas Web en Internet Explorer 5.5 y 6.0 escribe un mensaje de error en una localización conocida en una carpeta temporal, lo que permite a atacantes remotos ejecutar código arbitrario inyectándolo en el mensaje de error, y refiriendose al mensaje de error mediante una URL mhtml:"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102942234427691&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=102937705527922&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102943486811091&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9881.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5473","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-014","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102942234427691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=102937705527922&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102943486811091&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9881.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0981","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line."},{"lang":"es","value":"Desbordamiento de búfer en el comando ndcfg para UnixWare 7.1.1 y Open UNIX 8.0.0 permite a usuarios locales ejecutar código arbitrario mediante una lína de comandos larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.36/CSSA-2002-SCO.36.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9945.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5551","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.36/CSSA-2002-SCO.36.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9945.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0982","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure."},{"lang":"es","value":"Microsoft SQL Server 2000 SP2, cuando se configura como distribuidor, permite a atacantes ejecutar código arbitrario mediante el parámetro @scriptfile del procedimiento almacenado sp_MScopyscript"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103004505027360&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103004505027360&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0983","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service (crash) via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"CC775325-9EA0-4E13-A03A-BD315E10C056"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A05.asc","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5055","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9395","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0984","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:light:light:2.7.30p4:*:*:*:*:*:*:*","matchCriteriaId":"88D57009-3340-4D43-93BA-64DBCACFD278"},{"vulnerable":true,"criteria":"cpe:2.3:a:light:light:2.8_pre9:*:*:*:*:*:*:*","matchCriteriaId":"E039D54D-658C-4415-B42C-DF498385F041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0231.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-156","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9943.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5555","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9943.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0985","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndIncluding":"4.2.2","matchCriteriaId":"E7CF9839-3A11-4934-B956-B590261FDAFC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.1:*:*:*:*:*:*:*","matchCriteriaId":"85CCF640-211C-4EC0-9F41-68F5B39CA3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B6ADD463-E918-4F4D-9FA7-D109EBC98BD8"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=103011916928204&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=105760591228031&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-168","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2002_036_modphp4.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/2111","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-213.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-214.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9966","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=103011916928204&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=105760591228031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2002_036_modphp4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/2111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-213.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-214.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-0986","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a \"spam proxy.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103011916928204&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=105760591228031&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-168","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/410609","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_036_modphp4.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2160","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-213.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-214.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9959","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103011916928204&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=105760591228031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/410609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_036_modphp4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-213.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-214.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0987","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9976.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5044","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5575","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9976.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0988","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9977.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5577","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9977.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5577","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0989","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*","matchCriteriaId":"7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*","matchCriteriaId":"5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:06.asc","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=72728","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000521","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/ChangeLog","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103046442403404&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4471","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-158","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9978.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5033","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-189.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-190.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-191.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-156.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5574","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:06.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=72728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gaim.sourceforge.net/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103046442403404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9978.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-189.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-191.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5574","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0990","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout."},{"lang":"es","value":"El componente de proxy web en Symantec Enterprise Firewall (SEF) 6.5.2 a 7.0, Raptor Firewall 6.5 y 6.5.3, VelociRaptor, y Symantec Gateway Security permite a atacantes remotos causar una denegación de servicio (agotamiento de recursos de conexiones) mediante múltiples peticiones de conexión a dominios cuyo servidor DNS no responda o no exista, lo que genera una larga espera."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:6.5.2:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"0306D0E7-691F-46EB-9133-F585000476A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"8656778B-9299-436B-AF8A-64C042273751"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"8D5B3D26-F6FB-4D38-99B5-4AAF8C62F82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5:*:windows_nt:*:*:*:*:*","matchCriteriaId":"D585A9BA-7F89-4382-95BB-823B83E5F222"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5.3:*:solaris:*:*:*:*:*","matchCriteriaId":"4BBE1CA5-CDB0-4C9C-A6AB-0727C56E419F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:500:*:*:*:*:*:*:*","matchCriteriaId":"DA052121-6694-4F90-BEE1-E5D987676A2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:700:*:*:*:*:*:*:*","matchCriteriaId":"3F2ADA6F-769B-441F-89B0-C66DDE1C0F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1000:*:*:*:*:*:*:*","matchCriteriaId":"8C1D900E-FEB4-4EA7-A88F-84607A9BBAF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1100:*:*:*:*:*:*:*","matchCriteriaId":"107F69B6-8CFA-44F6-B6CA-AD54B5D194E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1200:*:*:*:*:*:*:*","matchCriteriaId":"639A972B-4D99-4E8A-885E-930779D65125"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1300:*:*:*:*:*:*:*","matchCriteriaId":"849ABDDF-321F-43A3-9723-6B33907D8A52"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5110:*:*:*:*:*:*:*","matchCriteriaId":"7E42EDB2-616D-4915-9E41-7D80F32E4901"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5200:*:*:*:*:*:*:*","matchCriteriaId":"1D1175AC-9310-4804-8FB3-2F988F55BD09"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5300:*:*:*:*:*:*:*","matchCriteriaId":"FF09575E-83D3-4772-816B-7D639B1C32A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103463869503124&w=2","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10364.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5958","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103463869503124&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10364.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0991","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.05:*:*:*:*:*:*:*","matchCriteriaId":"729FE6E7-5665-4A87-A281-0F904AEA1D05"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.06:*:*:*:*:*:*:*","matchCriteriaId":"46E92180-5696-49F2-8972-1949F2EBD5D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0300.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0016.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9431.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5088","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0300.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9431.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0992","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4258","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9475.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5143","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/4258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9475.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0993","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users to access restricted files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:instant_support:*:enterprise:*:*:*:*:*:*","matchCriteriaId":"A6C6AAAB-F8EB-47B7-8C43-BE7D533E7088"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0023.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9620.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5267","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9620.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0994","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sun_pci_ii_driver:2.3:*:*:*:*:*:*:*","matchCriteriaId":"842C11D4-43E2-4E7C-9795-6D70922F1CB9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9476.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5146","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9476.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0995","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to \"insert,\" which adds the provided username to the adminUsers table."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gianluca_baldo:phpauction:1.2:*:*:*:*:*:*:*","matchCriteriaId":"21DEE163-5D84-4B74-807D-D0155D4D91F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianluca_baldo:phpauction:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2332338A-753D-4B34-95E3-B205F290895E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianluca_baldo:phpauction:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1044F5A0-FEA0-46D4-8E98-6E915CA398DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianluca_baldo:phpauction:2.1:*:*:*:*:*:*:*","matchCriteriaId":"834E6244-8A54-4D49-833E-C49D047D93E2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0014.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9462.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.phpauction.org/viewnew.php?id=5","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5141","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9462.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.phpauction.org/viewnew.php?id=5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0996","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail:3.0.3a:b:*:*:*:*:*:*","matchCriteriaId":"A3E56419-E190-4249-8B9E-02DC20B5F2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4332FF7C-B625-4885-84F1-95A210391A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail_xe:3.1:*:*:*:*:*:*:*","matchCriteriaId":"234B3494-2227-4570-A546-ABA03F44251F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0153.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2963051","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9560.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5230","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5231","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0153.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/servlet/tidfinder/2963051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9560.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0997","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail:3.0.3a:b:*:*:*:*:*:*","matchCriteriaId":"A3E56419-E190-4249-8B9E-02DC20B5F2F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4332FF7C-B625-4885-84F1-95A210391A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail_xe:3.1:*:*:*:*:*:*:*","matchCriteriaId":"234B3494-2227-4570-A546-ABA03F44251F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0152.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2962974","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9559.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5232","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/servlet/tidfinder/2962974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9559.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0998","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (dot dot) sequences and null characters in the lang parameter, which is processed by a call to the include function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:care_2002:care_2002:1.0:*:*:*:*:*:*:*","matchCriteriaId":"56B92E3A-ED04-438C-BA43-BF9C1BEB3A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:care_2002:care_2002:1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"9760C4DD-8475-4685-B35D-5B498C763AE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html","source":"cve@mitre.org"},{"url":"http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9552.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5218","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9552.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-0999","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:care_2002:care_2002:1.0:*:*:*:*:*:*:*","matchCriteriaId":"56B92E3A-ED04-438C-BA43-BF9C1BEB3A48"},{"vulnerable":true,"criteria":"cpe:2.3:a:care_2002:care_2002:1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"9760C4DD-8475-4685-B35D-5B498C763AE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html","source":"cve@mitre.org"},{"url":"http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9553.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5219","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/9553.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1000","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:simpleserver_shout:1.0:*:*:*:*:*:*:*","matchCriteriaId":"75993B6E-6901-4482-B6F9-DAD70E368CC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0338.html","source":"cve@mitre.org"},{"url":"http://www.analogx.com/contents/download/network/ssshout.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9427.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3782","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5104","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0338.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.analogx.com/contents/download/network/ssshout.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9427.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1001","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F07F833B-66C0-4549-9C62-EFC4947ABDF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F51BA430-04F4-435E-9180-C964D62EF7D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DBB9ED60-F67B-4060-95E2-1C5684AEC159"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A6205F79-D453-4625-8048-03720A418EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FC2FD75-A8B3-41CE-AAE5-913A169CF06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F17CDA4E-0226-4687-8ED3-9C15C0414930"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"404ED9AE-E0B7-4487-9725-13579233E757"},{"vulnerable":true,"criteria":"cpe:2.3:a:analogx:proxy:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"92CC5DC5-EC56-4286-9FDD-5890562A6A8A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0006.html","source":"cve@mitre.org"},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9455.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9456.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5138","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5139","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.analogx.com/contents/download/network/proxy.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9455.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9456.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1002","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:emframe:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"49E73AC4-B14D-4B71-85C4-A1F202EEE6E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0093.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/279683","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9444.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5117","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/279683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9444.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1003","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B30A5DB6-3FF2-436E-BFB6-B9A5FD911E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DBC53A0-8994-470A-ACD0-A06DE4BBE8BF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0073.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9501.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5184","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9501.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1004","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:argosoft_mail_server:1.8.1.5:*:plus:*:*:*:*:*","matchCriteriaId":"56D7EE17-B363-49CB-8427-C31942085F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:argosoft_mail_server:1.8.1.5:*:pro:*:*:*:*:*","matchCriteriaId":"C2B638F1-2666-4F16-B147-7775B05B433C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html","source":"cve@mitre.org"},{"url":"http://www.argosoft.com/applications/mailserver/changelist.asp","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9477.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5144","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.argosoft.com/applications/mailserver/changelist.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9477.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1005","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:argosoft_mail_server:1.8.1.5:*:pro:*:*:*:*:*","matchCriteriaId":"C2B638F1-2666-4F16-B147-7775B05B433C"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:argosoft_mail_server:1.8.1.6:*:pro:*:*:*:*:*","matchCriteriaId":"C8A24E89-651F-4AC8-8449-BAEB1460E673"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:argosoft_mail_server:1.8.1.7:*:pro:*:*:*:*:*","matchCriteriaId":"071D384E-8275-4E1A-86DD-0FE847C6536E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0515.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9759.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5395","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0515.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9759.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1006","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B09278F4-B30A-4EFE-B7A0-ED74F295DE21"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D3E8AFB9-77E2-418E-B797-7B80501646C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"865CEB91-01A2-460F-A465-E2176E95679A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BB7FF3BF-9B65-4F09-94E6-AD4121084B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"F59C2AEE-80CB-429C-85C3-AD10DE331404"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"FA264216-74F8-48E7-B5DF-BDCB2334E42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D2C7719B-AAEF-4C23-ADA3-E669D7F4FD96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"688A9C46-08CA-4175-BBAC-9D54B7DB6BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"3C7A4FB0-EC3A-4411-A166-097D1BB43C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"82A24B30-2D17-43A6-AE63-EBEEFF8822FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.10:*:*:*:*:*:*:*","matchCriteriaId":"DCE3C6CB-689C-445F-B4E5-DD14E7442193"},{"vulnerable":true,"criteria":"cpe:2.3:a:bbc_education:betsie:1.5.11:*:*:*:*:*:*:*","matchCriteriaId":"185C3A28-700B-4C28-8EEE-3C6BF3AEA47B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html","source":"cve@mitre.org"},{"url":"http://www.bbc.co.uk/education/betsie/parser.pl.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9468.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5135","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bbc.co.uk/education/betsie/parser.pl.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9468.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1007","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:blackboard:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6DC4593-108E-44F4-B322-805B6BC00A20"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0005.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9467.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5137","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9467.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1008","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9DDCE4B2-41B9-4548-82E8-E884C6091FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E7A843CF-0322-46EE-AD9A-C564007FED58"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9445.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5115","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9445.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1009","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) \"Name\" or (2) \"E-mail\" parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9DDCE4B2-41B9-4548-82E8-E884C6091FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E7A843CF-0322-46EE-AD9A-C564007FED58"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9548.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5211","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9548.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1010","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a \"?\" character, which is treated as a wildcard character and bypasses the web handlers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino_r4:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"96835F03-8F8F-46A9-A193-1CE2B7A9BB2B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1011","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.6:*:*:*:*:*:*:*","matchCriteriaId":"000BA04D-95C8-42B5-8ED8-EE67F4A6430E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBF6447F-F810-4337-8E6E-092651AC73B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.7:*:*:*:*:*:*:*","matchCriteriaId":"7A7079F0-DF9D-48F5-85AD-53EB983DBA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A7E1F60-3BCC-4091-85DA-2FEE32C254DC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/282292","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9555.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5235","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/282292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9555.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1012","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.6:*:*:*:*:*:*:*","matchCriteriaId":"000BA04D-95C8-42B5-8ED8-EE67F4A6430E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DBF6447F-F810-4337-8E6E-092651AC73B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.7:*:*:*:*:*:*:*","matchCriteriaId":"7A7079F0-DF9D-48F5-85AD-53EB983DBA8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_management_framework:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3A7E1F60-3BCC-4091-85DA-2FEE32C254DC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/282283","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9556.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5233","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/282283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9556.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1013","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:media-ixt:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"65082DC5-964C-453A-BADE-CC277DF7F75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_edge:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"281AC7F7-6696-4B4A-8ACC-64F576BB3CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_edge:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0EFE56BB-95C7-440E-A31C-CB6B25A97D11"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_server:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"09CEC3AD-69F1-4817-AB68-7520BEB4E0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_server:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"35707B83-A5C9-4A06-AAAD-B6A737CED479"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_server:5.1.3:*:*:*:*:*:*:*","matchCriteriaId":"7E8250C7-E121-4A0E-959D-6410F376FA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_server:5.2.0r:*:*:*:*:*:*:*","matchCriteriaId":"D61E2831-4B67-45B5-8E1C-B02E3DBAB5D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_server:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"56642903-6168-4DA1-95CC-6043570A111F"},{"vulnerable":true,"criteria":"cpe:2.3:a:inktomi:traffic_server:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"941B1536-26D6-4F21-8EB2-44B0D3B5F781"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0023.html","source":"cve@mitre.org"},{"url":"http://support.inktomi.com/kb/070202-003.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9465.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.inktomi.com/kb/070202-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9465.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1014","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2:1.0.2.340:*:*:*:*:*:*:*","matchCriteriaId":"1B8A693D-A504-4949-9947-0D7CFC8849C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2:1.0.2.379:*:*:*:*:*:*:*","matchCriteriaId":"3887C616-8817-414A-9FD9-B5B365420A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.340:*:*:*:*:*:*:*","matchCriteriaId":"869156EC-1587-4CAB-836F-BF6A7D556F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.379:*:*:*:*:*:*:*","matchCriteriaId":"911D7615-7AEC-4F17-AC04-E5AF35B549DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.10.505:gold:*:*:*:*:*:*","matchCriteriaId":"2BBC41FB-B9F5-47EB-97D8-3ACFC5182AAE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/security/bufferoverrun07092002.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9538.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/843667","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5217","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/security/bufferoverrun07092002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9538.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/843667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1015","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2:1.0.2.340:*:*:*:*:*:*:*","matchCriteriaId":"1B8A693D-A504-4949-9947-0D7CFC8849C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2:1.0.2.379:*:*:*:*:*:*:*","matchCriteriaId":"3887C616-8817-414A-9FD9-B5B365420A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.340:*:*:*:*:*:*:*","matchCriteriaId":"869156EC-1587-4CAB-836F-BF6A7D556F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realjukebox_2_plus:1.0.2.379:*:*:*:*:*:*:*","matchCriteriaId":"911D7615-7AEC-4F17-AC04-E5AF35B549DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.10.505:gold:*:*:*:*:*:*","matchCriteriaId":"2BBC41FB-B9F5-47EB-97D8-3ACFC5182AAE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0130.html","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/security/bufferoverrun07092002.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9539.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/888547","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5210","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0130.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/security/bufferoverrun07092002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9539.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/888547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1016","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:digital_editions:2.2:*:win:*:*:*:*:*","matchCriteriaId":"80115133-F3DE-4E95-9188-151B1FCC3B23"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000177.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9634.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/438867","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5273","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9634.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/438867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1017","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:digital_editions:2.1:*:win:*:*:*:*:*","matchCriteriaId":"9862063A-9533-4F14-849E-01F8ABE100DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:digital_editions:2.2:*:win:*:*:*:*:*","matchCriteriaId":"80115133-F3DE-4E95-9188-151B1FCC3B23"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:digital_editions:9.2.1:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"630352D1-09CA-4C99-A03D-4DA0D9709C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:digital_editions:9.2.2:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"603D23F6-911A-410C-BE30-A67EEB150083"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/285093","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9740.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/285093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9740.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1018","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by checking out the same book multiple times."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_content_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"410A1763-A91F-4FF8-AB7B-6C3CE1BE1DF5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102649215618643&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102650064028760&w=2","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102649215618643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102650064028760&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1019","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_content_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"410A1763-A91F-4FF8-AB7B-6C3CE1BE1DF5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102649215618643&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102650064028760&w=2","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102649215618643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102650064028760&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1020","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the \"Add to bookbag\" feature when the server reports that no more copies are available."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:adobe_content_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"410A1763-A91F-4FF8-AB7B-6C3CE1BE1DF5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102649215618643&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102650064028760&w=2","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102649215618643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102650064028760&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1021","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.3_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"B94CF434-9B38-4D1C-A4AD-BECD9EF59A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.3_personal:*:*:*:*:*:*:*","matchCriteriaId":"D7470527-07E3-4C6E-8732-A7475C3DB853"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9557.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5226","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9557.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1022","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.3_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"B94CF434-9B38-4D1C-A4AD-BECD9EF59A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.3_personal:*:*:*:*:*:*:*","matchCriteriaId":"D7470527-07E3-4C6E-8732-A7475C3DB853"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9558.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5228","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9558.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1023","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.3_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"B94CF434-9B38-4D1C-A4AD-BECD9EF59A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.3_personal:*:*:*:*:*:*:*","matchCriteriaId":"D7470527-07E3-4C6E-8732-A7475C3DB853"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0082.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9528.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5187","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9528.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1024","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sp:*:*:*:*:*:*:*","matchCriteriaId":"932C1AC0-0BD1-46DF-A241-AA71BBD785BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(1\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"96541BD7-7D90-4C56-BC23-7071A07711DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(5c\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"1637C389-A962-4695-AC35-47785C205FE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(8a\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"5EA87A2A-E394-4EA4-82BA-9CA3A561C8E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(9\\)ex:*:*:*:*:*:*:*","matchCriteriaId":"2465A016-415C-4EE9-9DEC-B71C3EDC0BC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xj:*:*:*:*:*:*:*","matchCriteriaId":"80E8AF76-0A1D-4BAE-BF10-D63080352E6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ye:*:*:*:*:*:*:*","matchCriteriaId":"C1835410-77EB-46F2-ACF0-379759D4B0D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yf:*:*:*:*:*:*:*","matchCriteriaId":"3BB103ED-B170-4193-84CD-4C59F4D6A10A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yi:*:*:*:*:*:*:*","matchCriteriaId":"63D55886-268F-4E4D-B00F-8A5D97A73BA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*","matchCriteriaId":"E314B0F7-1A27-483E-B3B3-947A5561281F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*","matchCriteriaId":"A3EF2531-3E6B-4FDC-B96B-2BC3F8EAF39A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2da:*:*:*:*:*:*:*","matchCriteriaId":"7B7EA3DA-33B3-4480-B3B8-413745D6C5FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2dd:*:*:*:*:*:*:*","matchCriteriaId":"BDC41749-91FC-43DB-A52F-AC3E3A2205C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xa:*:*:*:*:*:*:*","matchCriteriaId":"EAC6758B-C6EE-45CB-AC2D-28C4AE709DD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xb:*:*:*:*:*:*:*","matchCriteriaId":"075CD42D-070A-49BA-90D9-E7925BB41A38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xd:*:*:*:*:*:*:*","matchCriteriaId":"4AB8E66C-A16F-4CC5-9FDF-AE274FF035EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xe:*:*:*:*:*:*:*","matchCriteriaId":"746DDC61-3981-4E93-A7EE-C120E0265485"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*","matchCriteriaId":"FCC88CC5-CF58-48A3-AFB6-FD38E5F40845"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xg:*:*:*:*:*:*:*","matchCriteriaId":"5AF2C6C2-58E8-4EA6-84FB-4D11F31490A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xh:*:*:*:*:*:*:*","matchCriteriaId":"4628FDA0-4260-4493-92C9-4574E5EC06A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xi:*:*:*:*:*:*:*","matchCriteriaId":"F9FA064A-6E1A-4415-84D4-1A33FF667011"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xj:*:*:*:*:*:*:*","matchCriteriaId":"EE896909-F8C3-4723-B5E7-9FB5FA2B73B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xk:*:*:*:*:*:*:*","matchCriteriaId":"9F9CDCE5-F6D3-4FA3-ADA0-EED2517FF7EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xl:*:*:*:*:*:*:*","matchCriteriaId":"7E03EE34-C398-43B4-A529-BE7BAFA4B3C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xm:*:*:*:*:*:*:*","matchCriteriaId":"21147732-FA22-4728-B5F2-D115B78A8EDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xn:*:*:*:*:*:*:*","matchCriteriaId":"4D717498-4DF9-4D15-A25B-D777FF460E3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xq:*:*:*:*:*:*:*","matchCriteriaId":"4B40548F-3914-4227-9E4C-F1B34071C069"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xr:*:*:*:*:*:*:*","matchCriteriaId":"C1C23EC9-C1C6-4F73-9FF5-24A5B97B8D91"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xs:*:*:*:*:*:*:*","matchCriteriaId":"ECE49281-0571-49F7-95FF-68B1ACA07537"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xt:*:*:*:*:*:*:*","matchCriteriaId":"9B09B72E-6862-4115-9A0B-574089A94289"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2xw:*:*:*:*:*:*:*","matchCriteriaId":"6E5C90EE-A9C0-461C-9E89-732BFA9BD066"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2ya:*:*:*:*:*:*:*","matchCriteriaId":"E74B6350-C2F8-4786-8E32-2ED6C188A5E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yb:*:*:*:*:*:*:*","matchCriteriaId":"F8E26473-A8EF-44C5-B550-5E0B86D31291"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yc:*:*:*:*:*:*:*","matchCriteriaId":"663FE3CE-FA09-46A2-9C0D-2797D9137A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yd:*:*:*:*:*:*:*","matchCriteriaId":"86309E93-F2C9-4334-9A1C-989EFDC99215"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yf:*:*:*:*:*:*:*","matchCriteriaId":"9BFAF394-6E9A-4CD6-B8A6-5BDDE4EC8EC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yg:*:*:*:*:*:*:*","matchCriteriaId":"65318A70-40FF-4BE8-962B-DFCD5C476166"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2yh:*:*:*:*:*:*:*","matchCriteriaId":"8B6DB954-EDC8-4A81-8C26-9D3DBC68FC67"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"999A0969-60EB-4B2E-A274-9F05D9F840E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*","matchCriteriaId":"ED24C763-7558-4AC0-AE10-FDA3D3078D27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C21CF907-707A-43CA-984C-310062705C63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C0AC3C74-262E-4A11-BCE8-58DE522E23AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(2\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"21A2D344-D0AD-4E0A-A5F3-C4323813FDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(3\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"46DC4972-7FA1-4320-83E6-607D139121EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(4\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"339DDB07-6C16-43B9-A880-77E2351B1C05"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"EBCB451E-8945-408C-94F5-36C43AA05C1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"A7D8D9AA-154C-46B2-96B8-AADA610056E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(6\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"E7F30211-BB7A-41D3-946F-655C028A3772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"01AE0EAB-F266-437A-B615-69536AF50B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EE529454-F5E6-4417-A5D7-B1A9BCD2B5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"85D0F005-80B3-41A2-8B7C-EA256C1634DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"FD50773D-8E63-45C7-A52D-D7B13F65327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B70FD634-E2D7-4E42-B140-44C5CB9294E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"364CCF12-AF9E-4661-9ECB-9AE0C00813D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"282793F1-296C-423A-9A2D-301DC3340664"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"020B669B-DE6B-4828-BB44-D99EE576B79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"4D406F1D-C33D-4BC2-BBA8-740A9E114523"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"C762F4B3-4F3D-4EE8-A914-1900AE4AA1C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"7860ADDE-7861-41A6-9DA9-2355FEEC4B60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"33A4D6E9-ADCB-4338-8CA9-A2F374F7CE38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"FAF08F95-9CF4-4AF6-BB08-021694C7AB40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"8C9BCB53-72AA-426F-9D18-544038B65128"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"C95B56F4-CDD1-4102-BB33-C66D3CDAC6C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2.13\\):*:*:*:*:*:*:*","matchCriteriaId":"2BA92A7D-5D0C-42A1-8D0B-C50EA6778DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(0.110\\):*:*:*:*:*:*:*","matchCriteriaId":"B9CE2412-CFB8-42B0-B39E-84569C922952"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(0.111\\):*:*:*:*:*:*:*","matchCriteriaId":"1F9D3782-7638-4252-B9A1-B11CECBE0D19"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(0.7\\)pan:*:*:*:*:*:*:*","matchCriteriaId":"236ABC7F-51AE-40A9-9A3F-F32E16A7B74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"3B791566-5B22-452D-ACDA-A1085700AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1:*:*:*:*:*:*:*","matchCriteriaId":"904FC5E4-6BE0-4B15-8283-26F92922B78E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8F47A997-B2A5-459D-8089-12B2AB438FB0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/SSH-scanning.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9437.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/290140","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5114","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/SSH-scanning.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9437.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/290140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1025","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/280062","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9459.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23164","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5028","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5134","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/280062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9459.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1026","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:sitespring:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA4214FB-DC6F-4150-A65C-9F99809F6D21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0140.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/280079","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9458.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5132","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0140.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/280079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9458.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1027","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:sitespring:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA4214FB-DC6F-4150-A65C-9F99809F6D21"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0029.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/282742","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9588.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5249","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/282742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9588.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1028","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oddsock:song_requester:2.1:*:*:*:*:*:*:*","matchCriteriaId":"00CDF63D-0470-4D91-92B5-E1BB321B5030"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0175.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9585.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oddsock.org/tools/gen_songrequester/#Release%202.2%20Notes%20:","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5248","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0175.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9585.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oddsock.org/tools/gen_songrequester/#Release%202.2%20Notes%20:","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1029","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:worldspan:res_manager:4.1:*:*:*:*:*:*:*","matchCriteriaId":"C77C637C-6D72-452B-9452-82D07DCDEFCC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0048.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9490.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/14478","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5169","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9490.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/14478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1030","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"CCD5D4AD-0BA3-42F7-852F-524488D74A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*","matchCriteriaId":"A8F69E7A-8BBB-4D20-AEE9-F37155AD5C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2B393A66-08A6-4EBA-B01E-BB6418423F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:express:*:*:*:*:*","matchCriteriaId":"0FAB4F19-EFE0-4860-B9E9-E3938A36AE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*","matchCriteriaId":"B2B4C4E8-2862-457F-BDCC-3F54B8F7AADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:express:*:*:*:*:*","matchCriteriaId":"16324B74-4143-473D-858F-B5B1899822B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:express:*:*:*:*:*","matchCriteriaId":"DFA4200B-3877-4FC9-B2AB-E51675CAD71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*","matchCriteriaId":"6F27425D-1754-44AE-A4B5-F27D5FA6A052"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:express:*:*:*:*:*","matchCriteriaId":"B1C2B98A-EF68-4569-B50C-8F21D2298435"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"99D0A3A8-1444-4DA4-AEF3-08578482574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:express:*:*:*:*:*","matchCriteriaId":"8B0B183B-95A3-463D-B76B-50640F554013"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"523836A4-0110-4CD3-A81E-988A02AEA68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:express:*:*:*:*:*","matchCriteriaId":"36A0EFDA-409E-44F0-9F8B-167A72D2361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"A705EB67-3961-445F-8023-F82C7618BE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:express:*:*:*:*:*","matchCriteriaId":"51A8AB95-FB23-4A7A-A6F5-EF442EAABD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"BD698DD8-5491-4A73-A527-8C9228992A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*","matchCriteriaId":"5F00947F-1804-41D5-8F2B-7E48C77B1306"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*","matchCriteriaId":"86C4679F-F13F-4A97-AE42-BC54BD0F149C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:express:*:*:*:*:*","matchCriteriaId":"114E5E3E-84B2-4DD3-98FC-2ABFFA41BAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*","matchCriteriaId":"EF96A26E-7284-43A0-BD6A-907E1029197D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:express:*:*:*:*:*","matchCriteriaId":"9B6656CF-65ED-4F8E-B9F2-75A9DC1571D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*","matchCriteriaId":"C8479B6C-464F-41BC-BF81-31EA74CEF4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:express:*:*:*:*:*","matchCriteriaId":"7C013AE2-4B06-437A-815F-FAADD28CFA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*","matchCriteriaId":"B08241CF-0F3D-44E2-8D72-4F98413933EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:express:*:*:*:*:*","matchCriteriaId":"D7306C09-BFBA-4DC0-8EA1-E5A5C0BC080F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*","matchCriteriaId":"80D90123-74BA-4A70-9A10-6980BAD270B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"BDE9282D-C32F-4D2F-81BE-75E447925A23"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp1:express:*:*:*:*:*","matchCriteriaId":"14A085BB-27C9-488F-91F8-19625BF23B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"3E6644EF-C875-4005-A628-0AED7B7BB94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:sp2:express:*:*:*:*:*","matchCriteriaId":"8556E775-D130-4658-AFE2-28188224ED54"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*","matchCriteriaId":"71892EC0-E6B1-4214-AC53-06489F711829"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*","matchCriteriaId":"696F52AE-FEB9-4090-872E-FDFD969F5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0008.html","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fadvisory_BEA02-19.htm","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/281046","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9486.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fadvisory_BEA02-19.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/281046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9486.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1031","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:key_focus:kf_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A36853C-5B50-4CC2-B6FB-7DB61324FE0A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0007.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/281102","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9500.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.keyfocus.net/kfws/support/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5177","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/281102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9500.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.keyfocus.net/kfws/support/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1032","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:key_focus:kf_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5","matchCriteriaId":"CBD0D398-4CC1-4773-9FE6-DAA75E541CD5"}]}]}],"references":[{"url":"http://www.keyfocus.net/kfws/support/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.keyfocus.net/kfws/support/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1033","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a \"..:\" sequence (dot-dot variant) in the argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:i-runbook:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C08F4339-BFC4-4CFA-8185-D6EFB6FB7834"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281786","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9549.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5209","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/281786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9549.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1034","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:i-runbook:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C08F4339-BFC4-4CFA-8185-D6EFB6FB7834"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281786","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9549.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5209","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/281786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9549.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1035","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.09:*:*:*:*:*:*:*","matchCriteriaId":"42F132EC-0194-4103-B486-26D8B83E0F05"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/280132","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9457.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5000","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5136","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/280132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9457.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1036","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0050:*:*:*:*:*:*:*","matchCriteriaId":"503363CE-4E59-4566-B3BD-52C52F93E3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0051:*:*:*:*:*:*:*","matchCriteriaId":"43439D3B-6DE3-448D-B4EB-ACDE0B1F3376"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0052:*:*:*:*:*:*:*","matchCriteriaId":"8D04303A-99D8-4426-B5D4-BB07D7D34DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0053:*:*:*:*:*:*:*","matchCriteriaId":"C815D6F3-8E27-4000-9C91-2B5762D15FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:zoltan_milosevic:fluid_dynamics_search_engine:2.0.0.0054:*:*:*:*:*:*:*","matchCriteriaId":"7B746096-50EA-49D0-BCEB-F56E6EEB4B80"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0094.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0096.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9533.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5199","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.xav.com/scripts/search/changes.htm#4","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9533.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.xav.com/scripts/search/changes.htm#4","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1037","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dean:double_choco_latte:2002-01-20:*:*:*:*:*:*:*","matchCriteriaId":"2BAA1626-7AAE-4DCE-AFB6-86344670775B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dean:double_choco_latte:2002-02-15:*:*:*:*:*:*:*","matchCriteriaId":"78B580C1-0DA4-40DB-BCE5-AED429958471"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html","source":"cve@mitre.org"},{"url":"http://dcl.sourceforge.net/index.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102668783632589&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9532.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5182","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dcl.sourceforge.net/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102668783632589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9532.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1038","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dean:double_choco_latte:2002-01-20:*:*:*:*:*:*:*","matchCriteriaId":"2BAA1626-7AAE-4DCE-AFB6-86344670775B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dean:double_choco_latte:2002-02-15:*:*:*:*:*:*:*","matchCriteriaId":"78B580C1-0DA4-40DB-BCE5-AED429958471"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html","source":"cve@mitre.org"},{"url":"http://dcl.sourceforge.net/index.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102668783632589&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9742.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dcl.sourceforge.net/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102668783632589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9742.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1039","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dean:double_choco_latte:2002-01-20:*:*:*:*:*:*:*","matchCriteriaId":"2BAA1626-7AAE-4DCE-AFB6-86344670775B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_dean:double_choco_latte:2002-02-15:*:*:*:*:*:*:*","matchCriteriaId":"78B580C1-0DA4-40DB-BCE5-AED429958471"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html","source":"cve@mitre.org"},{"url":"http://dcl.sourceforge.net/index.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102668783632589&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9743.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://dcl.sourceforge.net/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102668783632589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9743.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1040","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1041","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0000.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0000.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q3/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1042","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\\ (dot-dot backslash) sequences in the NS-query-pat parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"01D79D8B-71EC-41FB-B168-294A7553785F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"15614FEE-BE44-493D-8F4B-B68F90BA1C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"EAFDD45B-9AA9-46A9-9452-6F7026DAB8B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:*:*:*:*:*:*","matchCriteriaId":"881584F0-6E53-4E08-A394-911CCD7179B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp10:enterprise:*:*:*:*:*","matchCriteriaId":"74307012-2D6B-4D7E-BB6E-B6515E37149D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"5608C463-921D-4640-B9F5-1C7E2F99DFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp2:enterprise:*:*:*:*:*","matchCriteriaId":"CC15E6D1-5E34-4BA0-83AA-32843BBE34EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"1BB8A1FD-2B13-4D52-A685-822FC49D61D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"B199A631-70D8-4FA5-BFAA-46EA768223D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"DD3C8D8A-D9EC-4DB2-B2E2-3B3BFC6AF369"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp4:enterprise:*:*:*:*:*","matchCriteriaId":"14BE8733-6B79-406D-8AD4-1A034D93CA21"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"4EA69FCA-EAD5-4BA9-8AF5-2FDC617B77E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp5:enterprise:*:*:*:*:*","matchCriteriaId":"431E382F-3638-43FE-978E-6FB72C0406A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"D84C0F92-BA3D-47E3-A89C-F7BFE70F1A50"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp6:enterprise:*:*:*:*:*","matchCriteriaId":"E85940EC-E144-4B26-B2FB-A4985FE852C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:*:*:*:*:*:*","matchCriteriaId":"B05F9BD8-4A97-4E30-9D87-C54D2C688C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp7:enterprise:*:*:*:*:*","matchCriteriaId":"8BFAEFD1-D6E0-4401-A81E-9B73DF6C4600"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:*:*:*:*:*:*","matchCriteriaId":"30EBB2AE-CC19-455C-8338-DC99649128E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp8:enterprise:*:*:*:*:*","matchCriteriaId":"271C69BC-E8B9-4E95-91F0-719FDC71E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:*:*:*:*:*:*","matchCriteriaId":"E97E6E0E-88BA-4EF3-83D3-F3A49076C6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:iplanet_web_server:4.1:sp9:enterprise:*:*:*:*:*","matchCriteriaId":"38178E55-35F2-407E-906C-CDA706881684"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"352D9910-BC83-44B2-B5C0-59B8F2C23142"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F316ECED-A6E3-43AC-BA05-C42F2CB0D830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"FA32646E-1014-47D1-9C96-6CD8F0B13480"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"38698A3B-9597-4BC9-B112-BB908C3DE86B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0085.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9517.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5191","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9517.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1043","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject (\"\\t\\t\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrafunk:popcorn:1.20:*:*:*:*:*:*:*","matchCriteriaId":"44E00EAD-42A6-4EC0-9EA1-4DC7D4BE30BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9547.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5212","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9547.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1044","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrafunk:popcorn:1.20:*:*:*:*:*:*:*","matchCriteriaId":"44E00EAD-42A6-4EC0-9EA1-4DC7D4BE30BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9547.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5212","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9547.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1045","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrafunk:popcorn:1.20:*:*:*:*:*:*:*","matchCriteriaId":"44E00EAD-42A6-4EC0-9EA1-4DC7D4BE30BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9547.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5212","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9547.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1046","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:firebox:5.0:*:*:*:*:*:*:*","matchCriteriaId":"2B8BC6F2-D75F-44F7-8B48-7E849EB9C344"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.28:*:*:*:*:*:*:*","matchCriteriaId":"36070C85-EBD9-4A79-B31F-F2A7F5DE118E"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.29:*:*:*:*:*:*:*","matchCriteriaId":"1BA0FFC0-E58D-4A60-9389-844D83373C78"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.31:*:*:*:*:*:*:*","matchCriteriaId":"25A53541-CF4D-452A-B01D-44E33770B0B2"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.35:*:*:*:*:*:*:*","matchCriteriaId":"50480EED-CCD7-4494-BF47-C64DA5036857"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.35a:*:*:*:*:*:*:*","matchCriteriaId":"4CA8FF36-B73E-4258-BD4A-3F92EBB91791"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0012.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9509.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5186","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9509.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1047","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho_firewall:5.0.35a:*:*:*:*:*:*:*","matchCriteriaId":"4CA8FF36-B73E-4258-BD4A-3F92EBB91791"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9511.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9511.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1048","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._a.08.06:*:*:*:*:*:*:*","matchCriteriaId":"643083B1-1762-4DCC-B69B-E1F88951BA22"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.05.35:*:*:*:*:*:*:*","matchCriteriaId":"110052A3-E546-4DD5-9739-FBFE2C377A8A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.07.02:*:*:*:*:*:*:*","matchCriteriaId":"99DF94DF-9E8A-4DAB-A733-3A1B77075974"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.07.03:*:*:*:*:*:*:*","matchCriteriaId":"EE4C44BF-F626-47AE-86B6-95D14CA57D9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.07.17:*:*:*:*:*:*:*","matchCriteriaId":"E3CA4705-7978-4B42-824B-7696296C39D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:j3111a_rev._g.08.03:*:*:*:*:*:*:*","matchCriteriaId":"F1110261-8628-493F-8164-6A7DC478A45C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.00:*:*:*:*:*:*:*","matchCriteriaId":"D3390A74-D451-47BE-86D4-5BAFEC81B48E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.04:*:*:*:*:*:*:*","matchCriteriaId":"60C68BF3-FF26-485D-83EF-934F1C74507C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.05:*:*:*:*:*:*:*","matchCriteriaId":"99649072-7DA1-404D-BF7F-E16A85544002"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.20:*:*:*:*:*:*:*","matchCriteriaId":"017D5FFF-0735-4152-B99C-35D85D8EA5C1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.08.32:*:*:*:*:*:*:*","matchCriteriaId":"BB73A66E-7C96-49BF-8589-C7CF69B301FE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.20.00:*:*:*:*:*:*:*","matchCriteriaId":"4E778243-DAD1-4902-8CC4-D2E610A598D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:jetdirect:x.21.00:*:*:*:*:*:*:*","matchCriteriaId":"DDDFB77C-50CD-4AEA-9813-7DB8C7BB36CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0345.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9693.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/377003","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5331","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0345.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9693.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/377003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1049","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC80A56E-941A-440F-9141-DDAFCB76462B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl0:*:*:*:*:*:*:*","matchCriteriaId":"A6BD3731-AF01-442F-9DC1-D59BD0BBC43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"142CD462-2316-4769-9DCB-95B51C41C857"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"6BFD839F-0BCE-44FE-8CA0-A95C81CECEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1:*:*:*:*:*:*:*","matchCriteriaId":"8420EDB8-40BB-42F7-BE7F-1C9CD2E70D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1932A13-7BC2-4E15-B1E6-54B62F36B5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD3423D-BB76-496E-973B-6F67AB78CAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"C767786A-5DA1-494A-9B59-C48E6415E4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"38E60F7E-F609-4B93-A130-B247EEAC1BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"185B1820-E196-4D4C-8085-30CDC1A15B16"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html","source":"cve@mitre.org"},{"url":"http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9728.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_035_hylafax.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5348","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9728.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_035_hylafax.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1050","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC80A56E-941A-440F-9141-DDAFCB76462B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl0:*:*:*:*:*:*:*","matchCriteriaId":"A6BD3731-AF01-442F-9DC1-D59BD0BBC43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"142CD462-2316-4769-9DCB-95B51C41C857"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.0_pl2:*:*:*:*:*:*:*","matchCriteriaId":"6BFD839F-0BCE-44FE-8CA0-A95C81CECEDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1:*:*:*:*:*:*:*","matchCriteriaId":"8420EDB8-40BB-42F7-BE7F-1C9CD2E70D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1932A13-7BC2-4E15-B1E6-54B62F36B5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD3423D-BB76-496E-973B-6F67AB78CAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"C767786A-5DA1-494A-9B59-C48E6415E4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"38E60F7E-F609-4B93-A130-B247EEAC1BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"185B1820-E196-4D4C-8085-30CDC1A15B16"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html","source":"cve@mitre.org"},{"url":"http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9729.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_035_hylafax.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5349","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9729.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_035_hylafax.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1051","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ehud_gavron:tracesroute:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7867E272-FB0D-4E27-90BD-79429B20EFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ehud_gavron:tracesroute:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A7FA9DA6-819F-4D16-918D-1BFCB8758302"},{"vulnerable":true,"criteria":"cpe:2.3:a:ehud_gavron:tracesroute:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CB5F869F-B180-4CFB-819A-89F51900365F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0254.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102737546927749&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102753136231920&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9291.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2000_041_traceroute_txt.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4956","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0254.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102737546927749&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102753136231920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9291.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2000_041_traceroute_txt.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1052","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the \"con\" device, or (2) obtain the physical path of the server using two requests to the \"aux\" device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"081F296A-5BD8-4A3F-88E6-F27327EFE42A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0028.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0031.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102691753204392&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102692936820193&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9586.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9587.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5251","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5258","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102691753204392&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102692936820193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9586.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9587.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1053","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.2:*:*:*:*:*:*:*","matchCriteriaId":"CD396172-E3CE-4C01-AD9B-72FE9BD143CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9914.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4015","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5506","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.w3.org/Jigsaw/RelNotes.html#2.2.1","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9914.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.w3.org/Jigsaw/RelNotes.html#2.2.1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1054","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via \"..\\\" (dot-dot backslash) sequences in a LIST command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:pablo_ftp_server:1.0_build_9:*:*:*:*:*:*:*","matchCriteriaId":"D771BD55-6C1A-4469-8D46-DF6D1D06B62B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/283665","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9647.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4995","source":"cve@mitre.org"},{"url":"http://www.pablovandermeer.nl/ftpserversrc.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5283","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/283665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9647.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pablovandermeer.nl/ftpserversrc.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1055","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:brother:nc-3100h:*:*:*:*:*:*:*:*","matchCriteriaId":"87149D03-7CED-452E-BAA0-F3B7A122F087"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0353.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9701.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0353.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9701.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1056","sourceIdentifier":"cve@mitre.org","published":"2002-05-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to."},{"lang":"es","value":"Microsoft Outlook 2000 y 2002, cuando están configurados para usar Microsoft Word como editor de correo, no bloquea secuencias de comandos (scripts) en usjo mientras se editan mensajes en HTML o Formato de Texto Enriquecido (RTF), lo que podría permitir a atacantes remotos ejecutar scripts arbitrarios mediante un correo electrónico que el usuario reenvia o al que responde."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"FEE7CC21-A458-49BB-B437-D5DF09339D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*","matchCriteriaId":"8CFD9BC0-8755-4C3B-A198-A7F2DEFA82AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*","matchCriteriaId":"2D90B1E1-23CD-4595-AD78-DA1758E9896D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101760380418890&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/265621","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8708.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4397","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-021","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A205","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A429","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101760380418890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/265621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8708.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4397","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1057","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartmax_software:mailmax:4.8:*:*:*:*:*:*:*","matchCriteriaId":"50E5EA90-B368-434B-B786-2B8761D0E5E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0245.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9651.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5285","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0245.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9651.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1058","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cobalt:qube:3.0:*:*:*:*:*:*:*","matchCriteriaId":"17068923-0D3A-441A-ACDE-19BCB188530E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9669.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5297","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9669.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1059","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"71351D2F-1FE0-4471-A502-10701D7C7380"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"554D08E5-8B1A-4C29-A871-88D22960AB01"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"407045A6-C071-4F35-B6AC-AC56E55BCEAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E8FCDDA3-09AF-43E8-8528-C7DECA6FBC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5887BBF3-1EB2-4948-B9E6-322929F269F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.2:*:*:*:*:*:*:*","matchCriteriaId":"AA6160E6-742B-459A-9DF6-4B934F893672"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC90C984-D3B5-4710-A393-BB149ADD7A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.3:*:*:*:*:*:*:*","matchCriteriaId":"A05EE976-B386-446B-92A5-9E14BC62779D"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2A4AC2D-590F-43E7-8186-874AF9818D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"B06270D7-5E5D-4AB5-BC0E-143DB956725D"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"603D2194-99E1-4738-9A66-CE28DB44EB81"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.4:*:*:*:*:*:*:*","matchCriteriaId":"8C09AF3F-EC54-42FA-9668-93CE4224CBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B9C144FC-D9CE-4817-9276-C1B47957FD06"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"8B45E68A-E939-4853-B467-9F5474E5DF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B117F4F8-0EED-475F-A588-9D228F67AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"693E4138-17B5-44F9-AC7A-3DAC791E981E"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"23D87C93-669D-4415-969A-28070A32C7E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"0205ED89-3610-4174-9BA2-1E2BF5786844"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"0F72FA96-8356-4C0E-8DAE-F76304C50065"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102744150718462&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102746007908689&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9650.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5287","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.vandyke.com/products/securecrt/security07-25-02.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102744150718462&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102746007908689&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9650.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.vandyke.com/products/securecrt/security07-25-02.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1060","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"B77F092A-BDD8-40F6-A6CD-D3C6D43D4FCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"0923F90E-A227-4012-8E99-1BAB59E4EA8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"F5580164-BC65-4ABA-AD5E-0F4BF2E773DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:3.1.21:*:*:*:*:*:*:*","matchCriteriaId":"9F09D465-AEB5-4097-870E-EE9FC8DE5E35"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"162CB5CC-8D1A-47A5-8DBA-5939C172325A"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"598036F6-B86F-4E07-B6AF-93B0A3BA8796"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"F8E07872-E0CB-4001-8FA7-5E7DBE9782F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C65B2102-085D-4F73-87BD-31EAA5D57218"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"C62DED29-29C1-4563-8EA2-53CEA760E795"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"074A7319-B9B9-4123-A3AF-3B66653C5E8F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0283.html","source":"cve@mitre.org"},{"url":"http://download.cacheflow.com/release/CA/4.1.00-docs/CACacheOS41fixes.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9674.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5305","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5608","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0283.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.cacheflow.com/release/CA/4.1.00-docs/CACacheOS41fixes.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9674.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1061","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9682.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9683.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9685.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9686.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5319","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5320","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5322","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5324","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9682.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9683.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9685.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9686.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1062","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9684.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5321","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9684.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1063","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9687.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5325","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9687.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5325","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1064","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9688.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5326","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9688.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1065","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9688.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9688.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1066","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"09026053-0568-4D8F-AEB0-F7850C655635"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"5C0BC837-4993-4780-B4B0-88D4C1A42BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"D4505B16-611E-422F-995D-748281466621"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"525A467E-9EFF-47AE-AEBC-BE769073A64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"1812EAA2-85E0-47CE-A704-646AF4AA5CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CD6D91CA-E975-49CF-BF32-1E0302D5D8AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD2CDD0D-387C-413A-B2E8-DB18A7E3FD3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9689.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5327","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9689.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1067","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (reboot and reset) via a long password, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:seh:ic9_pocket_print_server_firmware:7.1.30:*:*:*:*:*:*:*","matchCriteriaId":"4E9E3B79-5D97-4726-9109-D2964299FD11"},{"vulnerable":true,"criteria":"cpe:2.3:h:seh:ic9_pocket_print_server_firmware:7.1.36:*:*:*:*:*:*:*","matchCriteriaId":"7C3DE170-5D11-4174-90DB-7A825980D97D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0336.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9702.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5329","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9702.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1068","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dp-303:*:*:*:*:*:*:*:*","matchCriteriaId":"D09FFF7E-EBD6-4E26-BDE7-FA1EB7221961"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0341.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102779425117680&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9703.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0341.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=102779425117680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9703.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1069","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-804:4.68:*:*:*:*:*:*:*","matchCriteriaId":"682B925F-6936-473E-B567-401248F9E450"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103004834131542&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/288584","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9967.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9969.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5544","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5553","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103004834131542&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/288584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9967.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9969.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1070","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-wiki:php-wiki:1.2:*:*:*:*:*:*:*","matchCriteriaId":"41D82B33-5CAB-431F-8D06-ACB81D4A226C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-wiki:php-wiki:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1AC60C-4B58-4753-B374-2A0CD3FD5123"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-wiki:php-wiki:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A2B99BEA-08D2-4539-93E8-2574102D391F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-wiki:php-wiki:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A21812EA-3C90-4B2A-B33E-C51D6EA07D63"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-wiki:php-wiki:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4819FE02-641E-47FE-8118-F33D89E28824"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-wiki:php-wiki:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"77B16D40-F834-4AA1-BBE0-13427D9CC55D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0190.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9627.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5254","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9627.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1071","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:310:*:*:*:*:*:*:*","matchCriteriaId":"15AA9574-519C-4F2A-A666-64D8813BA468"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:642r:*:*:*:*:*:*:*","matchCriteriaId":"4073980C-74CD-4951-9C2B-0AEDAB682652"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277242","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277303","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277307","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9372.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5034","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/277242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9372.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1072","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented \"jolt\" style ICMP packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:310:*:*:*:*:*:*:*","matchCriteriaId":"15AA9574-519C-4F2A-A666-64D8813BA468"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:642r:*:*:*:*:*:*:*","matchCriteriaId":"4073980C-74CD-4951-9C2B-0AEDAB682652"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0036.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/283999","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9655.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5292","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/283999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9655.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1073","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:3.3:*:*:*:*:*:*:*","matchCriteriaId":"21F437B6-9274-4C7C-B6BD-9FE20A079217"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:3.3_sp1:*:*:*:*:*:*:*","matchCriteriaId":"AB018B5C-EBBC-40A7-B4F4-C0009242702B"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:3.3_sp2:*:*:*:*:*:*:*","matchCriteriaId":"3C13D4A1-D667-417A-9251-B305CF38041D"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4B14E71D-E284-460C-820C-7655B6E41CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:4.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"E1D553E2-0B9F-4C9E-8EA6-AE423183A72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:atrium_software:mercur_mailserver:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A7A18F82-D66B-4C58-A1A5-17D139905717"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0195.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9618.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5261","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0195.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9618.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1075","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_harris:pegasus_mail:*:*:*:*:*:*:*:*","versionEndIncluding":"4.01","matchCriteriaId":"E9C824C1-CF35-428F-974F-18D4295129A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0277.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9673.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5302","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9673.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1076","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5700938-EE34-4A16-BE98-74EAA4A48249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF543E9-F893-4086-BD97-ECB43EEF26BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3818F47-0A00-4984-857D-DBF87DDB71B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E2D897-B37B-43E1-96D9-9BF7A5AFC842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4098FA6A-356C-4AA5-B948-AAD642354F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A7920844-DD87-47EF-B3CF-DA2DE04FC7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.1:*:*:*:*:*:*:*","matchCriteriaId":"606E35DC-DF69-4A95-9116-111D3AF28EA9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0326.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0363.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0368.html","source":"cve@mitre.org"},{"url":"http://support.ipswitch.com/kb/IM-20020729-DM01.htm","source":"cve@mitre.org"},{"url":"http://support.ipswitch.com/kb/IM-20020731-DM02.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9679.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5323","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0368.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ipswitch.com/kb/IM-20020729-DM01.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ipswitch.com/kb/IM-20020731-DM02.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9679.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1077","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5700938-EE34-4A16-BE98-74EAA4A48249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF543E9-F893-4086-BD97-ECB43EEF26BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3818F47-0A00-4984-857D-DBF87DDB71B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E2D897-B37B-43E1-96D9-9BF7A5AFC842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4098FA6A-356C-4AA5-B948-AAD642354F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A7920844-DD87-47EF-B3CF-DA2DE04FC7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.1:*:*:*:*:*:*:*","matchCriteriaId":"606E35DC-DF69-4A95-9116-111D3AF28EA9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0399.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9722.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5365","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0399.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9722.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1078","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E46D61D-DA32-4E64-81D5-A0FAF741E3A8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0043.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284904","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9721.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5345","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9721.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1079","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\\ (dot-dot backslash) sequences in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0.3_p2:*:*:*:*:*:*:*","matchCriteriaId":"198BCF08-67CF-491C-92F2-0DE89FB27F47"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html","source":"cve@mitre.org"},{"url":"http://www.aprelium.com/news/patch1033.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9940.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9941.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3285","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5547","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aprelium.com/news/patch1033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9940.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9941.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1080","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDFD934-AA49-4FA8-813A-9040AAA49515"},{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E46D61D-DA32-4E64-81D5-A0FAF741E3A8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html","source":"cve@mitre.org"},{"url":"http://www.aprelium.com/news/patch1033.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9957.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5548","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aprelium.com/news/patch1033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9957.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1081","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a \"+\" character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EFDFD934-AA49-4FA8-813A-9040AAA49515"},{"vulnerable":true,"criteria":"cpe:2.3:a:aprelium_technologies:abyss_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E46D61D-DA32-4E64-81D5-A0FAF741E3A8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html","source":"cve@mitre.org"},{"url":"http://www.aprelium.com/news/patch1033.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9956.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3286","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5549","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aprelium.com/news/patch1033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9956.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1082","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","versionEndIncluding":"1.40","matchCriteriaId":"8B4C6695-588B-46B5-A13A-B0A46C31B159"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9698.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9698.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1083","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","versionEndIncluding":"1.41","matchCriteriaId":"C94C02DD-DCA4-4439-AADF-D4FCADC09E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9710.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9710.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1084","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","versionEndIncluding":"1.41","matchCriteriaId":"C94C02DD-DCA4-4439-AADF-D4FCADC09E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9711.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9711.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1085","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","versionEndIncluding":"1.41","matchCriteriaId":"C94C02DD-DCA4-4439-AADF-D4FCADC09E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9712.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9712.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1086","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","versionEndIncluding":"1.41","matchCriteriaId":"C94C02DD-DCA4-4439-AADF-D4FCADC09E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9713.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9713.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1087","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","versionEndIncluding":"1.41","matchCriteriaId":"C94C02DD-DCA4-4439-AADF-D4FCADC09E9E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/284229","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/284229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1088","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5E0DC694-0DEB-41DE-8A0D-9B649FC2F220"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"E9A8D9A3-2369-4B08-8A73-2A66EFEB26E1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0296.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2963273","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9671.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5313","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/servlet/tidfinder/2963273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9671.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1089","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:reports:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D3DC14BC-38DB-4ED1-8A74-9C6648033BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:reports:6.0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"C737A52B-AE26-47A6-BB51-C8E9A3227CE4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0203.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9628.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5262","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0203.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9628.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1090","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libesmtp:libesmtp:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.11","matchCriteriaId":"04585248-99F7-4EBE-AAB0-044358555AA3"}]}]}],"references":[{"url":"http://www.stafford.uklinux.net/libesmtp/ChangeLog.txt","source":"cve@mitre.org"},{"url":"http://www.stafford.uklinux.net/libesmtp/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1091","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7D7FA24-4B6F-4D67-95BE-46819033CA6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9B316E0-4A05-411A-8279-404C82288BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B91D7920-86E6-4842-897A-553F018AD493"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"36889B90-FD18-4A5A-A732-788240E10FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"F49659B4-2878-4D31-BCB8-11CA38D6FA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0615E0B9-EFCF-4CDD-81E3-0E351DEB2C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"964BC1D9-10D2-4064-A0AD-5DD6E6A568E5"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=157989","source":"cve@mitre.org"},{"url":"http://crash.ihug.co.nz/~Sneuro/zerogif/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103134051120770&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10058.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-192.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-046.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5665","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=157989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://crash.ihug.co.nz/~Sneuro/zerogif/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103134051120770&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10058.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1092","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6\\(rel\\)","matchCriteriaId":"8571BF7D-B151-44FF-98A6-DF9B172B12D0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5613","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10017","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1093","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10018.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5615","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10018.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1094","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DF8C3FDA-D321-4202-A8EA-6C1464558A8F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10020.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5624","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10020.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1095","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the \"No Encryption\" option set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:2.6.3:*:windows_nt:*:*:*:*:*","matchCriteriaId":"A668278F-8080-4295-95EB-88341478D16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10021.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5625","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10021.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1096","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10019.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5611","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10019.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1097","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10022.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5612","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10022.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1098","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an \"HTTPS on Public Inbound (XML-Auto)(forward/in)\" rule but sets the protocol to \"ANY\" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10023.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5614","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10023.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5614","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1099","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10024.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5616","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10024.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1100","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10025.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5617","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10025.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1101","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DF8C3FDA-D321-4202-A8EA-6C1464558A8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B68705AB-A133-401F-9F41-64594E071816"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"1866690B-BCF3-4134-946D-FB4AE1269961"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1102","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DF8C3FDA-D321-4202-A8EA-6C1464558A8F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5622","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10027","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1103","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"923949D1-06EC-462F-A3BC-FCAB448042A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.a:*:*:*:*:*:*:*","matchCriteriaId":"901B1838-7169-41E5-80EF-29BB680BF937"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.b:*:*:*:*:*:*:*","matchCriteriaId":"CDAEAA5F-0A98-48B7-8012-9B9909243135"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.c:*:*:*:*:*:*:*","matchCriteriaId":"11DA4B03-2D30-4514-9DF5-5F0DDD4B8DC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.d:*:*:*:*:*:*:*","matchCriteriaId":"CB38834B-E4AB-43F4-888B-14B088C95594"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:2.5.2.f:*:*:*:*:*:*:*","matchCriteriaId":"23F8059B-3968-4D63-B1B3-74E545C918D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"701CDA0D-F932-4251-B484-8F20F0AE9003"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"93500B0E-5EE6-49C1-AD66-3AB007020B8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.a:*:*:*:*:*:*:*","matchCriteriaId":"E674AA43-905E-40E0-A70F-77D05C62C18D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.3.b:*:*:*:*:*:*:*","matchCriteriaId":"3F0D767F-7142-46D2-B3E4-7FE8E9E3285A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"057A6BA0-5F5E-4FC4-B2EC-A17968EAC2C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1:*:*:*:*:*:*:*","matchCriteriaId":"645AB682-2965-4C8D-B323-AB510E424407"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"76F7F019-A0A4-49CD-BB28-24BF7725AC89"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"175CD875-3402-4B06-A3FA-7DFFCBB44056"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF61B8A5-31E7-40F5-8B3D-CA90E50618AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4C9017BB-5848-4361-ABB9-C69FB3AB90FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"207034E8-35F7-4E78-A3FC-C86D20EB8D9A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C544E523-15E5-4CE5-8113-53454F5D9973"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B09F6EBD-C3FC-4680-BE31-A766D863237D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DF8C3FDA-D321-4202-A8EA-6C1464558A8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"B68705AB-A133-401F-9F41-64594E071816"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:vpn_3000_concentrator_series_software:3.6\\(rel\\):*:*:*:*:*:*:*","matchCriteriaId":"1866690B-BCF3-4134-946D-FB4AE1269961"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_3002_hardware_client:*:*:*:*:*:*:*:*","matchCriteriaId":"12ECF578-84BF-4F41-9462-C09FA517F2A0"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/761651","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/761651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2002-1104","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"398B68C7-C1DB-4A62-B0A2-89C917768E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"20C66C87-1367-4440-A2C2-E6B657DA2743"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10042","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1105","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"398B68C7-C1DB-4A62-B0A2-89C917768E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"20C66C87-1367-4440-A2C2-E6B657DA2743"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"4A270D7C-ACBC-41A4-A606-8A4F35894E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5650","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10044","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1106","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"398B68C7-C1DB-4A62-B0A2-89C917768E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"20C66C87-1367-4440-A2C2-E6B657DA2743"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"4A270D7C-ACBC-41A4-A606-8A4F35894E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10045","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1107","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"398B68C7-C1DB-4A62-B0A2-89C917768E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"20C66C87-1367-4440-A2C2-E6B657DA2743"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"D4BFB291-672C-437E-BBF4-B00D89C11EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"4A270D7C-ACBC-41A4-A606-8A4F35894E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:linux:*:*:*:*:*","matchCriteriaId":"2BD00D0A-EB6E-41AA-851D-9DD258E23BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"3FB66EB9-9FE9-4B13-9E5F-E9DEDCD0E3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:solaris:*:*:*:*:*","matchCriteriaId":"88EB557F-33CD-40FE-B470-04F93CB2F3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*","matchCriteriaId":"76060A99-ED0C-4125-B67E-FA8E4F57AAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:linux:*:*:*:*:*","matchCriteriaId":"F2EEB23E-4592-49A1-BDC6-110580340AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"D548CEFE-1970-42D3-9039-196A3B5F5D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:solaris:*:*:*:*:*","matchCriteriaId":"2D4BDB9B-99D8-42B7-8D57-2B57029220F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.2:*:windows:*:*:*:*:*","matchCriteriaId":"2288FB91-4607-417D-8658-E1B8090BE40A"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10046","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1108","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:2.0:*:windows:*:*:*:*:*","matchCriteriaId":"398B68C7-C1DB-4A62-B0A2-89C917768E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0:*:windows:*:*:*:*:*","matchCriteriaId":"20C66C87-1367-4440-A2C2-E6B657DA2743"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.0.5:*:windows:*:*:*:*:*","matchCriteriaId":"D4BFB291-672C-437E-BBF4-B00D89C11EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.1:*:windows:*:*:*:*:*","matchCriteriaId":"4A270D7C-ACBC-41A4-A606-8A4F35894E74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:linux:*:*:*:*:*","matchCriteriaId":"2BD00D0A-EB6E-41AA-851D-9DD258E23BEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"3FB66EB9-9FE9-4B13-9E5F-E9DEDCD0E3C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:solaris:*:*:*:*:*","matchCriteriaId":"88EB557F-33CD-40FE-B470-04F93CB2F3E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1:*:windows:*:*:*:*:*","matchCriteriaId":"59938F7D-5F64-4FC0-A5B2-C798AF297130"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:3.5.1c:*:windows:*:*:*:*:*","matchCriteriaId":"76060A99-ED0C-4125-B67E-FA8E4F57AAB5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10047","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1109","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file size parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amavis:virus_scanner:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.1","matchCriteriaId":"D607CF13-8F19-49BB-A0D6-115465C88BC3"}]}]}],"references":[{"url":"http://marc.info/?l=amavis-announce&m=103121272122242&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103124270321404&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10056.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=amavis-announce&m=103121272122242&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103124270321404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10056.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1110","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"}]}]}],"references":[{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-01.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102978728718851&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9897.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5510","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102978728718851&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9897.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1111","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"}]}]}],"references":[{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-02.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102978873620491&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5515","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9898","source":"cve@mitre.org"},{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102978873620491&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1112","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the \"View Bugs\" page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"}]}]}],"references":[{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-03.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102978673018271&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5514","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9899","source":"cve@mitre.org"},{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-03.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102978673018271&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1113","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102927873301965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102978924821040&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4858","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5504","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9829","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102927873301965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102978924821040&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1114","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_page, (3) g_css_include_file, (4) g_meta_include_file, or (5) a cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102978711618648&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9900.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5509","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102978711618648&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9900.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5509","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1115","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) view_bug_advanced_page.php, or (4) view_bug_page.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"}]}]}],"references":[{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-06.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103013249211164&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-161","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9954.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5563","source":"cve@mitre.org"},{"url":"http://mantisbt.sourceforge.net/advisories/2002/2002-06.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103013249211164&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9954.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1116","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"View Bugs\" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103014152320112&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-161","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5565","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9955","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103014152320112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1117","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Veritas Backup Exec 8.5 and earlier requires that the \"RestrictAnonymous\" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:backup_exec:*:*:*:*:*:*:*:*","versionEndIncluding":"8.5","matchCriteriaId":"B15222C4-02DE-4433-BF16-947CC807B0F7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103134395124579&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103134930629683&w=2","source":"cve@mitre.org"},{"url":"http://seer.support.veritas.com/docs/238618.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8230","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10093","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103134395124579&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103134930629683&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.support.veritas.com/docs/238618.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1118","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command."},{"lang":"es","value":"El escuchador TNS en Oracle Net Services de Oracle 9i 9.2.x y 9.0.x, y Oracle 8i 8.1.x, permite a atacantes remotos causar una denegación de servicio (cuelgue o caída) mediante un comando SERVICE_CURLOAD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"42AF8B37-C5AA-4B92-A565-214A677C3486"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5.0.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"7D6E1F05-FE4C-4657-8C9B-A3719A270B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5.0.2_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"A2DFCB53-E8AC-4EAC-877B-9EBFAF10FEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.5.1.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"2A6E382C-1CBF-481C-9CFA-8EAA3579C269"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5EC58370-C10D-4559-81C8-C67B64EE2502"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6.0.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"4BF058A9-6CB7-4529-B4CE-FAD3E9F875DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.6.1.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"689A1890-747E-4E3D-94CE-5CEF37A64ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5E0E5C6A-FFEA-4855-AE5D-65806B6AFA59"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.0.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"A42CA4B3-410B-401C-98A7-A20348BAB97B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"F2607015-B358-4963-968C-777E2AE9650D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:8.1.7.1.0_enterprise:*:*:*:*:*:*:*","matchCriteriaId":"2C7D907B-CABC-40ED-8ABD-C4C659550EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F012561-EA9E-4665-AD81-0AC7655BA22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1_3:*:*:*:*:*:*:*","matchCriteriaId":"1AD638E3-B54A-44E8-A82D-721D6D211D02"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:release_2_9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A742D865-D856-4E44-8C18-82A40E2D85D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:release_2_9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C190DB-8DA7-4858-A646-A62567AFF689"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0017.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10283.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5678","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10283.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1119","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.2","matchCriteriaId":"C35185FB-87A3-497A-8DAB-C8D8EB1F899B"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-045.0.txt","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000527","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://mail.python.org/pipermail/python-dev/2002-August/027229.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=104333092200589&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2002/dsa-159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10009.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-082.php","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-202.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-048.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/5581","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-045.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://mail.python.org/pipermail/python-dev/2002-August/027229.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=104333092200589&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2002/dsa-159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10009.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-082.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-202.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/5581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1120","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request."},{"lang":"es","value":"Desbordamiento de búfer en Savant Web Server 3.1 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante una petición HTTP GET larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savant:savant_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"47B789F5-3497-4134-BC3A-545576160ED6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10076.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/16770/","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10076.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/16770/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1121","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 (\"Message Fragmentation and Reassembly\") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type."},{"lang":"es","value":"motores de filtrado de contenido SMTP, incluyendo \r\nGFI MailSecurity para Exchange/SMTP anteriores a 7.2\r\nInterScan VirusWall anteriores a 3.52 compilación 1494\r\nla configuración por defecto de MIMEDefang anteriores a 2.21\r\ny posiblemente otros productos, no detectan correos electrónicos fragmentados como se define en la RFC2046 (\"Fragmentación y ensamblaje de Mensajes\"), y soportado en productos como Outlook Express, lo que permite a atacantes remotos evitar el filtrado de contenido, incluyendo la comprobación de virus, mediante correos fragmentados con el tipo de contenido message/partial."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gfi:mailsecurity:7.2:*:exchange_smtp:*:*:*:*:*","matchCriteriaId":"519EA0E1-6E7D-4EC5-88F2-54ACE06DDC7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"454C2126-A9DF-4550-B00C-56C20518B3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5:*:*:*:*:*:*:*","matchCriteriaId":"27DD72FC-3FEF-43BC-8A68-3299213151F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"6F43933D-F354-44EF-9087-55BABC7413F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:webshield_smtp:4.5.74.0:*:*:*:*:*:*:*","matchCriteriaId":"D0950198-02BB-4BB1-A120-A7925D4A991B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:canit:1.2:*:*:*:*:*:*:*","matchCriteriaId":"EC9DABC1-4A0A-403A-B200-FF5D45BC5617"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:mimedefang:2.14:*:*:*:*:*:*:*","matchCriteriaId":"E49F4116-2497-4AC4-ACE2-E77F3C1889EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:mimedefang:2.20:*:*:*:*:*:*:*","matchCriteriaId":"0AA989CD-020D-487B-9E83-2316185C6950"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.5:*:*:*:*:*:*:*","matchCriteriaId":"09396CAF-01B2-4313-973C-F4A809D0E232"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.51:*:*:*:*:*:*:*","matchCriteriaId":"CDA017B0-A0D4-4B47-B980-57C6C103C7F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:*:*:*:*:*:*","matchCriteriaId":"C7A7881A-BC30-471E-8D8F-F764F26DF8F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0134.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0135.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0113.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103184267105132&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103184501408453&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10088.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/836088","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/securitynews/5YP0A0K8CM.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5696","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0134.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103184267105132&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103184501408453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10088.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/836088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/securitynews/5YP0A0K8CM.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1122","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:internet_scanner:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AC3350ED-F90A-4053-BD8F-E3903E8C0B6F"}]}]}],"references":[{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21165","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10130.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3150","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5738","source":"cve@mitre.org"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10130.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1123","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the \"Hello\" overflow."},{"lang":"es","value":"Desbordamiento de búfer en Microsof SQL Server permite a atacantes remotos ejecutar código arbitrario mediante una petición larga al puerto TCP 1433, también conocido como desbordamiento \"Hello\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102873609025020&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/286220","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-003.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9788.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5411","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102873609025020&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/286220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-003.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9788.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1124","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables."},{"lang":"es","value":"Múltiples desbordamientos de búfer en purity 1-16 permite a usuarios locales ganar privilegios y modificar las tablas de altas puntuaciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:purity:purity:1.9:*:*:*:*:*:*:*","matchCriteriaId":"C03E8287-1729-44A1-900C-5C091BCA4928"},{"vulnerable":true,"criteria":"cpe:2.3:a:purity:purity:1.14:*:*:*:*:*:*:*","matchCriteriaId":"5B088CD3-A972-49B6-BEFC-7E1C192E4DC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:purity:purity:1.15:*:*:*:*:*:*:*","matchCriteriaId":"2870D0D6-08B2-4B1A-AEF2-C302122E5A18"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-166","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10100.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5702","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10100.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1125","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory."},{"lang":"es","value":"Programas portados a FreeBSD que usan libkvm para FreeBSD 4.6.2-RELEASE y anteriores, incluyendo asmon, ascpu, bubblemon, wmmon, y wmnet2, dejan abiertos descriptores de ficheros para /dev/mem y /dev/kmem, lo que permite a usuarios locales leer la memoria del kernel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:39.libkvm.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0115.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103228135413310&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10109.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5718","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5720","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:39.libkvm.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103228135413310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10109.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1126","sourceIdentifier":"cve@mitre.org","published":"2002-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:galeon:galeon_browser:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1196F08A-E1AF-41F0-9685-0E54A8409D85"},{"vulnerable":true,"criteria":"cpe:2.3:a:galeon:galeon_browser:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B32DBCE5-7463-4124-A6E1-5D2206F31E0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:galeon:galeon_browser:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"864F6D5C-88BE-4FDB-ABD6-E0AB1C7377BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=145579","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103176760004720&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10084.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-192.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-046.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5694","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=145579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103176760004720&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10084.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1127","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCBDA4E-85CE-4EE8-BE0B-11FA585AAF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0b:*:*:*:*:*:*:*","matchCriteriaId":"366AD984-B946-4031-9A0D-832365569047"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44C7E5F5-363A-4C3C-8A48-8EC55B32778F"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2b:*:*:*:*:*:*:*","matchCriteriaId":"DCFBBE8E-D47D-4D5E-A5D9-246B12A446BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2c:*:*:*:*:*:*:*","matchCriteriaId":"E632334A-229A-4AC4-BCE7-8C13BA24F92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2d:*:*:*:*:*:*:*","matchCriteriaId":"C6001642-7901-4879-BED1-99BC26F1E34D"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2de1:*:*:*:*:*:*:*","matchCriteriaId":"6EB28381-7878-49AD-9B39-CC873CFE3881"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2de2:*:*:*:*:*:*:*","matchCriteriaId":"E6550F28-806E-4EDC-9DAA-84072548CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2f:*:*:*:*:*:*:*","matchCriteriaId":"97EA6666-C118-45A8-885E-6533BD2EECA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"CC2E0207-3429-4134-8A4C-5455565B64C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10146.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5745","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10146.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1128","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCBDA4E-85CE-4EE8-BE0B-11FA585AAF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0b:*:*:*:*:*:*:*","matchCriteriaId":"366AD984-B946-4031-9A0D-832365569047"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44C7E5F5-363A-4C3C-8A48-8EC55B32778F"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2b:*:*:*:*:*:*:*","matchCriteriaId":"DCFBBE8E-D47D-4D5E-A5D9-246B12A446BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2c:*:*:*:*:*:*:*","matchCriteriaId":"E632334A-229A-4AC4-BCE7-8C13BA24F92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2d:*:*:*:*:*:*:*","matchCriteriaId":"C6001642-7901-4879-BED1-99BC26F1E34D"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2de1:*:*:*:*:*:*:*","matchCriteriaId":"6EB28381-7878-49AD-9B39-CC873CFE3881"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2de2:*:*:*:*:*:*:*","matchCriteriaId":"E6550F28-806E-4EDC-9DAA-84072548CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2f:*:*:*:*:*:*:*","matchCriteriaId":"97EA6666-C118-45A8-885E-6533BD2EECA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"CC2E0207-3429-4134-8A4C-5455565B64C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"414ACA11-2E04-4F52-8A63-E111027EA7BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:ultrix:3.0:*:*:*:*:*:*:*","matchCriteriaId":"944F5BF5-F48F-4EFE-A929-D6BDEF561C28"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10147.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5747","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10147.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1129","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f_pk6_bl17:*:*:*:*:*:*:*","matchCriteriaId":"F9A4900F-7A0B-441E-967D-45B1A051A5B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:*","matchCriteriaId":"F41B68A9-C4EF-47F5-BE84-BD20C073C2D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:*","matchCriteriaId":"38B11F9E-64EE-47D1-A341-62F54382227C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3198FD9F-ACB8-4F59-A896-68A3A7287D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0_pk4_bl17:*:*:*:*:*:*:*","matchCriteriaId":"146562A0-D7AA-465D-9F48-5B0E75E4D109"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0_pk4_bl18:*:*:*:*:*:*:*","matchCriteriaId":"6BC279C2-31D2-4A13-B38B-593FA761361E"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a_pk3_bl17:*:*:*:*:*:*:*","matchCriteriaId":"B86A9A68-DFD4-42FD-A11C-FCBC73E6EDCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1_pk3_bl17:*:*:*:*:*:*:*","matchCriteriaId":"BE0BEA96-837B-4699-BE2E-CCD8F8F3CF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1_pk4_bl18:*:*:*:*:*:*:*","matchCriteriaId":"1E4DFD7B-4A10-4991-AC26-C8A957E87009"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:*","matchCriteriaId":"0EA62CD1-19EA-46D8-9423-BFFF9FC8CA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a_pk1_bl1:*:*:*:*:*:*:*","matchCriteriaId":"168C607C-6170-4936-9A53-AE3AAEBD79F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a_pk2_bl2:*:*:*:*:*:*:*","matchCriteriaId":"A7793736-B551-428D-8A2F-291968E212FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DCCBDA4E-85CE-4EE8-BE0B-11FA585AAF38"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.0b:*:*:*:*:*:*:*","matchCriteriaId":"366AD984-B946-4031-9A0D-832365569047"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44C7E5F5-363A-4C3C-8A48-8EC55B32778F"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2b:*:*:*:*:*:*:*","matchCriteriaId":"DCFBBE8E-D47D-4D5E-A5D9-246B12A446BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2c:*:*:*:*:*:*:*","matchCriteriaId":"E632334A-229A-4AC4-BCE7-8C13BA24F92D"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2d:*:*:*:*:*:*:*","matchCriteriaId":"C6001642-7901-4879-BED1-99BC26F1E34D"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2de1:*:*:*:*:*:*:*","matchCriteriaId":"6EB28381-7878-49AD-9B39-CC873CFE3881"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2de2:*:*:*:*:*:*:*","matchCriteriaId":"E6550F28-806E-4EDC-9DAA-84072548CCC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2f:*:*:*:*:*:*:*","matchCriteriaId":"97EA6666-C118-45A8-885E-6533BD2EECA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:digital:osf_1:3.2g:*:*:*:*:*:*:*","matchCriteriaId":"CC2E0207-3429-4134-8A4C-5455565B64C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103248659816294&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10148.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5746","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0122.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103248659816294&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10148.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1131","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.7","matchCriteriaId":"03ACCA23-A7AF-4879-8750-89238D49EFCC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-191","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10145.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-204.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5763","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=311&release_id=110774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10145.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1132","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.7","matchCriteriaId":"03ACCA23-A7AF-4879-8750-89238D49EFCC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-191","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10345.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-204.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5949","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10345.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-204.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1133","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via \"..\" (dot dot) sequences with URL-encoded (1) \"/\" (%2f\") or (2) \"\\\" (%5c) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:funsoft:dinos_webserver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1590A12B-91C4-4BE5-95E9-3F1F675A74D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0127.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103281444824285&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10168.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5782","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103281444824285&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10168.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1134","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1339E551-4092-419E-9950-D98A5393807B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:3.1:*:*:*:*:*:*:*","matchCriteriaId":"30B1F4AD-0294-437F-9074-681DFF1F8A87"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:4.0:*:*:*:*:*:*:*","matchCriteriaId":"DC0A92A4-968A-4C25-885A-05ACD9B90BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"89FF068C-43CE-438F-9290-740BBC940387"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"A24ECC92-614C-414B-801E-89284155CEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"F5A209F6-B7FA-4FF9-995E-C85EE4C0EBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"4FC8C9D5-7C23-40D8-963D-09139889AF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webes_service_tools:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"7F0CCABA-8AD8-4BBC-9A2E-57F411771AD7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103280973718587&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4497","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10167.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5773","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103280973718587&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10167.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1135","sourceIdentifier":"cve@mitre.org","published":"2002-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"90DF86C4-176B-4E4E-AF89-15F090E9C0F2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103279980906880&w=2","source":"cve@mitre.org"},{"url":"http://phpwebsite.appstate.edu/article.php?sid=400","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10164.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3848","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5779","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103279980906880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpwebsite.appstate.edu/article.php?sid=400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10164.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1137","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a \"non-SQL OLEDB data source\" such as FoxPro, a variant of CAN-2002-0644."},{"lang":"es","value":"Desbordamiento de búfer en la Consola de Comandos de Base de Datos (CBCC) que maneja la entrada de usuario en Microsoft SQL Server 7.0 y 2000, incluyendo Microsoft Data Engine (MSDE) y Microsoft Desktop Engine (MSDE) 2000, permite a atantes ejecutar código arbitrario, una variante de CAN-2002-0644."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-003.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml","source":"cve@mitre.org"},{"url":"http://www.scan-associates.net/papers/foxpro.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5877","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10255","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-003.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scan-associates.net/papers/foxpro.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1138","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka \"Flaw in Output File Handling for Scheduled Jobs.\""},{"lang":"es","value":"Microsoft SQL Server 7.0 y 2000, incluyendo Microsoft Data Engine (Motor de datos) (MSDE) 1.0, y Microsoft Desktop Engine (MSDE) 2000, escribe los ficheros de salida de tareas planificadas bajo sus propios privilegios, en vez de la entidad que lo lanzó, lo que permite a atacantes sobreescribir ficheros del sistema, también conociada como \"Fallo en Manejo de Fichero de Salida en Tareas Planificadas\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-003.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10257.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-003.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10257.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1139","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka \"Incorrect Target Path for Zipped File Decompression.\""},{"lang":"es","value":"La característica de Carpetas Comprimidas en Microsoft Windows 98 con el paquete Plus!, Windows Me, y Windows XP no comprueba adecuadamente la carpeta de destino durante la descompresión de ficheros ZIP, lo que permite a atacantes remotos poner un fichero ejecutable en una lugar conocido en el sistema del usuario, también conocida como \"Ruta Objetivo Incorrecta en Descompresión de Ficheros Zipeados\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_98_plus_pack:*:*:*:*:*:*:*:*","matchCriteriaId":"83DE6302-A76A-44C1-A2EC-27FD1B82B9B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10252.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5876","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10252.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1140","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka \"Improper parameter size check leading to denial of service.\""},{"lang":"es","value":"La librería de Servicios RPC de Sun Microsystems para Unix 3.0 Interix SD, implementada en Microsoft Windows NT4, 2000 y XP, permite a atacantes remotos causar una denegación de servicio (cuelge del servicio) mediante fragmentos de paquetes malformados, también conocida como \"Comprobación equivocada de tamaño de parámetro conduciente a denegación de servidio\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:services:3.0:*:unix:*:*:*:*:*","matchCriteriaId":"7525ED6D-18AB-427E-AA81-4CC06D69AA9E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10258.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5879","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10258.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1141","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka \"Denial of service by sending an invalid RPC request.\""},{"lang":"es","value":"Un error en la validación de entrada en la librería de servicos RPC de Sun Microsystems en Unix 3.0 Interix SD, como la implementada en Microsost Windows NT4, 2000 y XP, permite a atacanes remotos causar una denegación de servicio mediante fragmentos malformados de paquetes de clientes RPC, también conocida como \"Denegación de servicio mediante envío de peticiones RPC inválidas\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:services:3.0:*:unix:*:*:*:*:*","matchCriteriaId":"7525ED6D-18AB-427E-AA81-4CC06D69AA9E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10259.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5880","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10259.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1142","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en el componente Remote Data Services (RDS) - Servicios de Datos Remotos de Microsoft Data Access Components (MDAC) 2.1 a 2.6, y en Internet Explorer 5.01 a 6.0 permite a atacantes remotos ejecutar código mediante una petición HTTP malformada al tocón (stub de datos)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A3BFD086-7F94-4482-AC27-E4FAD418B767"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*","matchCriteriaId":"49A5B686-0B8A-4904-8166-24D899D24ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*","matchCriteriaId":"01EAE3CC-D507-40A4-9198-873EE0E3DCE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0082.html","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-33.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.foundstone.com/knowledge/randd-advisories-display.html?id=337","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/542081","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6214","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10659","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10669","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2730","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A294","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3573","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-33.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.foundstone.com/knowledge/randd-advisories-display.html?id=337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/542081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2730","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1145","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F455C373-A9F7-47F9-828E-DEE2C8CC6545"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_engine:2000:*:*:*:*:*:*:*","matchCriteriaId":"51ABD323-BF3F-4825-8788-8FCD614E83E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103487044122900&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103486356413404&w=2","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10388.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nextgenss.com/advisories/mssql-webtasks.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5980","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-061","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103487044122900&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103486356413404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10388.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nextgenss.com/advisories/mssql-webtasks.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1146","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary (\"read buffer overflow\"), allowing remote attackers to cause a denial of service (crash)."},{"lang":"es","value":"Desbordamiento de búfer en el código de resolución de glib 2.2.5 y anteriores permite a atacantes remotos causar una denegación de servicio (caida) mediante una operación de lectura en paquetes DNS largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.5","matchCriteriaId":"D5272D01-D7FC-41DA-B565-9054AA55FABD"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-015.txt.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10295.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/738331","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:009","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-197.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-258.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-022.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-212.html","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-015.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10295.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/738331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-197.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-212.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1147","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"Successful exploitation requires that stacking features and remote administration are enabled.","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program."},{"lang":"es","value":"El interfaz de administración HTTP del Switch HP Procurve 4000M, con firmware anterior a C.09.16, con las características de apilamiento y administración remota activadas, no autentica las peticiones para resetear el dispositivo, lo que permite a atacantes remotos causar una denegación de servicio mediante una petición directa a la programa CGI \"device_reset\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:procurve_switch_4000m:*:*:*:*:*:*:*:*","versionEndIncluding":"c.09.15","matchCriteriaId":"F5E6CE2C-992F-4392-9D8E-89DE3CA4FC38"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103287951910420&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4501","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10172.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5784","source":"cve@mitre.org"},{"url":"http://www.tech-serve.com/research/advisories/2002/a092302-1.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103287951910420&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10172.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tech-serve.com/research/advisories/2002/a092302-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1148","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet."},{"lang":"es","value":"El servlet por defecto (org.apache.catalina.servlets.DefaultServlet) en Tomcat 4.0.4 y 4.1.10 permite a atacantes remotos leer código fuente de ficheros del servidor mediante una petición directa al servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BAFF8D91-80A2-454A-8B44-A5A889002692"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC42876-65AD-476A-8B62-25D4E15D1BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"724A8FF9-8089-4302-8200-08987A712988"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F97DDB7-E32B-422F-8AEA-07C75DEAD36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7079F63C-7CA8-4909-A9C8-45C4C1C1C186"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.2:beta2:*:*:*:*:*:*","matchCriteriaId":"4BE08AEE-4801-4FAF-97AD-BBD5C5849E3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EC829C8E-1061-4F62-BA4B-FE5C7F11F209"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"143BA75E-A186-47EF-A18C-B1A1A1F61C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C0CDF9E1-9412-450E-B1D4-438F128FFF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"32561F50-6385-4D71-AFAC-3D2F8DB55A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"914E1404-01A2-4F94-AA40-D5EA20F55AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"401A213A-FED3-49C0-B823-2E02EA528905"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7641278D-3B8B-4CD2-B284-2047B65514A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103288242014253&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4758","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-170","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10175.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-217.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-218.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5786","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103288242014253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-170","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10175.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-217.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-218.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1149","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings."},{"lang":"es","value":"El procedimiento de instalación en Invision Board sugiere que los usuarios instalen el programa phpinfo.php en la raíz del web, lo que filtra información sensible como nombres de rutas, información del SO, y configuración de php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103290602609197&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10178.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3356","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5789","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103290602609197&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10178.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1150","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote sessions by entering certain logoff or shutdown sequences (such as CTRL-ALT-DEL) and canceling out of the resulting user confirmation prompts, such as when the remote user is editing a document."},{"lang":"es","value":"La capacidad de Protección de Salvapantallas de Compartición Remota de Estcritorio (Remote Desktop Sharing, RDS) en Microsoft NetMeeting 3.01 a SP2 (4.4.3396) permite a atacantes con acceso físico secuestrar sesiones mediante la pulsación de ciertas secuencias de inicio y cierre de sesión (como CTRL-ALT-SUPR), y la cancelación de los mensajes de confirmación, como cuando el usuario remoto no está editando un documento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:3.01:*:*:*:*:*:*:*","matchCriteriaId":"251998AE-7E0D-443F-8006-F5FCF688DA36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103228375116204&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10119.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5715","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103228375116204&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10119.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1151","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains."},{"lang":"es","value":"La protección de ejecución de secuencias de comandos (scripts) en sitios cruzados en Konqueror 2.2.2 y 3.0 a 3.0.3 no inicializa adecuandamente los dominios en sub-marcos y sub-iframes (marcos incrustados), lo que puede permitir que atacantes remotos ejecuten comandos y roben cookies de submarcos que están en otros dominios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F531972-E0A7-4E7C-A899-3766CEAAE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C629F0C8-C765-4076-B426-80929F9CE285"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103175850925395&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-167","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10039.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20020908-2.txt","source":"cve@mitre.org"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-064.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7867","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-221.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5689","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103175850925395&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10039.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20020908-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-064.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-221.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1152","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Konqueror in KDE 3.0 through 3.0.2 does not properly detect the \"secure\" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing."},{"lang":"es","value":"Konqueror en KDE 3.0 a 3.0.2 no detecta adecuadamente la señal (flag) en una cookieHTTP, lo que podría causar que Konqueror mandase la cookie por un canal no cifrado, que podría ser vista por atacantes espiando (sniffing) la conexión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103175827225044&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10083.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20020908-1.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5691","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103175827225044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10083.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20020908-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1153","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as \"Host\"."},{"lang":"es","value":"IBM Websphere 4.0.3 permite a atacantes remotos causar una denegación de servicio (caída), y posiblemente ejecutar código arbitrario mediante una petición HTTP con cabeceras HTTP largas, como \"Host\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_application_server:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"89952309-97EE-462A-B9A3-8013BC1CA1EE"}]}]}],"references":[{"url":"ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103244572803950&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10140.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2092","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5749","source":"cve@mitre.org"},{"url":"ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103244572803950&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10140.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1154","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log."},{"lang":"es","value":"anlgform.pl en Analog anteriores a 5.23 no restringe el acceso al comando de actualización de progreso PROGRESSFREQ, lo que permite a atacantes remotos causar una denegación de servico (consumición de disco) usando el comando para generar informes con más frecuencia y llenar el registro de errores del servidor web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stephen_turner:analog:*:*:*:*:*:*:*:*","versionEndIncluding":"5.23","matchCriteriaId":"A3CAC4D9-72CC-4D2A-9CC8-6276453F3792"}]}]}],"references":[{"url":"http://www.analog.cx/security5.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10344.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3779","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-059.html","source":"cve@mitre.org"},{"url":"http://www.analog.cx/security5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10344.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-059.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1156","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled."},{"lang":"es","value":"Apache 2.0.42 permite a atacanes remotos ver el código fuente de un guión (script) CGI mediante una petición POST a un directorio con WebDAV y CGI activados."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.43:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4617","source":"cve@mitre.org"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/910713","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10499","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.apacheweek.com/issues/02-10-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/910713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1157","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840."},{"lang":"es","value":"Vulnerabilidad de scripts en sitios cruzados en el módulo de Apache mod_ssl 2.8.9 y anteriores, cuando UseCanonicalName está desactivado y DNS comodín está activado, permite a atacantes remotos ejecutar scripts como otros visitantes del sitio web, mediante el nombre del servidor en una respuesta HTTPS en el puerto SSL, usado en una URL que se referencia a sí misma. Es una vulnerabilidad distinta de CAN-2002-0840."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.9","matchCriteriaId":"60B71520-78FD-4935-BC0B-D1F299DD2B11"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000541","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/296753","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-181","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10457.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-072.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2512.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/2107","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-222.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-251.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6029","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/296753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10457.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-072.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2512.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/2107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-251.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1158","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user."},{"lang":"es","value":"Desbordamiento de búfer en Canna 3.5.b2 y anteriores  permite a usuarios locales ejecutar código arbitrario como el usuario bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canna:canna:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5b2","matchCriteriaId":"E1B5BB96-F3F8-41FF-A2B8-D51FD977C16C"}]}]}],"references":[{"url":"http://canna.sourceforge.jp/sec/Canna-2002-01.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104041812206344&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-224","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-246.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-261.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-115.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6351","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10831","source":"cve@mitre.org"},{"url":"http://canna.sourceforge.jp/sec/Canna-2002-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104041812206344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1159","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak."},{"lang":"es","value":"Canna 3.6 y anteriores no validan adecuadamente las peticiones, lo que permite a atacantes remotos causar una denegación de servicio o fuga de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canna:canna:3.5b2:*:*:*:*:*:*:*","matchCriteriaId":"451D7F9E-DEE6-4EE5-B1DA-4EBA949E5C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:canna:canna:3.6:*:*:*:*:*:*:*","matchCriteriaId":"7FA6756A-5CE1-4EE2-9C26-DB931B3A41D3"}]}]}],"references":[{"url":"http://canna.sourceforge.jp/sec/Canna-2002-01.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-224","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-246.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-261.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-115.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6354","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10832","source":"cve@mitre.org"},{"url":"http://canna.sourceforge.jp/sec/Canna-2002-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1161","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2023-11-07T01:55:57.747","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1380.  Reason: This candidate is a reservation duplicate of CVE-2002-1380.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-1165","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) \"||\" sequences or (2) \"/\" characters, which are not properly filtered or verified."},{"lang":"es","value":"Sendmail Consortium's Restricted Shell (SMRSH) en Sendmail  8.12.6, 8.11.6-15 y anteriores, permite a atacantes puentear las restricciones pretendidas de smrsh insertando caractéres adicionales después de secuencias \"||\" (dos barras verticales) o \"/\" (barra), que no son adecuadamente filtradas o verificadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"598F74BA-2B71-435E-92B8-9DEADB3311A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"581E5904-1A2B-49FF-BE3F-D42019AD816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC4C83-4FB9-4344-AFCB-C260659F81DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*","matchCriteriaId":"CAF763B4-58E3-4868-8C92-47DE3E4E5F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*","matchCriteriaId":"8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*","matchCriteriaId":"6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103350914307274&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7826","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10232.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:083","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-073.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5845","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sendmail.org/smrsh.adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103350914307274&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10232.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sendmail.org/smrsh.adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1166","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request."},{"lang":"es","value":"Desbordamiento de búfer en John Franks WN Server 1.18.2 a 2.0.0 permite a atacantes remotos ejecutar código arbitrario mediante una petición GET larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.18.2:*:*:*:*:*:*:*","matchCriteriaId":"A7853930-CB5C-40FF-B350-E9870104F4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.18.3:*:*:*:*:*:*:*","matchCriteriaId":"C6258E82-EC9D-41A1-A542-0E5988065817"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.18.4:*:*:*:*:*:*:*","matchCriteriaId":"998881F2-AF7F-4D81-A40B-7272D3535CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.18.5:*:*:*:*:*:*:*","matchCriteriaId":"660DC32B-3F25-43A7-9F1C-1425C257B65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.18.6:*:*:*:*:*:*:*","matchCriteriaId":"7A37D1CF-2CFC-47A2-B4B3-FBC57480C185"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.18.7:*:*:*:*:*:*:*","matchCriteriaId":"E24280E5-0263-471E-95CC-5B1C3E9CE7F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"4801C3D0-2C11-4E30-9300-B3102A6F6E6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"3705A455-F271-461C-8614-3F0BD7A105EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.2:*:*:*:*:*:*:*","matchCriteriaId":"3AF670A2-150B-4D2A-86B2-611A88BCDB8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.3:*:*:*:*:*:*:*","matchCriteriaId":"ADC3768D-63D7-4154-A8E7-03648AD272A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.4:*:*:*:*:*:*:*","matchCriteriaId":"7A6E7299-23E2-4EFD-901C-9108740215BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.5:*:*:*:*:*:*:*","matchCriteriaId":"042D86DB-DB3C-489F-A4B4-92728F782E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.6:*:*:*:*:*:*:*","matchCriteriaId":"AB52612E-E971-4669-B955-378FA3603992"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.7:*:*:*:*:*:*:*","matchCriteriaId":"42A21E22-1F33-44ED-B367-A386A474C723"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.8:*:*:*:*:*:*:*","matchCriteriaId":"C20FAFF3-9F12-4ABB-94B4-ABBDEC42E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:1.19.9:*:*:*:*:*:*:*","matchCriteriaId":"30F11597-3433-4350-ABAB-1EF0D852BC2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_franks:wn_server:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6ED4C3B7-6445-49A8-8D1E-5F1484332226"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103340145725050&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10223.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9836","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5831","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103340145725050&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10223.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1167","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request."},{"lang":"es","value":"Vulnerabilidad scripts en sitios cruzados en IBM Web Traffic Express Caching Proxy Server 3.6 y 3.x anteriores a 4.0.1.26 permite a atacantes remotos ejecutar código como otros mediante una petición HTTP GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F5EFEB97-0E6F-4AFC-A9D6-F1E99FCAC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"57F14A9A-C642-4DA7-AB89-C036F1FC3286"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10453.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6000","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10453.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1168","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a \"%0a%0d\" (CRLF) sequence, which echoes the Location as an HTTP header in the server response."},{"lang":"es","value":"Vulnerabiliad de scripts en sitios cruzados (XSS) en IBM Web Traffic Express Caching Proxy Server 3.6 y 4.x anteriores a 4.0.1.26 permite a atacantes remotos ejecutar código como otros usuarios mediante una petición HTTP que contiene una cabecera Location: con una secuencia \"%0a%0d\" (CRLF), lo que de vuelve la Localización como una cabecera HTTP en la respuesta del servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F5EFEB97-0E6F-4AFC-A9D6-F1E99FCAC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"57F14A9A-C642-4DA7-AB89-C036F1FC3286"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10454.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6001","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10454.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1169","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash."},{"lang":"es","value":"IBM Web Traffic Express Caching Proxy Server 3.6 y 4.x antes de 4.0.1.26 permite atacantes remotso causar una denegación de servicio (caída) mediante una petición HTTP a helpout.exe sin número de versión HTTP, lo que hace que ibmproxy.exe se caiga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F5EFEB97-0E6F-4AFC-A9D6-F1E99FCAC242"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"57F14A9A-C642-4DA7-AB89-C036F1FC3286"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY35970&apar=only","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10452.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2090","source":"cve@mitre.org"},{"url":"http://www.rapid7.com/advisories/R7-0007.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6002","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY35970&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10452.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rapid7.com/advisories/R7-0007.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1170","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference."},{"lang":"es","value":"La función handle_var_requests en snmp_agent.c del demonio SNMP en el paquete Net-SNMP (antes ucd-snmp) 5.0.1, 5.0.3, y 5.0.4.pre2, permite a atacantes remotos causar una denegación de servicio (caida) mediante una desreferencia nula (NULL)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"21E8FC05-D498-4D5D-B5A3-3F16749B7491"},{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"44A07BEF-C759-459E-A144-D37C1A55A9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:net-snmp:net-snmp:5.0.4_pre2:*:*:*:*:*:*:*","matchCriteriaId":"77D95BAC-CCF3-4E8B-BF31-E277B03C0FA2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103359362020365&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=216532","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/10.02.02.txt","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-228.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5862","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10250","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103359362020365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=216532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/10.02.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-228.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1174","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function."},{"lang":"es","value":"Desbordamientos de búfer en Fetchmail 6.0.0 y anteriores permiten a atacantes remotos causar una denegación de servicio (caída) o ejecutar código arbitrario mediante\r\ncabeceras largas que no son adecuadamente procesadas por la función readheadesrs, o \r\nmediante cabeceras largas Received:, que no son procesadas adecuadamente por la función parse_received"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"39C26905-0EB8-4141-B3EC-6C30FC34452E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*","matchCriteriaId":"74D12B67-6E66-419A-A28F-6306402931EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*","matchCriteriaId":"A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"93D03D78-C56E-4189-97FC-916C918EDFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*","matchCriteriaId":"19A66C77-041F-4A12-8A36-233A6B50641C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C945059C-EF39-486D-A804-FBB8704AB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*","matchCriteriaId":"A91C6418-41F0-46EB-ACFC-FCE907F5AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*","matchCriteriaId":"0C020534-7596-496C-B9B0-739F58F6F4EF"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103340148625187&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-215.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-171","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10203.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2402.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5827","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103340148625187&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-215.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10203.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1175","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary."},{"lang":"es","value":"La función getmxrecord en Fetchamil 6.0.0 y anteriores no comprueba adecuadamente los límites de un paquete DNS particularmente malformado de un servidor DNS malicioso, lo que permite a atacantes remotos causar una denegación de servicio (caida) cuando Fetchmail intenta leer datos más alla del límite esperado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.0.0","matchCriteriaId":"39C26905-0EB8-4141-B3EC-6C30FC34452E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*","matchCriteriaId":"74D12B67-6E66-419A-A28F-6306402931EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*","matchCriteriaId":"A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"93D03D78-C56E-4189-97FC-916C918EDFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*","matchCriteriaId":"19A66C77-041F-4A12-8A36-233A6B50641C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C945059C-EF39-486D-A804-FBB8704AB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*","matchCriteriaId":"A91C6418-41F0-46EB-ACFC-FCE907F5AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*","matchCriteriaId":"0C020534-7596-496C-B9B0-739F58F6F4EF"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103340148625187&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-215.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-171","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10203.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2402.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5826","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103340148625187&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-215.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10203.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1176","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file."},{"lang":"es","value":"Desbordamiento de búfer en Winamp 2.81 permite a atacantes remotos ejecutar código arbitrario mediante una etiqueta ID3v2 de Artista larga en un fichero MP3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=104025874209567&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104025874209567&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1177","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Winamp 3.0 cuando muestra un MP3 en la ventana de Libreria de Medios, permite a atacantes remotos ejecutar código arbitrario mediante un fichero MP3 conteniendo una etiqueta ID3v2 de Artista o Álbum larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=104025874209567&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6429","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104025874209567&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1178","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en el CGIServlet en Jetty HHTP server anteriores a 4.1.0 permite a atacantes remotos leer ficheros arbitrarios mediante secuencias .. (punto punto barra invertida) en peticiones HTTP al directorio cgi-bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.0","matchCriteriaId":"233B87E3-D87D-4473-8D3B-151146F462EE"}]}]}],"references":[{"url":"http://groups.yahoo.com/group/jetty-announce/message/45","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103358725813039&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10246.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5852","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0011.txt","source":"cve@mitre.org"},{"url":"http://groups.yahoo.com/group/jetty-announce/message/45","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103358725813039&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10246.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0011.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1179","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long \"From\" address, which triggers the overflow when the user views or previews the message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103435413105661&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103429637822920&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103429681123297&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10338.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5944","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-058","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103435413105661&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103429637822920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103429681123297&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10338.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1180","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka \"Script Source Access Vulnerability.\""},{"lang":"es","value":"Un error tipográfico en los permisos de acceso a fuentes de scripts en Internet Information Server (IIS) 5.0 no excluye adecuadamente ficheros .COM, lo que permite a atacantes con sólo permisos de escritura cargar ficheros .COM, también conocida como \"Vulnerabilidad de Acceso a Fuente de Scripts\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10504.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6071","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10504.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1181","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors."},{"lang":"es","value":"Múltiples vulnerabilidades de scripting en sitios cruzados (XSS) en las páginas web de administració de Microsoft Internet Information Server (IIS) 4.0 a 5.1 permite a atacantes remotos ejecutar código HTML como otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103651224215736&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10501.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6072","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A942","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A944","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103651224215736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10501.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1182","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned."},{"lang":"es","value":"IIS 5.0 Y 5.1 permiten a atacantes remotso causar una denegación de servicio (caída) mediante peticiones WebDAV malformadas que hacen que sea asignada mucha memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0048.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/ms-iisdos.txt","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/vna/ms-iisdos.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4846","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6070","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10503","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1009","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1011","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-011.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/ms-iisdos.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/vna/ms-iisdos.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1183","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka \"New Variant of Certificate Validation Flaw Could Enable Identity Spoofing\" (CAN-2002-0862)."},{"lang":"es","value":"Microsoft Windows 98 y Windows NT 4.0 no verifican las Restricciones Básicas de certificados digitales, permitiendo a atacantes remotos ejecutar código, también conocida como \"Nueva Variante de Fallo en Validación de Certificado Podría Permitir Suplantación de Identidad\" (CAN-2002-0862)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/5410","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1184","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs."},{"lang":"es","value":"La carpeta raíz de sistema de Microsoft Windows 2000 tienen permisos por defecto de accesso total para todos los usuarios, y está en el camino de búsqueda cuando se localizan programas durante el inicio de sesión o el lanzamiento de aplicaciones desde el escritorio, lo que puede permitir a atacantes ganar privilegios de otros usuarios mediante programas tipo caballo de Troya."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/5415","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9779","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1185","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka \"Malformed PNG Image File Failure.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0105.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103970996205091&w=2","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20021211.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10662.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6216","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A393","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A542","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103970996205091&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20021211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10662.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1186","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka \"Encoded Characters Information Disclosure.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10039.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7845","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5610","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A143","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A471","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A495","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10039.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A471","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1187","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the <frame> or <iframe> element and javascript, aka \"Frames Cross Site Scripting,\" as demonstrated using the PrivacyPolicy.dlg resource."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103158601431054&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10066.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5672","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103158601431054&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10066.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/2998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1188","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka \"Temporary Internet Files folders Name Reading.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103184415307193&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10665.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6217","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A444","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A690","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103184415307193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10665.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1189","sourceIdentifier":"cve@mitre.org","published":"2002-10-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding."},{"lang":"es","value":"La configuración por defecto de Cisco Unity 2.x y 3.x no bloquea llamadas internacioneles con operados, lo que podría permitir a usuarios autenticados hacer llamadas internacionales usando desvío (forwarding) de llamadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A6659C2E-691B-47B8-9659-73FF4DEE3C19"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C0317B33-20DC-4E57-8AFC-097FBC6067F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D382C84D-C8F7-4257-B6C6-D00C595F6B63"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6DF21240-6275-434F-B7C3-8CC029B9ABA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8934A49D-9ABB-4B49-9B69-615B8CFFAF10"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*","matchCriteriaId":"0E60BDFE-108B-4621-9B02-774AA844407B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"856D99BB-1CB3-4A8D-9752-CC854829C65A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B13E26E7-8284-4B70-B51C-B3B96995094F"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10282.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5896","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10282.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1190","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A6659C2E-691B-47B8-9659-73FF4DEE3C19"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C0317B33-20DC-4E57-8AFC-097FBC6067F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D382C84D-C8F7-4257-B6C6-D00C595F6B63"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6DF21240-6275-434F-B7C3-8CC029B9ABA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8934A49D-9ABB-4B49-9B69-615B8CFFAF10"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*","matchCriteriaId":"0E60BDFE-108B-4621-9B02-774AA844407B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"856D99BB-1CB3-4A8D-9752-CC854829C65A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B13E26E7-8284-4B70-B51C-B3B96995094F"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10282.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44545","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10282.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1191","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sabre:desktop_reservation_software:*:*:*:*:*:*:*:*","versionEndIncluding":"4.4g","matchCriteriaId":"7205EA7F-F754-427A-82F7-2CFF52527FF0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103478372603106&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/10.16.02.txt","source":"cve@mitre.org"},{"url":"http://www.idefense.com/intelligence/vulnerabilities/display.php?id=48","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10378.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6555","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5974","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103478372603106&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/10.16.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/intelligence/vulnerabilities/display.php?id=48","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10378.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1192","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain \"games\" group privileges via malformed entries in a game save file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rogue:rogue:5.3:*:*:*:*:*:*:*","matchCriteriaId":"5329D8BB-9734-4FAC-9D45-05EF8D36E596"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103342413220529&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7181","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7252","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6098","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10261","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103342413220529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10261","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1193","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files."},{"lang":"es","value":"tkmail anteriores a la  4.0beta9-8.1 permite a usuarios locales la creación o la sobreescritura de ficheros como usuarios mediante un ataque de enlaces simbólicos (symlink attack) o ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tkmail:tkmail:4.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D957C087-DC7B-4D6E-8872-FF82EC5790AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tkmail:tkmail:4.0_beta4:*:*:*:*:*:*:*","matchCriteriaId":"E3F9AA4D-D4DE-403D-8422-6D880FB0C2C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tkmail:tkmail:4.0_beta6:*:*:*:*:*:*:*","matchCriteriaId":"7723BECF-1F90-4781-9EF0-181EEC92CB73"},{"vulnerable":true,"criteria":"cpe:2.3:a:tkmail:tkmail:4.0_beta8:*:*:*:*:*:*:*","matchCriteriaId":"E251DEF4-A2E5-485D-96BF-9E25A68A883E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tkmail:tkmail:4.0_beta9:*:*:*:*:*:*:*","matchCriteriaId":"F22EBDE3-BDD6-4E3B-88B6-398A51B377D2"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-172","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10307.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5911","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10307.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1194","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message."},{"lang":"es","value":"Desbordamiento de búfer en talkd en NetBSD 1.6 y anteriores, y posiblemente otros sistemas operativos, pueden permitir a atacantes remotos ejecutar código arbitrario mediante un mensaje largo entrante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-019.txt.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10303.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5910","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-019.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10303.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1195","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arbitrary HTML, including script, via a web page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (Cross-site scripting, XSS) en el interfaz PHP de ht://Check 1.1 permite a servidores web remotos insertar HTML arbitrario, incluyendo scripts, mediante una página web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gabriele_bartolini:ht_check:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F4F7C1EE-C72D-4C26-A4AF-1C030320A3B2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103184269605160&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-169","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10089.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5699","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103184269605160&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10089.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1196","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the \"usebuggroups\" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits."},{"lang":"es","value":"editproducts.cgi en Bugzilla 2.14.x anteriores a 2.14.4 y 2.16 anteriores a 2.16.1, cuando la característica \"usebuggroups\" está activada y se especifican más de 47 grupos, no calcula adecuadamente valores de bits de números grandes, lo que permite permisos extra a usuarios mediante características conocidas de funciones matemáticas de Perl que establecen múltiples bits."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103349804226566&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-173","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10233.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5843","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103349804226566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10233.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1197","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail."},{"lang":"es","value":"bugzilla_email_append.pl en Bugzilla 2.14.x antes de 2.14.4, y 2.16.x antes de 2.16.1, permite a atacantes remotos ejecutar código arbitrario mediante metacaracteres de shell en una llamada de sistema a processmail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=163024","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103349804226566&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10234.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5844","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=163024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103349804226566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10234.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1198","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack."},{"lang":"es","value":"Bugzilla 2.16.x anteriores a 2.16.1 no filtra apropiadamente apóstrofes de direcciones de correo electrónico durante la creación de cuentas, lo que permite a atacantes remotos ejecutar SQL arbitrario mediante un ataque de inyección de SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=165221","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103349804226566&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10235.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5842","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=165221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103349804226566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10235.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1199","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments."},{"lang":"es","value":"El procedimiento getdbm en ypxfrd permite a usuarios locales leer ficheros arbitrarios, y a atacantes remotos leer bases de datos fuera de /var/yp, mediante ataques de atravesamiento de directorios y de enlaces simbólicos en los argumentos de dominio y mapa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"86288A2E-B1BD-4DA9-BCCC-35AC44EEDD52"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.3:*:*:*:*:*:*:*","matchCriteriaId":"23B38FCC-2C86-4E84-860B-EBAE0FA123B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openlinux:2.4:*:*:*:*:*:*:*","matchCriteriaId":"A63714ED-A697-4AC3-AF13-3B028F9A87EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"BBC635C0-2B09-41F5-8160-365EC8642F89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103426842025029&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10329.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/538033","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5937","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103426842025029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10329.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/538033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1200","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"Balabit Syslog-NG 1.4.x antes de 1.4.15, y 1.4.x antes de 1.5.20, cuando se usan plantillas de nombres de fichero o de salida, no controla adecuadamente el tamaño de un búfer cuando se encuentran caracteres constantes durante una expansión de macro, lo que permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.4.0:rc3:*:*:*:*:*:*","matchCriteriaId":"2FB78B77-64B2-4BDB-A323-A68703C6A7A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B622DC01-D651-429B-B976-467596DE791F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"788D220F-2CAD-4E16-8853-9F45AC97A2EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"F387EC59-F86A-461C-894E-1A09D186D93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"E1041037-D106-4D19-AC72-39594E4CBB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.4.15:*:*:*:*:*:*:*","matchCriteriaId":"55321D71-D819-4767-991A-ECB084BB6531"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.5.15:*:*:*:*:*:*:*","matchCriteriaId":"F8E1C408-AE21-4ABF-9061-E1B82C178ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oneidentity:syslog-ng:1.5.20:*:*:*:*:*:*:*","matchCriteriaId":"AC636B75-7F1B-4165-A8C8-697295CE856E"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=103426595021928&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-175","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/10339.php","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2513.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_039_syslog_ng.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/5934","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=103426595021928&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/10339.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/other_advisory-2513.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_039_syslog_ng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/5934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1201","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers."},{"lang":"es","value":"IBM AIX 4.3.3 y AIX 5 permite a atacantes remotos causar una denegación de servicio (consumición de CPU o caída) mediante una inundación de paquetes TCP malformados sin ningún flag establecido, lo que impide que AIX libere los búferes de memoria asociados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5:*:*:*:*:*:*:*","matchCriteriaId":"D084700A-713E-48C9-8ED9-A55024552B78"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103418410408599&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10326.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/102345","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5925","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103418410408599&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10326.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/102345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1202","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files."},{"lang":"es","value":"Vulnerabilidad desconocida en el demonio routed de HP Tru84 UNIX V4.0F a V5.1A permite a atacantes locales y remotos leer ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f_pk7_bl18:*:*:*:*:*:*:*","matchCriteriaId":"F41B68A9-C4EF-47F5-BE84-BD20C073C2D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g_pk3_bl17:*:*:*:*:*:*:*","matchCriteriaId":"38B11F9E-64EE-47D1-A341-62F54382227C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a_pk3_bl17:*:*:*:*:*:*:*","matchCriteriaId":"B86A9A68-DFD4-42FD-A11C-FCBC73E6EDCE"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1_pk5_bl19:*:*:*:*:*:*:*","matchCriteriaId":"0EA62CD1-19EA-46D8-9423-BFFF9FC8CA3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a_pk3_bl3:*:*:*:*:*:*:*","matchCriteriaId":"3AB7AD47-5AF1-4CE0-A295-48567F991EAA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/tru64/2002-q4/0002.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10316.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5913","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q4/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10316.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1203","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set."},{"lang":"es","value":"IBM SecureWay Firewall anteriores a 4.2.2 realiza procesamiento extra antes de determinar que un paquete es inválido y ser descartado, lo que permite a atacantes causar una denegación de servicio (agotamiento de recursos) mediante una inundación de paquetes TCP malformados sin ningun flag establecido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:secureway_firewall:4.2:*:*:*:*:*:*:*","matchCriteriaId":"99EF2CAC-8625-47CB-A38B-48C4CE0E0422"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:secureway_firewall:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"77D9557C-388D-4DAE-9B82-CA6EE26E78DC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103417988503398&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10249.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5924","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103417988503398&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10249.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1204","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name."},{"lang":"es","value":"Netscape Communicator 4.x permite a atacantes usar un enlace para robar las preferencias de un usuario, incluyendo información potencialmente sensible como historia de URLs, direcciones de correo electrónico, y posiblemente sus contraseñas, mediante la redefinición de la función user_pref() y accediendo al fichero prefs.js, que está almacenado en un directorio con un nombre predecible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:*","matchCriteriaId":"C97DE00F-4C73-4C54-918E-D540F2C3297B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.76:*:*:*:*:*:*:*","matchCriteriaId":"C5A07AD2-2293-443A-9A32-316B832A5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"5A823994-786D-41D7-9FA7-FF8058C4AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.78:*:*:*:*:*:*:*","matchCriteriaId":"B4613823-DA14-4BE2-986C-2EED3DB82BA7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0081.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.19.02c.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10655.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.19.02c.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10655.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1209","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via \"..\\\" (dot-dot backslash) sequences in a GET request."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias \"..\\\\\" (punto punto barra invertida) en una petición GET."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*","matchCriteriaId":"59DDD024-7D45-407F-AEBF-4835B00BD105"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/10.24.02.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10469","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/10.24.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1210","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context."},{"lang":"es","value":"Qualcomm Eudora 5.1.1, 5.2, y posiblemente otras versiones almacenan adjuntos de correo electrónico en una localización predecible, lo que permite a atacantes remotos leer ficheros arbitrarios mediante un enlace que carga un adjunto con script malicioso en un marco, el cual ejecuta el script en el contexto del navegador local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32956E1B-E52C-4290-ABDA-B345CD0F682B"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8953ECC-B326-4E41-A4CE-E5F1F8D905EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.19.02b.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.19.02b.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1211","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts."},{"lang":"es","value":"Prometheus 6.0 y anteriores permite a atacantes remotos ejecutar PHP arbitrario mediante un parámetro PROMETHEUS_LIBRARY_BASE que apunta a código almacenado un servidor remoto, que es usado en index.php, install.php, o varios scripts test_*.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jason_orcutt:prometheus:3.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"FE267985-6A84-49DD-8618-F2C3D09282F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jason_orcutt:prometheus:4.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"C6D46E68-E6F4-4449-8EDB-9E7CFB858184"},{"vulnerable":true,"criteria":"cpe:2.3:a:jason_orcutt:prometheus:6.0:*:*:*:*:*:*:*","matchCriteriaId":"21BB349A-64C5-488F-9FE4-2F1FA480EB6F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0050.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103616306403031&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/10.31.02b.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10515.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6087","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103616306403031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/10.31.02b.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10515.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1212","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request."},{"lang":"es","value":"Desbordamiento de búfer en RadioBird Software Webserver 4 Everyone 1.23 y 1.27, y otras versiones anteriores a 1.30, permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición HTTP GET larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radiobird_software:webserver_4_all:1.23:*:*:*:*:*:*:*","matchCriteriaId":"0CB9927A-0EF8-475F-837F-B8F241B6F735"},{"vulnerable":true,"criteria":"cpe:2.3:a:radiobird_software:webserver_4_all:1.27:*:*:*:*:*:*:*","matchCriteriaId":"0C6D6FA6-5401-4389-98FB-A606E698F7A3"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10372.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5967","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10372.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1213","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with \"..\" (dot-dot) sequences containing URL-encoded forward slash (\"%2F\") characters."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en RadioBird Software WebServer 4 Everyone 1.23 y 1.27, y otras versiones anteriores a la 1.30, permite a atacantes remotos leer ficheros arbitrarios mediante una petición HTTP con secuencias \"..\" (punto punto) conteniendo caracteres de  barra invertida () codificada en la URL (%2F)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radiobird_software:webserver_4_all:1.23:*:*:*:*:*:*:*","matchCriteriaId":"0CB9927A-0EF8-475F-837F-B8F241B6F735"},{"vulnerable":true,"criteria":"cpe:2.3:a:radiobird_software:webserver_4_all:1.27:*:*:*:*:*:*:*","matchCriteriaId":"0C6D6FA6-5401-4389-98FB-A606E698F7A3"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10373.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5968","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10373.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1214","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data."},{"lang":"es","value":"Desbordamiento de búfer en el servicio Microsoft PPTP en Windows XP y Windows 2000 permite a atacantes remotos causar una denegación de servicio (cuelgue) y posiblemente ejecutar código arbitrario mediante un cierto paquete PPTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/293146","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10199.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5807","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/293146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10199.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1215","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources)."},{"lang":"es","value":"Múltiples vulnerabilidades de formato de cadena en heartbeat 0.4.9 y anteriores permiten a atacantes remotos ejecutar código arbitrario mediante ciertos paquetes al puerto UDP 694."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linux-ha:heartbeat:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4.9","matchCriteriaId":"3D2BFEC4-AC06-4F3F-92E4-951431588499"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540","source":"cve@mitre.org"},{"url":"http://linux-ha.org/security/sec01.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-174","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10357.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5955","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux-ha.org/security/sec01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10357.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1216","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check."},{"lang":"es","value":"GNU tar 1.13.19 y otras versiones anteriores a 1.13.25 permite a atacantes remotos sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos (symlink), como resultado de una modificación que tiene como efecto desactivar la comprobación  de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*","versionEndIncluding":"1.13.25","matchCriteriaId":"AB3AD4A7-0111-4ADA-A5B1-4943609C52E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:tar:1.13.19:*:*:*:*:*:*:*","matchCriteriaId":"F94C4466-E3D2-4275-86A8-5D180F493B04"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103419290219680&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10224.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:219","source":"cve@mitre.org"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-096.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103419290219680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10224.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1217","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions."},{"lang":"es","value":"Vulnerabilidad de scripts en marcos cruzados en el control WebBrowser usado en Internet Explorer 5.5 y 6.0 permite a atacantes remotos ejecutar código arbitrario, leer ficheros arbitrarios, y llevar a cabo otras actividades no autorizadas mediante código que accede a la propiedad Document, lo que evita las restricciones de dominio de frame e iframe"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103470310417576&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103470202010570&w=2","source":"cve@mitre.org"},{"url":"http://security.greymagic.com/adv/gm011-ie/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10371.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5963","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103470310417576&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103470202010570&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.greymagic.com/adv/gm011-ie/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10371.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1219","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR)."},{"lang":"es","value":"Desbordamiento de búfer en BIND versiones 4 anteriores a 4.9.10, y versiones 8 anteriores a 8.3.3, permite a atacantes remotos ejecutar código arbitrario mediante una cierta respuesta de servidor DNS conteniendo registros de recursos (RR) SIG."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0064E411-C26F-4831-B7C4-63E2E1EF98DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"982BB8D9-F396-4D99-A130-A2D8A5E61E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"9CEBE5DC-7D81-404C-929A-B92951AADA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"35EE137B-0ED3-47EC-8195-58690F5B252E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"580ADA83-C07B-40DD-B219-CA1908F1087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F9371CBC-192E-44C0-9E0C-A6D61D6C0D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"71E01FA3-4CEA-4AF0-973C-C6DA147C6252"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79528C86-614D-4B14-9D26-89E0BE6B2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF54438-F56B-4FC1-BCDB-A1A9D75374D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2AE8906-AFCF-4ED9-B3E2-D6184F67C485"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1450E5BF-66A0-4096-9775-E31E98C69AAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P","source":"cve@mitre.org"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103713117612842&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103763574715133&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4999","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/300019","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F48818","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-013.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-196","source":"cve@mitre.org"},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/852283","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6160","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10304","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2539","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103713117612842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103763574715133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/300019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F48818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-013.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/852283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1220","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size."},{"lang":"es","value":"BIND 8.3.x a 8.3.3 permite a atacantes remotos causar una denegación de servicio (terminación debido a fallo en aseveración) mediante una petición para un subdominio que no existe, con un registro de recurso OPT con una carga UDP grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79528C86-614D-4B14-9D26-89E0BE6B2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF54438-F56B-4FC1-BCDB-A1A9D75374D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2AE8906-AFCF-4ED9-B3E2-D6184F67C485"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1450E5BF-66A0-4096-9775-E31E98C69AAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"}]}]}],"references":[{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103713117612842&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103763574715133&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4999","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/300019","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-013.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-196","source":"cve@mitre.org"},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/229595","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6161","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10332","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A449","source":"cve@mitre.org"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103713117612842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103763574715133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/300019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-013.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/229595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1221","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference."},{"lang":"es","value":"BIND 8.x a 8.3.3 permite a atacantes remotos causar una denegación de servicio (caída) mediante elementos registro de recurso (RR) SIG con fecha de expiració inválida, que son eliminados de la la base de datos interna de BIND y luego causan una desreferencia a nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1:*:*:*:*:*:*:*","matchCriteriaId":"BB79EDA4-9B2C-4C4C-A5DE-CB8C6EB00BDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DF8869C-2446-48F3-A1CD-70AE44D74EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"29944FFE-5061-4903-B1FA-4E2D99CF1666"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"35EE137B-0ED3-47EC-8195-58690F5B252E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"580ADA83-C07B-40DD-B219-CA1908F1087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F9371CBC-192E-44C0-9E0C-A6D61D6C0D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"71E01FA3-4CEA-4AF0-973C-C6DA147C6252"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79528C86-614D-4B14-9D26-89E0BE6B2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF54438-F56B-4FC1-BCDB-A1A9D75374D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2AE8906-AFCF-4ED9-B3E2-D6184F67C485"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1450E5BF-66A0-4096-9775-E31E98C69AAB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"}]}]}],"references":[{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103713117612842&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103763574715133&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4999","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/300019","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-013.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-196","source":"cve@mitre.org"},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/581682","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6159","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10333","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2094","source":"cve@mitre.org"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103713117612842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103763574715133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/300019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-31.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-013.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.isc.org/products/BIND/bind-security.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/581682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1222","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request."},{"lang":"es","value":"Desbordamiento de búfer en el servidor HTTP embebido en conmutadores Cisco Catalyst corriendo CatOS 5.4 a 7.3 permite a atacantes remotos causar una denegación de servicio (reset) mediante una petición HTTP larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"01AE0EAB-F266-437A-B615-69536AF50B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"BF90D0A9-302D-4C66-B145-1EAC5EEBFC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"06F049B3-FBE6-4951-896E-B8AE2D7BFBAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"AA37670F-3FF4-476E-AA4A-7F98229C6EB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CC67FF4D-ED26-44B7-8AB9-26F0BB2946BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4:*:*:*:*:*:*:*","matchCriteriaId":"4A7B5E1E-5698-4F69-AB53-C9F6339758C9"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/catos-http-overflow-vuln.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10382.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5976","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.cisco.com/warp/public/707/catos-http-overflow-vuln.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10382.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1223","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file."},{"lang":"es","value":"Desbordamiento de búfer en el procesador (parser) DSC 3.0 de GSView usado en KGhostView en KDE 1.1 y KDE 3.0.3a, puede permitir a atacantes causar una denegación de servicio o ejecutar código arbitrario mediante un fichero de entrada PostScript (.ps) modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:1.1:*:*:*:*:*:*:*","matchCriteriaId":"55B38F8C-9451-441B-BCD8-E41C1A2231DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"E107A931-B670-42A8-9F75-EEA0EF3D09B5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0163.html","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-155.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/11319.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021008-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:071","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-155.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/11319.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021008-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1224","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter."},{"lang":"es","value":"Vulnerablidad de atravesamiento de directorios en kpf de KDE 3.0.1 a 3.0.3a permite a atacantes remotos leer ficheros arbitrarios como el usuario de kpf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C629F0C8-C765-4076-B426-80929F9CE285"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"E107A931-B670-42A8-9F75-EEA0EF3D09B5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0164.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/294991","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10347.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021008-2.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5951","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/294991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10347.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021008-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1225","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.3e:*:*:*:*:*:*:*","matchCriteriaId":"DD9C2DCA-9DA0-4364-B5A4-BC30C8A0BB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4a:*:*:*:*:*:*:*","matchCriteriaId":"10627869-B21D-4EC6-B574-D6433D169940"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4b:*:*:*:*:*:*:*","matchCriteriaId":"81AA2047-51E1-4D8C-B6CA-B2DB05D37480"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4c:*:*:*:*:*:*:*","matchCriteriaId":"434B4406-0B3A-4E7A-94D7-9E9ED63D7101"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4d:*:*:*:*:*:*:*","matchCriteriaId":"C752AE86-36DE-47C9-8AA6-2242918228B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4e:*:*:*:*:*:*:*","matchCriteriaId":"D034C52F-7D52-427B-A803-97ABD587306D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103341355708817&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103462479621246&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-178","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10116.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5729","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103341355708817&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103462479621246&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10116.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1226","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows (CVE-2002-1225)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.3e:*:*:*:*:*:*:*","matchCriteriaId":"DD9C2DCA-9DA0-4364-B5A4-BC30C8A0BB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4a:*:*:*:*:*:*:*","matchCriteriaId":"10627869-B21D-4EC6-B574-D6433D169940"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4b:*:*:*:*:*:*:*","matchCriteriaId":"81AA2047-51E1-4D8C-B6CA-B2DB05D37480"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4c:*:*:*:*:*:*:*","matchCriteriaId":"434B4406-0B3A-4E7A-94D7-9E9ED63D7101"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4d:*:*:*:*:*:*:*","matchCriteriaId":"C752AE86-36DE-47C9-8AA6-2242918228B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4e:*:*:*:*:*:*:*","matchCriteriaId":"D034C52F-7D52-427B-A803-97ABD587306D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103341355708817&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103462479621246&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-178","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103341355708817&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103462479621246&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1227","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pam:pam:0.76:*:*:*:*:*:*:*","matchCriteriaId":"CF3399B8-06C0-4873-816F-AC0E84497FF6"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-177","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10405.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5994","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10405.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1228","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"5B72953B-E873-4E44-A3CF-12D770A0D416"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103487058823193&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47815-1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10394.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/855635","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5986","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103487058823193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-47815-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10394.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/855635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1229","sourceIdentifier":"cve@mitre.org","published":"2002-10-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p550:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"0BDA2B9E-02B8-4B83-9216-F5D221CB0999"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p550r:5.2.14:*:*:*:*:*:*:*","matchCriteriaId":"24821732-DF57-4ACB-83B6-300F29EDD6B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p580:5.2.14:*:*:*:*:*:*:*","matchCriteriaId":"EA66A0F3-6375-46E2-B578-6BE1D547A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p880:5.2.14:*:*:*:*:*:*:*","matchCriteriaId":"0EB5E767-25B0-42D7-9C0E-A224E0D1B621"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p882:5.2.14:*:*:*:*:*:*:*","matchCriteriaId":"473692FF-A731-4672-85AE-265C52835234"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103470243012971&w=2","source":"cve@mitre.org"},{"url":"http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10374.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/482241","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5965","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103470243012971&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10374.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/482241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1230","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via \"shatter\" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka \"Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation.\""},{"lang":"es","value":"El Agente NetDDE en sistemas Windows permite a usuarios locales ejecutar código arbitrario mediante un mensaje WM_COPYDATA usando un ataque de estilo \"destrozar\" (shatter)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"}]}]}],"references":[{"url":"http://getad.chat.ru/","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-027.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10343.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.nl/filedesc/GetAd.c.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5927","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681","source":"cve@mitre.org"},{"url":"http://getad.chat.ru/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10343.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.packetstormsecurity.nl/filedesc/GetAd.c.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1231","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc."},{"lang":"es","value":"SCO UnixWare 7.1.1 y OpenUNIX 8.0.0 permite a usuarios locales causar una denegación de servicio mediante una llamada rpc en /proc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caldera:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9341A7B9-9087-4022-BA1C-254B0050FA88"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:caldera:openunix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"979D9A9B-2A7E-40D4-846C-A195EC89CCEA"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.41","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10425.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6025","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.41","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10425.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6025","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1232","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist."},{"lang":"es","value":"Fuga de memoria en ypdb_open en yp_db.c en ypserv anteriores a 2.5 en el paquete NIS 3.9 y anteriores permite a atacantes remotos causar una denegación de servicio (consumición de memoria) mediante un número grande de peticiones de un mapa inexistente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:ia-32:*:*:*:*:*","matchCriteriaId":"E9D468DB-C4AE-4ACB-B3B7-2FAEA90D6A49"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:secure_os:1.0:*:linux:*:*:*:*:*","matchCriteriaId":"B345284D-6842-47C0-B823-B5DDC30CC8A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0633B5A6-7A88-4A96-9462-4C09D124ED36"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"29B186E5-7C2F-466E-AA4A-8F2B618F8A14"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"1D46E093-1C68-43BB-B281-12117EC8DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-054.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000539","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103582692228894&w=2","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4605","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10423.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-078.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-223.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-224.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-229.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6016","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-054.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103582692228894&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/advisories/4605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10423.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-078.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1233","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131."},{"lang":"es","value":"Apache 1.3.27 y anteriores, y posiblemente versiones posteriores, puede permitir a usuarios locales leer o modificar el fichero de contraseñas de Apache mediante un ataque de enlaces simbólicos en ficheros temporales cuando el administrador de Apache corre htpasswd o htdigest."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:win32:*:*:*:*:*","matchCriteriaId":"780FEC59-8720-4C81-8924-F25577633B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:win32:*:*:*:*:*","matchCriteriaId":"A6938AFA-D836-4F85-9595-27799D476F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:win32:*:*:*:*:*","matchCriteriaId":"46B27279-DB34-4B9C-A84C-3ED872A43599"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:win32:*:*:*:*:*","matchCriteriaId":"3F8DACCB-5DE4-4ED5-B277-7CF262FF4E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:win32:*:*:*:*:*","matchCriteriaId":"98477E82-3EF0-4DBB-B40D-6AD620EE4220"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:win32:*:*:*:*:*","matchCriteriaId":"29BC4A8B-B4E9-40E7-83EE-E00F83033019"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:win32:*:*:*:*:*","matchCriteriaId":"5352DB14-3DE4-4A3B-BB1A-AD287F6CB4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:win32:*:*:*:*:*","matchCriteriaId":"A9B53062-64C4-4E29-943D-2D5D5463E31F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:win32:*:*:*:*:*","matchCriteriaId":"83841318-8B3E-4F9B-87EA-5B0FBA488822"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103480856102007&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-187","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-188","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-195","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10412.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10413.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5981","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5990","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103480856102007&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10412.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10413.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1234","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2023-11-07T01:55:58.243","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-0180.  Reason: This candidate is a an out-of-band assignment duplicate of CVE-2002-0180.  Notes: All CVE users should reference CVE-2002-0180 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-1235","sourceIdentifier":"cve@mitre.org","published":"2002-11-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack."},{"lang":"es","value":"La función kadm_ser en \r\nel demonio de administración de compatibildad de Kerberos v4 (kadmind4) en el MIT Kerberos 5 (krb5) krb5-1.2.6 y anteriores\r\nkadmind en KTH Kerberos 4 (eBones) anteriores a 1.2.1, y\r\nkadmind en KTH Kerberos 5 (Heimdal) anteriores a 0.5.1\r\n compilados con soporte de Kerberos 4, no verifica adecuadamente la longitud de un campo de petición, lo que permite a atacantes remotos ejecutar código arbitrario mediante un ataque de desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos_4:*:*:*:*:*:*:*:*","versionEndExcluding":"1.2.1","matchCriteriaId":"6FC6797E-EA18-4628-82D1-7632CD3D723F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:kth_kerberos_5:*:*:*:*:*:*:*:*","versionEndExcluding":"0.5.1","matchCriteriaId":"C9E2FC55-E886-4105-825B-08352F60D48C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.2.6","matchCriteriaId":"244CE440-15ED-4603-A89D-DB997C834B39"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-026.txt.asc","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0399.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000534","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103539530729206&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103564944215101&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103582517126392&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103582805330339&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/2002-002-kadm4_attacksig.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2002-002-kadm4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-29.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-183","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-184","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-185","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/10430.php","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/875073","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-073.php","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.pdc.kth.se/heimdal/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-242.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/6024","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-026.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0399.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103539530729206&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103564944215101&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103582517126392&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103582805330339&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/2002-002-kadm4_attacksig.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2002-002-kadm4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2002/dsa-183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/10430.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/875073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-073.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.pdc.kth.se/heimdal/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-242.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/6024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1236","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments."},{"lang":"es","value":"El servidor de adminsitración web remota del router Linksys BEFSR41 EtherFast Cable/DSL con firmware anterior a 1.42.7 permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición HTTP a Gozilla.cgi sin argumentos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.40.2:*:*:*:*:*:*:*","matchCriteriaId":"858C8B66-8FF4-4A1E-9B2D-363AC169467E"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.41:*:*:*:*:*:*:*","matchCriteriaId":"048E48C6-6A62-4E64-A69C-0F7B872AA121"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.42.3:*:*:*:*:*:*:*","matchCriteriaId":"C0FAD3B2-69ED-451F-9CD2-6B552E962B7C"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"525E00CA-DEEA-410F-A90C-C73C8D304E36"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0049.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103616324103171&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/10.31.02a.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10514.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6086","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103616324103171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/10.31.02a.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10514.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1238","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/."},{"lang":"es","value":"Peter Sandvik's Simple Web Server 0.5.1 y anteriores permite a atacantes remotos evitar las restricciones de acceso de ficheros mediante una petición HTTP con múltiples caracteres / (barra) como: http://www.example.com///file/"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_sandvik:simple_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.1","matchCriteriaId":"C1092AFC-306C-4C86-90C3-394A63A631A3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103679016031857&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.08.02a.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6145","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10563","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103679016031857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.08.02a.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1239","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program."},{"lang":"es","value":"QNX Neutrino RTOS 6.2.0 usa la variable de entorno PATH para encontrar y ejecutar el programa cp mientras opera con privilegios elevados, lo que permite a usuarios locales ganar privilegios modificando PATH para que apunte a un programa cp malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7B3A983E-7A0C-4BA9-AC9C-131437BFE793"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103679043232178&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.08.02b.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10564.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6146","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103679043232178&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.08.02b.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10564.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1242","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the \"bio\" argument to modules.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en PHP-Nuke anterior a 6.0 permite a usuarios autenticados remotamente modificar la base de datos y ganar privilegios mediante un argumento \"bio\" en modules.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA9AE983-B6FF-4686-BDB3-E6B12D4E853E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103616324103171&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/10.31.02c.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10516.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6244","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6088","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103616324103171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/10.31.02c.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10516.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1244","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en Servidor FTP Pablo 1.5, 1.3 y posiblemente otras versiones, permite a atacantes remotos causar una denegación de servicio (caida) y posiblemente ejecutar código arbitrario mediante cadenas de formato en el comando USER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:pablo_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EE93793F-BAED-452A-9E77-143C1A455A08"},{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:pablo_ftp_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"D13569A3-81CC-4830-A2DD-36DAD75F1B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:pablo_ftp_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"CF6CE817-D1AF-4D8F-AA9E-5D21AE9B719D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:pablo_ftp_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EB9F3AF5-7109-4075-83C6-A07575B1F005"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0057.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103642642802889&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10532.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4996","source":"cve@mitre.org"},{"url":"http://www.pablovandermeer.nl/ftpserver.zip","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6099","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103642642802889&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10532.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pablovandermeer.nl/ftpserver.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1245","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program."},{"lang":"es","value":"Maped en LuxMan 0.41 usa la ruta dada por el usuario para encontrar y ejecutar  el programa gzip, lo que permite a usuarios locales modificar /dev/mem y ganar privilegios mediante una variable de entorno PATH modificada que apunta a un programa gzip falso (caballo de troya)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frank_mcingvale:luxman:0.41:*:*:*:*:*:*:*","matchCriteriaId":"C134E2B2-53D2-40C2-A10A-B36CD8F723DA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103660334009855&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-189","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/advisory/11.06.02.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10549.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6113","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103660334009855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/advisory/11.06.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10549.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1247","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon."},{"lang":"es","value":"Desbordamiento de búfer en resLISa en KDE 2.1 A 3.0.4 y LISa anteriores a 0.2.2 permite a usuarios locales obtener acceso a raw sockets mediante una variable de entorno LOGNAME larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:klisa:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"45616FC1-D9F5-40F3-B3AB-B96453F31242"},{"vulnerable":true,"criteria":"cpe:2.3:a:lisa:lisa:0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61D200C-1D4D-4C4F-A077-79F6616F03CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:lisa:lisa:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8220DEF4-997E-4188-81DD-BD498B24D464"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6671EEE2-8CEC-41C7-9CF2-23D92A1B3DE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8C5E480F-A87E-4583-BC75-8596206C0895"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5DBFB51-48EB-41E5-9712-0A5368EE56A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C629F0C8-C765-4076-B426-80929F9CE285"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3a:*:*:*:*:*:*:*","matchCriteriaId":"E107A931-B670-42A8-9F75-EEA0EF3D09B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"671D1461-4AB4-4FB6-977D-733888A1BA9B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103704823501757&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103712329102632&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-020.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-193","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/advisory/11.11.02.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10592.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:080","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103704823501757&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103712329102632&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-020.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/advisory/11.11.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10592.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1248","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a \"%\" URI."},{"lang":"es","value":"El Sevidor Web Northern Solutions Xeneo 2.1.0.0, 2.0.759.6 y otras versiones anteriores a  2.1.5 permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición GET a una URL \"%\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:northern_solutions:xeneo_web_server:2.0.759.6:*:*:*:*:*:*:*","matchCriteriaId":"4A346B98-9551-4A2F-95CF-790F229F6569"},{"vulnerable":true,"criteria":"cpe:2.3:a:northern_solutions:xeneo_web_server:2.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"76179005-7F85-422D-B769-B46099FFFC9B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103642597302308&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.04.02b.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10534.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6098","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103642597302308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.04.02b.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10534.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1250","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument."},{"lang":"es","value":"Desbordamiento de búfer en Abuse 2.00 y anteriores permite a usuarios locales ganar privilegios de root mediante un argumento de línea de comandos -net largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abuse:abuse:*:*:*:*:*:*:*:*","versionEndIncluding":"2.00","matchCriteriaId":"B4FED920-D992-4649-926E-89147F605BC0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.01.02.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10519.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6094","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.01.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10519.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1251","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message."},{"lang":"es","value":"Desbordamiento de búfer en log2mail anteriores a 0.2.5.1 permite a atacantes remotos ejecutar código arbitrario mediante un mensaje de registro (log) largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:log2mail:log2mail:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.5.1","matchCriteriaId":"F8A2BFAF-52C2-4761-9913-CFDC05703CE5"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10527.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6089","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10527.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1253","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files."},{"lang":"es","value":"Abuse 2.00 y anteriores permite a usuarios locales ganar privilegios mediante argumentos de linea de comando que especifican scripts Lisp que corren con privilegios elevados, que pueden contener funciones que ejecuten comandos o modifiquen ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abuse:abuse:*:*:*:*:*:*:*:*","versionEndIncluding":"2.00","matchCriteriaId":"B4FED920-D992-4649-926E-89147F605BC0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/11.01.02.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/11300.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/11.01.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/11300.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1254","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka \"Cross Domain Verification via Cached Methods.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103530131201191&w=2","source":"cve@mitre.org"},{"url":"http://security.greymagic.com/adv/gm012-ie/","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-018.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10435.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10436.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10437.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10438.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10439.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6028","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10432","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103530131201191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.greymagic.com/adv/gm012-ie/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10435.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10436.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10437.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10438.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10439.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1255","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka \"E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail.\""},{"lang":"es","value":"Microsoft Outlook 2002 permite a atacantes remotos causar una denegación de servicio (fallo repetido) mediante un mensaje de correo electrónico con cierto campo de cabecera inválido que es accedido usando POP3, IMAP O WebDAV. También conocido como \"Error en Procesamiento de Cabecera de Correo Electrónico Podría Causar que Outlook 2002 Falle\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"D3A4D9C5-A698-4523-8756-5D7EBAA47951"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0E20E02-43B2-499B-ADDD-B5B7003894D7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/6319","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10763","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1256","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller."},{"lang":"es","value":"La capacidad de firmado en el protocolo Bloque de Mensaje de Servidor (SMB) en Microsoft Windows XP y Windows 2000 permite a atacantes desactivar la configuración de firma digital en una sesión SMB y forzar que los datos se envien sin firmar, e insertar entonces datos en la sesión sin detección; por ejemplo modificando la información de política de grupo enviada desde un controlador de dominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/6367","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10843","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1257","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail."},{"lang":"es","value":"La Máquina Virtual de Microsoft (VM) hasta 5.0.3805 inclusive permite a atacantes remotos ejecutar código arbitrario incluyendo un applet de Java que invoca objetos COM (Component Object Model) en un sitio web o en un correo HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:sr2:*:*:*:*:*:*","matchCriteriaId":"25DA02ED-9093-42E8-A9AD-F7B882430488"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/6371","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1258","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error."},{"lang":"es","value":"Dos vulnerabilidades en la Máquina Virtual de Microsoft (VM) hasta 5.0.3805 inclusive, como la usada en Internet Explorer y otras aplicaciones, permite a atacantes remotos leer ficheros mediante un applet Java con una localización falsificada en el parámetro CODEBASE de la etiqueta APPLET, posiblemente debido a un error de procesado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:sr2:*:*:*:*:*:*","matchCriteriaId":"25DA02ED-9093-42E8-A9AD-F7B882430488"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A582","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1259","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2023-11-07T01:55:58.413","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1286.  Reason: This candidate is a reservation duplicate of CVE-2002-1286.  Notes: All CVE users should reference CVE-2002-1286 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-1260","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet."},{"lang":"es","value":"Las APIs de conectividad de base de datos Java (JDBC) en Microsoft Virtual Machine (VM) 5.0.3805 y anteriores permiten a los atacantes remotos eludir las comprobaciones de seguridad y acceder al contenido de la base de datos a través de un applet Java no fiable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:sr2:*:*:*:*:*:*","matchCriteriaId":"25DA02ED-9093-42E8-A9AD-F7B882430488"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-026.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6379","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10833","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-026.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1261","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2023-11-07T01:55:58.457","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1292.  Reason: This candidate is a reservation duplicate of CVE-2002-1292.  Notes: All CVE users should reference CVE-2002-1292 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-1262","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files."},{"lang":"es","value":"Internet Explorer 5.5 y 6.0 no realizan comprobaciones de seguridad completas en caché externa, lo que permite a atacantes remotos leer ficheros arbitrarios"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103825484331857&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103910416824172&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103824668621672&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103909877717345&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-068","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103825484331857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103910416824172&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103824668621672&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103909877717345&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1264","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL."},{"lang":"es","value":"Desbordamiento de búfer en la aplicación web Oracle iSQL*Plus del servidor de bases de datos Oracle 9 permite a atacantes remotos ejecutar código arbitrario mediante un parámetro de ID de usuario largo en la URL isqlplus"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F012561-EA9E-4665-AD81-0AC7655BA22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEF5BE7D-BB10-43E5-8910-626CB6032D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:release_2_9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A742D865-D856-4E44-8C18-82A40E2D85D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:release_2_9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C7C190DB-8DA7-4858-A646-A62567AFF689"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0060.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103643298712284&w=2","source":"cve@mitre.org"},{"url":"http://technet.oracle.com/deploy/security/pdf/2002alert46rev1.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10524.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4013","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6085","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103643298712284&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://technet.oracle.com/deploy/security/pdf/2002alert46rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10524.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1265","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang)."},{"lang":"es","value":"La funcionalidad RPC de Sun en múltiples implementaciones de libc no provee de un mecanismo de exceso de tiempo cuando se leen datos de conexiones TCP, lo que permite a atacantes remotos causar una denegación de servicio (cuelgue)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5C0577C-6BC7-418F-B2C5-B74800D43418"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FEA795F7-8AAC-42BA-971B-601346704BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5CADA314-C0D0-40F8-9019-884F17D0B54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"255E0C0D-0B70-4C10-BF7C-34193AA24C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F424F2F5-D7E4-4A13-A8CF-32D466610BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6DC4E7AE-BDC4-48F1-9FDE-3F3FAA3F40F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F1329215-C53A-40D5-8E9C-F457D092E483"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E2A0F12-FD00-40B9-86AD-7D082385E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED8F0E8-A969-4F7F-A100-662F4A5426FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9416576F-A605-45BE-AA01-FEF357A66979"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AE582B8F-4E31-4D0F-B2F9-AC83C855F751"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DB56D9C9-13B3-418C-B06C-0997E165F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"8AFD93D5-70BB-475C-BDD3-DEDE9965C5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2:*:*:*:*:*:*:*","matchCriteriaId":"21F23D2F-A01F-4949-A917-D1164E14EAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"64576C9A-FCD9-4410-B590-AB43F9F85D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"229AC4E3-AFBA-4EF4-8534-8FBE1E630253"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5B91503A-E8DC-4DFF-98D4-687B5AE41438"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"241A4B59-7BBC-4656-93AC-7DD8BE29EB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"00D0DBDC-1559-406D-AADC-12B5ABDD2BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A5294FCC-3933-4CD5-8DFE-BCDC00F4BD18"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C19DFA-9EF4-4892-987D-0153A545B613"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/51082","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0800.1","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10539.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/266817","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6103","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2248","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/51082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0800.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10539.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/266817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2248","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1266","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka \"Local User Privilege Elevation via Disk Image File.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7057","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10818","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1267","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka \"CUPS Printing Web Administration is Remotely Accessible.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10824","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1268","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka \"User Privilege Elevation via Mounting an ISO 9600 CD.\""},{"lang":"es","value":"Mac OS X 10.2.2 permite a usuarios locales ganar privilegios mediante un CD ISO 9600 montado. Tambíén conocida como \"Elevación de privilegios de usuario montando un CD ISO 9600."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7059","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10828","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1269","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem."},{"lang":"es","value":"Vulnerabilidad desconocida en la aplicación NetInfo Manager en Mac OS X 10.2.2 permite a usuarios locales acceder a partes restringidas de un sistema de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1270","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call."},{"lang":"es","value":"Mac OS X 10.2.2 permite a usuarios locales la lectura de ficheros que sólo conceden acceso de escritura mediante la llamda al sistema map_fd() Mach."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10829","source":"cve@mitre.org"},{"url":"http://www.info.apple.com/usen/security/security_updates.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1271","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx."},{"lang":"es","value":"El módulo Perl Mail:Mailer en el paquete perl-MailTools 1.47 y anteriores usa mailx como el programa de correo por defecto, lo que permite a atacantes remotos ejecutar comandos arbitrarios insertándolos en el cuerpo del correo, que es entonces procesado por mailx"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.13:*:*:*:*:*:*:*","matchCriteriaId":"F446784D-59F7-4858-BF72-DE9A2D837D45"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.15:*:*:*:*:*:*:*","matchCriteriaId":"133D4BBA-61B9-44BB-BAEC-7F1441740037"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.40:*:*:*:*:*:*:*","matchCriteriaId":"C63A8E95-BE64-4DDB-A39D-8BD8D1986925"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.42:*:*:*:*:*:*:*","matchCriteriaId":"71782033-9DC6-4924-89C7-9710CA039ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.44:*:*:*:*:*:*:*","matchCriteriaId":"67991634-AFA2-4D89-9AEA-AF344838C6C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.47:*:*:*:*:*:*:*","matchCriteriaId":"FF573852-B0CF-45F7-A537-50F7F561CA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-mailtools:perl-mailtools:1.1401:*:*:*:*:*:*:*","matchCriteriaId":"43E30E82-3C7D-404A-A30B-308E1EF1E9E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103659723101369&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103679569705086&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-386","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10548.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6104","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103659723101369&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103679569705086&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10548.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1272","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges."},{"lang":"es","value":"Los conmutadores Alcatel OmniSwitch 7700/7800 en los que corre AOS 5.1.1 contienen una puerta trasera al servidor de telnet, que fue creada para desarrollo, pero que no se eliminó antes de su distribución.\r\nEsto permite a atacantes remotos la obtención de privilegios de administración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:alcatel:aos:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CFCA5F72-E296-4FE9-9729-1B6C5DD7AE54"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2002-32.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/181721","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6220","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10664","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/181721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1275","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via \"unsanitized input.\""},{"lang":"es","value":"Vulnerabilidad desconocida en html2ps HTML/PostScript converter 1.0, cuando se usa con LPRng, permite a atacantes remotos ejecutar código arbitrario mediante \"unsanitized input\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b1:*:*:*:*:*:*","matchCriteriaId":"A3B5F6EE-0BB8-452F-B54C-33FB05A1F108"},{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b2:*:*:*:*:*:*","matchCriteriaId":"44C0BC6E-5467-48AC-B770-634ACA1AE05A"},{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b3:*:*:*:*:*:*","matchCriteriaId":"447EF769-B549-47BA-8CAC-48CCB35F8A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b4:*:*:*:*:*:*","matchCriteriaId":"3CF43F95-7D88-4B1B-813D-BC6A3B3423C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b5:*:*:*:*:*:*","matchCriteriaId":"240632B2-F747-4860-802B-B3EDB34BB026"},{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b6:*:*:*:*:*:*","matchCriteriaId":"EC509E3D-72DD-4790-9061-3DED29DF7932"},{"vulnerable":true,"criteria":"cpe:2.3:a:html2ps_project:html2ps:1.0:b7:*:*:*:*:*:*","matchCriteriaId":"064BBBEE-40EA-4E62-8821-6D9CB9E8D051"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-192","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10526.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6079","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10526.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1276","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks."},{"lang":"es","value":"Un arreglo incompleto de una vulnerabilidad de scripting en sitios cruzados (XSS) en SquirreMail 1.2.8 llama a la función strip_tags en el valor PHP_SELF pero no vuelve a guardar el resultado en esa variable, dejandolo abierto a ataques XSS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=167471","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/8220","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-191","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10634.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-042.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7019","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=167471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/8220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10634.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1277","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer."},{"lang":"es","value":"Desbordamiento de búfer en Window Maker (wmaker) 0.80.0 y anteriores puede permitir a atacantes remotos ejecutar código arbitrario mediante una cierta fichero de imagen que no es manejado adecuadamente cuando Window Maker usa información de ancho y alto para asignar un búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.20.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6217910D-C42C-45A1-9093-79AC7913E8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.52.2:*:*:*:*:*:*:*","matchCriteriaId":"24D2F210-3F2C-4E59-881B-527C6D97C074"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.53:*:*:*:*:*:*:*","matchCriteriaId":"258F7285-39B4-4324-A764-135C6E5BC05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.61:*:*:*:*:*:*:*","matchCriteriaId":"61B98917-1DCD-4E44-B795-77D6E5EF4591"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.61.1:*:*:*:*:*:*:*","matchCriteriaId":"C68989EA-4697-45D7-9AEC-A14DE785A00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.62:*:*:*:*:*:*:*","matchCriteriaId":"E2AA2B5B-C63F-4076-A759-2B9C04D6151B"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.62.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F849D3-AF59-4318-8205-8B6E7A8129D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.63:*:*:*:*:*:*:*","matchCriteriaId":"36012A18-0215-4357-94A0-A18A77165CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.63.1:*:*:*:*:*:*:*","matchCriteriaId":"D19C4E0B-1E47-44E1-9963-6C8596B0E746"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.64:*:*:*:*:*:*:*","matchCriteriaId":"B674EE20-5629-4693-BC70-E72A32304F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.65:*:*:*:*:*:*:*","matchCriteriaId":"433971EF-9B9D-4C7A-840A-1CF06B8A08F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.80:*:*:*:*:*:*:*","matchCriteriaId":"E462EB39-1D25-468F-A0CF-59BFB51C618C"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-190","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10560.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-009.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-043.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6119","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10560.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1278","sourceIdentifier":"cve@mitre.org","published":"2002-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email."},{"lang":"es","value":"El módulo mailconf en Linuxconf 1.24 en Conectiva Linux 6.0 a 8 genera el fichero de configuración de Sendmail (sendmail.cf) de forma que configura Sendmail para correr como un reenviador abierto, lo que permite a atacantes remotos enviar correo basura (spam)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jacques_gelinas:linuxconf:1.2.4r2:*:*:*:*:*:*:*","matchCriteriaId":"7C45B663-58B9-428F-A35D-876F2FFD4A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:jacques_gelinas:linuxconf:1.2.5r3:*:*:*:*:*:*:*","matchCriteriaId":"3E750486-1488-4C5B-AF8B-6E08FFEA49EB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10554.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6066","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6118","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10554.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1279","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option)."},{"lang":"es","value":"Múltiples desbordamientos de búfer en conf.c de Masqmail 0.1.x anteriores a 0.1.17, y 0.2.x anteriores a 0.2.15, permiten a usuarios locales ganar privilegios mediante ciertas entradas en el fichero de configuración (opción -C)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:masqmail:masqmail:0.1.16:*:*:*:*:*:*:*","matchCriteriaId":"27CA70BC-E6E0-4F71-9A9F-3DBE45101E5F"}]}]}],"references":[{"url":"http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040.html","source":"cve@mitre.org"},{"url":"http://lists.masqmail.cx/pipermail/masqmail/2002-November/000041.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-194","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10605.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6164","source":"cve@mitre.org"},{"url":"http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.masqmail.cx/pipermail/masqmail/2002-November/000041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10605.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1280","sourceIdentifier":"cve@mitre.org","published":"2002-05-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_event_collector:6.5:*:*:*:*:*:*:*","matchCriteriaId":"38FB6E00-DDE4-491E-97BB-F85FE34387F1"}]}]}],"references":[{"url":"http://www.isskk.co.jp/support/XPressUpdates/RS/RS65ECSR15RNj.html","source":"cve@mitre.org"},{"url":"http://www.isskk.co.jp/support/XPressUpdates/RS/RS65ECSR15RNj.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1281","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL."},{"lang":"es","value":"Vulnerabilidad desconocida en el subsistema KIO (rlogin.protocol) de KDE 2.x 2.1 y posteriores, y KDE 3.x 3.0.4 y posteriores, permite a atacantes locales y remotos ejecutar código arbitrario mediante cierta URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8C5E480F-A87E-4583-BC75-8596206C0895"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF4C94E-54BB-44DB-BB7D-841419C4D3A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B292C704-EDFA-4060-90DF-0A3906DB0AC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5DBFB51-48EB-41E5-9712-0A5368EE56A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EEAE9343-7A7F-4CB0-8CEF-52D61BD689C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F531972-E0A7-4E7C-A899-3766CEAAE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C629F0C8-C765-4076-B426-80929F9CE285"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"671D1461-4AB4-4FB6-977D-733888A1BA9B"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103712550205730&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8298","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-204","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10602.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021111-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6182","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103712550205730&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10602.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021111-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1282","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL."},{"lang":"es","value":"Vulnerabilidad desconocida en el subsistema KIO de telnet (telnet.protocol) de KDE 2.X 2.1 y posteriores permite a atacantes remotos ejecutar código arbitrario mediante una cierta URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8C5E480F-A87E-4583-BC75-8596206C0895"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF4C94E-54BB-44DB-BB7D-841419C4D3A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B292C704-EDFA-4060-90DF-0A3906DB0AC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5DBFB51-48EB-41E5-9712-0A5368EE56A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EEAE9343-7A7F-4CB0-8CEF-52D61BD689C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F531972-E0A7-4E7C-A899-3766CEAAE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C629F0C8-C765-4076-B426-80929F9CE285"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"671D1461-4AB4-4FB6-977D-733888A1BA9B"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103712550205730&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8298","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-204","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10603.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021111-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6182","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103712550205730&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10603.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021111-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1283","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attribute."},{"lang":"es","value":"Desbordamiento de búfer en Novell iManager (eMFrame) anteriores a 1.5 permite a atacantes remotos causar una denegación de servicio mediante una petición de autenticación con un atributo de Nombre Distinguido (DN) largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:emframe:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"49E73AC4-B14D-4B71-85C4-A1F202EEE6E1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103703760321408&w=2","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2963651","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6154","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44969","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103703760321408&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/servlet/tidfinder/2963651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1284","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read."},{"lang":"es","value":"El asistente en KGPG a 0.8.2 no provee adecuadamente la frase-contraseña a gpg cuando se crean nuevas claves, lo que causa que claves secretas sean creadas con una frase-contraseña y permite a atacantes locales robar las claves si pueden ser leídas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kgpg:kgpg:0.6:*:*:*:*:*:*:*","matchCriteriaId":"E392C3A6-FE0B-49F5-B78E-A0F8CE62832F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kgpg:kgpg:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EC7F9827-A6FE-480A-BD8E-9C732C44D522"},{"vulnerable":true,"criteria":"cpe:2.3:a:kgpg:kgpg:0.7:*:*:*:*:*:*:*","matchCriteriaId":"148604E0-7F7B-4FD4-B370-0B78E4BFC368"},{"vulnerable":true,"criteria":"cpe:2.3:a:kgpg:kgpg:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B468723A-9906-4D5D-8EC9-6E0792F8D7A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kgpg:kgpg:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"BF4D77C5-B286-487B-975F-EDB582A5CE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kgpg:kgpg:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"CD39EB97-EFEA-48EC-876B-BDEDE633838D"}]}]}],"references":[{"url":"http://devel-home.kde.org/~kgpg/bug.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103702926611286&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10629","source":"cve@mitre.org"},{"url":"http://devel-home.kde.org/~kgpg/bug.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103702926611286&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1285","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments."},{"lang":"es","value":"runlpr en el paquete LPRng permite al usuario lp local ganar privilegios de root mediante ciertos argumentos de línea de comandos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10525.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6077","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10525.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1286","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user."},{"lang":"es","value":"La implementación de Java de Microsoft, como la usada en Internet Explorer, permite a atacantes remotos robar cookies y ejecutar script en un contexto de seguridad diferente mediante una URL que contiene una coma en la porción de dominio, que no es procesada adecuadamente y carga un applet de un sitio web malicioso en el contexto de seguridad del sitio que está siendo visitida por el usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/657625","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10579","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/657625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1287","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10580.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6134","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10580.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1288","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath() method in a File() call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6139","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1289","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10582.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6140","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10582.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1290","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10583.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6132","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10583.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1291","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a \"file://%00\" (null character) URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10584.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6138","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10584.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1292","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/237777","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6133","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10585","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/237777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1293","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10586.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6137","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10586.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1294","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of service (crash due to illegal memory accesses) and possibly conduct other unauthorized activities via an applet that uses those references to access proprietary Microsoft methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10587.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6135","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10587.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1295","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka \"Incomplete Java Object Instantiation Vulnerability.\""},{"lang":"es","value":"La implementación de Java de Microsoft, como la usada en Interntet Explorer, permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente llevar a cabo otras actividades no autorizadas mediante etiquetas de applets en HTML que evitan las restricciones de las clases de Java (como constructores privados) dando el nombre de la clase en parámetro del código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"916DA8F3-677B-46CB-A2B9-9FE2A2EBEBAD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10588.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6136","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103682630823080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=103684360031565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10588.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1296","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via \"..\" sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103842619803173&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10717.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/683673","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6262","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103842619803173&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10717.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/683673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1306","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the \"lisa\" daemon, and (2) remote attackers to execute arbitrary code via a certain \"lan://\" URL."},{"lang":"es","value":"Múltiples desbordamientos de búfer en LISa en KDE 2.x a partir de 2.1, y KDE 3.x anteriores a 3.0.4 permiten \r\na atacantes locales y posiblemente remotos ejecutar código mediante el demonio \"lisa\", y\r\na atacantes remotos ejecutar código arbitrario mediante una cierta URL de tipo \"lan://\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8C5E480F-A87E-4583-BC75-8596206C0895"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF4C94E-54BB-44DB-BB7D-841419C4D3A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B292C704-EDFA-4060-90DF-0A3906DB0AC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5DBFB51-48EB-41E5-9712-0A5368EE56A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EEAE9343-7A7F-4CB0-8CEF-52D61BD689C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F531972-E0A7-4E7C-A899-3766CEAAE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B146FCD3-F6E7-4412-94FD-F9E66089C227"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C629F0C8-C765-4076-B426-80929F9CE285"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103712329102632&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-020.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-214","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10597.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10598.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021111-2.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-080.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_042_kdenetwork.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103712329102632&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103728981029342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-020.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10597.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10598.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20021111-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-080.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_042_kdenetwork.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-220.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1307","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name."},{"lang":"es","value":"Vulnerabilidad de scripting en sitios cruzados (XSS) en MHonArc 2.5.12 y anteriores permite a atacantes remotos insertar script o HTML mediante un mensaje de correo electrónico con el script en un nombre de de cabecera MIME"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mhonarc:mhonarc:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"DCE4C437-0AAD-41AA-8693-BECFD4CA227C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mhonarc:mhonarc:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0DF67263-0614-457E-80E0-38EEE786DD5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mhonarc:mhonarc:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"DA407F58-274A-4792-9F6B-BA8F9F9E65DA"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-199","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256%40mcguire.earlhood.com","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7353","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6204","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10666","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256%40mcguire.earlhood.com","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1308","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression."},{"lang":"es","value":"Desbordamiento de búfer basado en el montículo (heap) en Netscape y Mozilla permite a atacantes remotos ejecutar código arbitrario mediante una URL de tipo jar: que referencia a un fichero .jar malformado, lo que desborda un búfer durante la descompresión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7D7FA24-4B6F-4D67-95BE-46819033CA6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9B316E0-4A05-411A-8279-404C82288BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B91D7920-86E6-4842-897A-553F018AD493"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"36889B90-FD18-4A5A-A732-788240E10FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0:*:*:*:*:*:*:*","matchCriteriaId":"30A0231A-B664-46C2-9602-B60EAD6AEC12"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=157646","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103730181813075&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-162.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-163.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6185","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10636","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=157646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103730181813075&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-163.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1309","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name."},{"lang":"es","value":"Desbordamiento de búfer en el mecanismo de manejo de errores del manejador de IIS ISAPI en Macromedia ColdFusion 6.0 permite a atacantes remotos ejecutar código arbitrario mediante una petición HTTP GET con un nombre de fichero .cfm largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&r=1&b=200211&w=2","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20021112.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&r=1&b=200211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20021112.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1310","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón (heap) en el mecanismo de manejo de errores en el manejador de IIS ISAPI en Macromedia JRun 4.0 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante una peticón HTTP GET con un nombre de fichero .jsp largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"AE446E13-51EB-4262-998F-952121B93ADC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&r=1&b=200211&w=2","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20021112.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6122","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10568","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&r=1&b=200211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20021112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1311","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files."},{"lang":"es","value":"Courier sqwebmail antes de 0.40.0 no deja privilegios rápidamente despues del inicio, lo que podría permitir a usuarios locales leer ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.37.3:*:*:*:*:*:*:*","matchCriteriaId":"A0869BB9-5308-406D-9107-EFAF25BCF96E"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.40:*:*:*:*:*:*:*","matchCriteriaId":"EF57BA8C-A955-4C50-B9CF-863CF056E0A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103794021013436&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-197","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10643.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6189","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103794021013436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10643.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1312","sourceIdentifier":"cve@mitre.org","published":"2002-11-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware before 1.43.3 with remote management enabled allows remote attackers to cause a denial of service (router crash) via a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befn2ps4:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"A3FFAA33-12EC-40E4-9A34-DDB95A77A63C"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"A7F5E5AA-6469-4405-BDE9-AD4D174A1A6F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.43:*:*:*:*:*:*:*","matchCriteriaId":"2EA4C23A-598A-4B11-BD78-39EA55E0E6A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"525E00CA-DEEA-410F-A90C-C73C8D304E36"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.43:*:*:*:*:*:*:*","matchCriteriaId":"6337002A-EA1A-47A9-B4A5-E3EECD859C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr81:2.42.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FC5B40A4-E7CA-4BDD-899E-3693129D347E"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"958AF49D-FB97-476F-B8DF-5A760F72DBC6"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.43:*:*:*:*:*:*:*","matchCriteriaId":"E80E4BFD-DB4D-4574-A0F6-15881A66F308"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"6353EE40-1C83-4A1A-836F-6716D95A5A88"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"56484A79-0B44-439F-A64B-B55660E0C7FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"42622989-F386-4C7F-8F64-7C792075D980"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4F83131C-CE9B-4695-BF3D-A8D2C1AC7F00"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:hpro200:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"C59B3AAD-9A03-4AB3-ABA7-4EA738A9B4F6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0022.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=36&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6208","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6301","source":"cve@mitre.org"},{"url":"http://www1.corest.com/common/showdoc.php?idx=276&idxseccion=10","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10654","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=36&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.corest.com/common/showdoc.php?idx=276&idxseccion=10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1313","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users."},{"lang":"es","value":"nullmailer 1.00RC5 y anteriores permiten a usuarios locales causar una denegación de servicio mediante un correo electrónico a un usuario que no existe, lo que genera un error que hace nullmailer deje de enviar mensajes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullmailer:nullmailer:1.0rc5:*:*:*:*:*:*:*","matchCriteriaId":"48E71BA3-DAAB-4C0C-B30F-A2C2869EF72A"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6193","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10649","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1315","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316)."},{"lang":"es","value":"Vulnerabilidad de scripting en sitios cruzados (XSS) en el Servidor de Administración de iPlanet WebServer 4.x, hasta SP11, permite a usuarios remotos ejecutar scripts web o HTML como el adminstrador de iPlanet mediante la inyección del script deseado en los registros de errores, y posiblemente ganar más privilegios usando la vulnerabilidad XSS junto con otro problema (CAN-2002-1316)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B2091816-7705-462D-BB91-76D07B9A1F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"11794060-A796-4262-BFF5-E17388DD18FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp2:*:*:*:*:*:*:*","matchCriteriaId":"5BA1EF56-6656-44C5-9B59-0EDB84FF44A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp3:*:*:*:*:*:*:*","matchCriteriaId":"83651DFD-50C1-451F-AAB1-F1392790CD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp4:*:*:*:*:*:*:*","matchCriteriaId":"3A6338DC-E60A-4BA9-8CB3-9BA8DB6D9834"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp5:*:*:*:*:*:*:*","matchCriteriaId":"8099D845-6335-4B52-B8FB-210EB1CA7B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp6:*:*:*:*:*:*:*","matchCriteriaId":"243B2B9A-920C-4EE8-A8BD-46810C6C76D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp7:*:*:*:*:*:*:*","matchCriteriaId":"B9ECA407-AA77-4155-A746-10C3F49519FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp8:*:*:*:*:*:*:*","matchCriteriaId":"667ED9E1-60A5-4338-822C-DC12965D2A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp9:*:*:*:*:*:*:*","matchCriteriaId":"CB2D89D1-D6AD-44BA-BEFC-50F7CB38CA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp10:*:*:*:*:*:*:*","matchCriteriaId":"DECE2CAC-D33D-458A-9B44-44063B0BF22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp11:*:*:*:*:*:*:*","matchCriteriaId":"76C88C5B-F7D5-40A5-983D-6C757798EB81"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103772308030269&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10692.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103772308030269&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10692.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1316","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315)."},{"lang":"es","value":"importInfo en el Servidor de Administración de iPlanet WebServer 4.x hasta SP11, permite al adminstrador del web ejecutar comandos arbitrarios mediante metacaractéres de shell en el parámetro dir, y posiblemente permita a atacantes remotos explotar esta vulnerabilidad mediante otro problema de XSS (CAN-2002-13145)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"B2091816-7705-462D-BB91-76D07B9A1F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp1:*:*:*:*:*:*:*","matchCriteriaId":"11794060-A796-4262-BFF5-E17388DD18FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp2:*:*:*:*:*:*:*","matchCriteriaId":"5BA1EF56-6656-44C5-9B59-0EDB84FF44A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp3:*:*:*:*:*:*:*","matchCriteriaId":"83651DFD-50C1-451F-AAB1-F1392790CD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp4:*:*:*:*:*:*:*","matchCriteriaId":"3A6338DC-E60A-4BA9-8CB3-9BA8DB6D9834"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp5:*:*:*:*:*:*:*","matchCriteriaId":"8099D845-6335-4B52-B8FB-210EB1CA7B0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp6:*:*:*:*:*:*:*","matchCriteriaId":"243B2B9A-920C-4EE8-A8BD-46810C6C76D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp7:*:*:*:*:*:*:*","matchCriteriaId":"B9ECA407-AA77-4155-A746-10C3F49519FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp8:*:*:*:*:*:*:*","matchCriteriaId":"667ED9E1-60A5-4338-822C-DC12965D2A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp9:*:*:*:*:*:*:*","matchCriteriaId":"CB2D89D1-D6AD-44BA-BEFC-50F7CB38CA36"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp10:*:*:*:*:*:*:*","matchCriteriaId":"DECE2CAC-D33D-458A-9B44-44063B0BF22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:4.1_sp11:*:*:*:*:*:*:*","matchCriteriaId":"76C88C5B-F7D5-40A5-983D-6C757798EB81"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103772308030269&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10693.php","source":"cve@mitre.org"},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6203","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103772308030269&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10693.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1317","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query."},{"lang":"es","value":"Desbordamiento de búfer en la rutina Dispatch() en el servidor de fuentes XFS (fs.auto) en Solaris 2.5.1 a 9 permite a atacantes remotos causar una denegación de servicio (caída) o ejecutar código arbitrario mediante una cierta petición XFS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AE887A26-0590-40DE-ACE2-28A30E5228AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"23FF2D1C-D328-49BE-87CF-938FB533180B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C104B02C-3F3B-4DB4-8A1D-65A7DAA380EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"BEECB0ED-A5C9-4675-9CEB-AD6C19EDA7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B43D5F86-97B2-4175-8ED7-1F937850F9DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*","matchCriteriaId":"54AF87E4-52A4-44CA-B48E-A5BB139E6410"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*","matchCriteriaId":"3F305CBD-4329-44DE-A85C-DE9FF371425E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I","source":"cve@mitre.org"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103825150527843&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-34.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-024.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10375.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/312313","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/4988","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6241","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2816","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103825150527843&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-024.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10375.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/312313","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/4988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1318","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string."},{"lang":"es","value":"Desbordamiento de búfer en Samba 2.2.2 a 2.2.6 permite a atacantes remotos causar una denegación de servicio y posíblemente ejecutar código arbitrario mediante una contraseña cifrada que causa un desbordamiento durante el descifrado en la cual una cadena de página de códigos DOS es convertida a una cadena unicode UCS2 little-endian."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C71CB60-2689-4A4A-9509-E2F3135E6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0129E404-3AE8-4F0E-89CB-7F2FA5B47011"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A052141C-874D-4ED0-99FB-D7468FACFC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9739EA65-9FA8-425E-B355-E690773D5B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3B618F94-DAC2-4A97-9F7F-8BCEA3199769"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.08:*:*:*:*:*:*:*","matchCriteriaId":"7958ABC5-FEB3-419D-A65F-3FCC6BC4D2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.08.01:*:*:*:*:*:*:*","matchCriteriaId":"068C7ECD-52CB-4D6D-B946-59AE4ED2D9CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:cifs-9000_server:a.01.09:*:*:*:*:*:*:*","matchCriteriaId":"F7D2ACD0-595E-4130-BAED-9F8A0DB46F63"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021204-01-I","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000550","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103801986818076&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103859045302448&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/53580","source":"cve@mitre.org"},{"url":"http://us1.samba.org/samba/whatsnew/samba-2.2.7.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-019.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-023.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-023.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/958321","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-081.php","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_045_samba.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-266.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6210","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10683","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1467","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021204-01-I","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103801986818076&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103859045302448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/53580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://us1.samba.org/samba/whatsnew/samba-2.2.7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-019.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-023.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-023.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/958321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-081.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_045_samba.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-266.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1319","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs."},{"lang":"es","value":"El kernel de Linux 2.4.20 y anteriores, y 2.5.x, cuando se ejecuta en sistemas x86, permite a usuarios locales causar una denegación de servicio (cuelgue) mediante el modo de emulación, que no borra adecuadamente los marcadores (flags) TF y NT EFLAGs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*","matchCriteriaId":"2498D898-D243-4D0C-9AEF-0138D19A68B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9D0DFB12-B43F-4207-A900-464A97F5124D"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"13EBB2F7-712E-4CB1-B4B4-5F0851F3D37E"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103714004623587&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103737292709297&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-262.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-264.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-263.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6115","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10576","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103714004623587&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103737292709297&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2002-262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2002-264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-263.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1320","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (\")."},{"lang":"es","value":"Pine 4.44 y anteriores permite a atacantes remotos causar una denegación de servicio (volcado del núcleo y fallo al reiniciar) mediante un mensaje de correo electrónico con una cabecera From que contiene un número largo de comillas (\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:3.98:*:*:*:*:*:*:*","matchCriteriaId":"49E9FC97-FE8B-46E9-BFB5-AC24524CCB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5BFF7E7-E49E-466A-A0D3-FDF13596BAF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D405F684-38E2-4AC4-8451-F4842E67C509"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.10:*:*:*:*:*:*:*","matchCriteriaId":"358A71B0-79F2-4728-AC1E-5872BC64B2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.20:*:*:*:*:*:*:*","matchCriteriaId":"16766308-A2F2-4155-A4F7-702808CC9450"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.30:*:*:*:*:*:*:*","matchCriteriaId":"9F7C068F-1664-4022-B88D-E486EEDD501C"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.33:*:*:*:*:*:*:*","matchCriteriaId":"A3F37B4B-C812-46AD-A23B-3FE60D31587D"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.44:*:*:*:*:*:*:*","matchCriteriaId":"8E10453B-C2A8-4203-B8D1-C77D00DE4315"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103668430620531&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103884988306241&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10555.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-084.php","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2614.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_046_pine.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-270.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-271.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6120","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103668430620531&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103884988306241&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10555.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-084.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2614.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_046_pine.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1321","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain \"Now Playing\" options on a downloaded file with a long filename."},{"lang":"es","value":"Mültiples desbordamientos de búfer en RealOne y RealPlayer permite a atacantes remotos ejecutar código arbitrario mediante \r\n\r\nun fichero de Lenguaje de Integración Multimedia Sincronizada (SMIL) con un parámetro largo.\r\nun nombre de fichero largo en una petición rtsp://, por ejemplo un fichero. m3u, o\r\nCiertas opciones \"Now Playing\" (Reproduciendo Ahora) en un fichero descargado con un nombre de fichero largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:*:g2:*:*:*:*:*:*","matchCriteriaId":"F443B415-782D-4059-931E-222968D5CC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:6.0:*:win32:*:*:*:*:*","matchCriteriaId":"65124AAD-0F80-4FBB-8A29-420C445E889C"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"2F5492A8-E1B6-4ADF-B057-125ECD8B7FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*","matchCriteriaId":"003D7E29-9970-4984-9756-C070E15B7979"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103808645120764&w=2","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/security/bufferoverrun_player.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6227","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10677","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103808645120764&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/security/bufferoverrun_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6227","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1322","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap."},{"lang":"es","value":"Rational ClearCase 4.1, 2002.05, y posiblemente otras versiones permiten a atacantes remotos causar una denegación de servicio (caída) mediante ciertos paquetes al puerto 371, por ejemplo mediante nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:4.1:*:*:*:*:*:*:*","matchCriteriaId":"94003DDA-E8F3-4E24-AA9A-444BC3B176A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:rational_software:clearcase:2002-05-00:*:*:*:*:*:*:*","matchCriteriaId":"C54CD96C-D8AE-43BF-82D9-ED4C6409E67A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0084.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103808239618238&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6228","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10675","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103808239618238&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1323","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls."},{"lang":"es","value":"Safe.pm 2.0.7 y anteriores, si se usan con Perl 5.8.0 y anteriores, pueden permitir a atacantes escapar de compartimientos seguros en Safe::reval o Safe::rdo usando una variable @_ redefinida, que no es reestablecida entre llamadas sucesivas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safe.pm:safe.pm:2.0_6:*:*:*:*:*:*:*","matchCriteriaId":"F897F93C-1949-4FB8-A3BC-2FE3AAF03E31"},{"vulnerable":true,"criteria":"cpe:2.3:a:safe.pm:safe.pm:2.0_7:*:*:*:*:*:*:*","matchCriteriaId":"01AEF179-357B-41A4-A942-65282742B12D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:linux:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"C6F4C48E-7AE7-4629-9F01-6B57FF3EB64A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5F9BE3AC-B583-4AED-A940-E95F808D1BFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_unix:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D3C9A84A-C2CE-4E50-8CC1-EA0A062AED3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"02641C35-9860-40BA-BBAE-CA81A85C2728"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html","source":"cve@mitre.org"},{"url":"http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104005919814869&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104033126305252&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104040175522502&w=2","source":"cve@mitre.org"},{"url":"http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2002/dsa-208","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10574.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2183","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3814","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-256.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-257.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6111","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104005919814869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104033126305252&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104040175522502&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2002/dsa-208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10574.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/2183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-257.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1325","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka \"User.dir Exposure Vulnerability.\""},{"lang":"es","value":"Microsoft Virtual Machine (VM) build versión 5.0.3805 y anteriores permite a los atacantes remotos determinar el nombre de usuario de un usuario local a través de un applet de Java que accede a la propiedad del sistema user.dir, también conocida como \"User.dir Exposure Vulnerability\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:sr2:*:*:*:*:*:*","matchCriteriaId":"25DA02ED-9093-42E8-A9AD-F7B882430488"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/6380","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1327","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka \"Unchecked Buffer in Windows Shell Could Enable System Compromise.\""},{"lang":"es","value":"Desbordamiento de búfer en el Shell de Windows en Microsoft Windows XP permite a atacantes remotos ejecutar código arbitrario mediante un fichero de audio .MP3 o .WMA con atributo especialmente modificado. También conocida como \"Búfer sin Comprobar en la Shell de Windows Podría Comprometer el Sistema\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=104025849109384&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-37.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/591890","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6427","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10892","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104025849109384&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-37.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/591890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1334","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi."},{"lang":"es","value":"Vulnerabilidad de scripting en sitios cruzados (XSS) en BizDesign Imageolio 3.01 y anteriores permiten a atacantes remotos ejecutar código  web arbitrario como otros usuarios mediante \r\n\r\nel parámetro directo en imageFolio.cgi, o\r\nnph-build.cgi"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.23:*:*:*:*:*:*:*","matchCriteriaId":"D5662DE5-1F10-4B5F-8CF7-CB20C3244CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.24:*:*:*:*:*:*:*","matchCriteriaId":"B95BBD99-5342-460F-B304-9D55528A0FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.26:*:*:*:*:*:*:*","matchCriteriaId":"73AD4E7B-E03B-4A8E-B68E-83F5C1947A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.27:*:*:*:*:*:*:*","matchCriteriaId":"DE34C2E9-1F43-494D-9C12-03690B040E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6B3B3AC7-9CE5-4073-8397-DE0D840F9D79"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103842773205148&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005681","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6265","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10718","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103842773205148&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1335","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies."},{"lang":"es","value":"Vulnerabilidad de scripting en sitios cruzados (XSS) en w3m 0.3.2 permite a atacantes remotos insertar HTML arbitrario y script web en marcos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3m:w3m:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E2E53FD1-C21F-4309-ACA7-76D6916B65B6"}]}]}],"references":[{"url":"http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8015","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8031","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8053","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=124484","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-249","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-250","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-251","source":"cve@mitre.org"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6981","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-044.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6793","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10842","source":"cve@mitre.org"},{"url":"http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=124484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1336","sourceIdentifier":"cve@mitre.org","published":"2002-12-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users."},{"lang":"es","value":"TightVNC anterior a 1.2.6 genera la misma cadena de desafío a múltiples conexiones, lo que permite a atacantes remotos evitar la autenticación VNC espiando el desafio y la respuesta de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B2F4EE57-DA68-4438-A401-BAC82B7242D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9E11A57-016E-4720-A266-A53743629CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"AF990CCF-70BE-46F6-9360-ECC39B6D6F3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0274E35A-ACAB-43F5-A4F3-383CA9EEA1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0FD5B03E-D897-4A06-A3EF-62B13B46B7EF"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102753170201524&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102769183913594&w=2","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-287.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-041.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5296","source":"cve@mitre.org"},{"url":"http://www.tightvnc.com/WhatsNew.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5992","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102753170201524&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=102769183913594&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-287.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tightvnc.com/WhatsNew.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/5992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1338","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files."},{"lang":"es","value":"El método de carga en el componente Gráfica (Chart) de Office Web Components (OWC) 9 y 10 genera un excecpción cuando un fichero especificado no existe, lo que permite a atacantes remotos determinar la existencia de ficheros locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*","matchCriteriaId":"316D6CD7-3B2B-499C-ADBE-088981DFD306"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101830175621193&w=2","source":"cve@mitre.org"},{"url":"http://security.greymagic.com/adv/gm008-ie/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/156123","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4454","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8784","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101830175621193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.greymagic.com/adv/gm008-ie/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/156123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8784","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1339","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"XMLURL\" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files."},{"lang":"es","value":"La propiedad \"XMLURL\" en el componente Hoja de Cálculo (Spreadsheet) de Office Web Components (OWC) 10 sigue redirecciones, lo que permite a atacantes remotos determinar la existencia de ficheros locales basado en excepciones, o leer ficheros XML Hoja de Trabajo (WorkSheet)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*","matchCriteriaId":"316D6CD7-3B2B-499C-ADBE-088981DFD306"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101830175621193&w=2","source":"cve@mitre.org"},{"url":"http://security.greymagic.com/adv/gm008-ie/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101830175621193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.greymagic.com/adv/gm008-ie/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1340","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"ConnectionFile\" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception."},{"lang":"es","value":"La propiedad \"ConnectionFile\" en el componente DataSourceControl en Office Web Components (OWC) 10 permite a atacantes remotos determinar la existencia de ficheros locales detectando excepciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office_web_components:2002:*:*:*:*:*:*:*","matchCriteriaId":"316D6CD7-3B2B-499C-ADBE-088981DFD306"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101830175621193&w=2","source":"cve@mitre.org"},{"url":"http://security.greymagic.com/adv/gm008-ie/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=101830175621193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.greymagic.com/adv/gm008-ie/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1341","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en read_body.php de SquirrelMail 1.2.10, 1.2.9, y anteriores, permite a atacantes remotos la inserción de rutinas y código HTML mediante:\r\n\r\nmailbox\r\nparámetros passed_id"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"}]}]}],"references":[{"url":"http://f0kp.iplus.ru/bz/008.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103893844126484&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103911130503272&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104004924002662&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8220","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-220","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-042.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6302","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10754","source":"cve@mitre.org"},{"url":"http://f0kp.iplus.ru/bz/008.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103893844126484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103911130503272&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104004924002662&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1342","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands."},{"lang":"es","value":"Una vulnerabilidad desconocida en smb2www 980804-16 y anteriores permite a atacantes remotos la ejecución de comandos arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smb2www:smb2www:1998-04-27:*:*:*:*:*:*:*","matchCriteriaId":"C3B59119-3B24-44D0-823E-8BFC19B776B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:smb2www:smb2www:1998-07-27:*:*:*:*:*:*:*","matchCriteriaId":"343C35C1-623B-4EC6-B8CF-77F7CE558EBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:smb2www:smb2www:1998-08-02:*:*:*:*:*:*:*","matchCriteriaId":"071BDA2E-7C58-4F7E-AADF-CF7951575A83"},{"vulnerable":true,"criteria":"cpe:2.3:a:smb2www:smb2www:1998-08-04:*:*:*:*:*:*:*","matchCriteriaId":"BB78CAC4-1A1F-4757-A717-CECB5926E97A"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-203","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10768.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6313","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10768.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1344","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en wget anteriores a 1.8.2-4 permite a servidores FTP remotos la creación o sobreescritura de ficheros como usuario wget mediante nombres de ficheros que contengan:\r\n\r\ndireccionamiento absoluto\r\nsecuencias .. (punto punto)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"50DD71F2-0B3C-4082-950A-CBFA5C601AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*","matchCriteriaId":"26B3B1B6-3985-4479-93B2-14E1AB52F768"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*","matchCriteriaId":"0BC975AA-0F98-4A3A-B3B4-2152156327D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7DEDFB88-C435-4FB9-838D-8199690A8F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*","matchCriteriaId":"D5BF2616-A99A-4229-A8A6-655155ED5EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"3A14454E-DDAE-4115-8323-8BB4E17DF208"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"94E758F9-798B-4C25-A94A-8BF4E3E90B3E"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_xtr:*:*:*:*:*:*:*:*","matchCriteriaId":"127B4B3A-0046-4461-AFEC-FC90A1025E0E"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103962838628940&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104033016703851&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-022.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10820.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/210148","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-086.php","source":"cve@mitre.org"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.007.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-229.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-256.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/307045/30/26300/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6360","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2002/dsa-209","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103962838628940&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104033016703851&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/n-022.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10820.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/210148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-086.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-229.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-256.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/307045/30/26300/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2002/dsa-209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1345","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4465B8F4-7724-4689-850D-E6D80139CED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF0F37A-78B1-412E-95CD-E71C86FE8191"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B76BBA94-E991-442E-9112-00B75E24D9F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"46864AF6-9CC9-448D-9B37-71735C0D255D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F4172CB-B527-4573-8F4C-0F5297377399"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1DAE9558-3CA6-4F3C-A45C-458168322E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3340DBE8-BFA5-4A2E-8854-FFDBB5190AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01299616-C41D-4FEC-9616-890239760774"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"334A8F5F-9E09-4B72-9CC7-A5CA9DA4D63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"378852D8-2916-46FF-97B4-1C0D54D1BE53"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103962838628940&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10821.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/210409","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6360","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103962838628940&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10821.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/210409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1347","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string."},{"lang":"es","value":"Desbordamiento de búfer en la librería Cyrus SASL 2.1.9 y anteriores permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante\r\n\r\nentradas largas durante la canonización de nombre de usuario\r\ncaractéres que necesitan ser escapados durante autenticación LDAP usando saslauth, o\r\nun error por uno en el escritor del log, que no asigna espacio para el carácter nulo que termina la cadena."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyrusimap:cyrus_sasl:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.9","matchCriteriaId":"5A309C1F-0137-4CCF-B438-1CE6719A547A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.3.8","matchCriteriaId":"9290FC8C-8362-4595-A859-044D5FE848D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndExcluding":"10.3.8","matchCriteriaId":"AB201A37-9EA9-46B4-A799-4DCC5326E88D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=103946297703402&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.debian.org/security/2002/dsa-215","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-283.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/advisories/4826","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6347","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6348","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6349","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10810","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10811","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10812","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=103946297703402&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.debian.org/security/2002/dsa-215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-283.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/advisories/4826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1349","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3)."},{"lang":"es","value":"Desbordamiento de búfer en pop3trap.exe en PC-cillin 2000, 2002, y 2003 permite a usuarios locales la ejecución arbitraria de código mediante una cadena de caracteres larga de entrada en el puerto TCP 110 (POP3)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_5.02:*:*:*:*:*:*:*","matchCriteriaId":"D6CE3BB4-54BA-48DE-9CFC-C2241D99DA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:pc-cillin:2000:*:*:*:*:*:*:*","matchCriteriaId":"9994E64C-0E8C-4A9C-A321-6A73A16E33AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:pc-cillin:2002:*:*:*:*:*:*:*","matchCriteriaId":"A65282E0-2332-4CAA-9BA9-3794C2CDE960"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:pc-cillin:2003:*:*:*:*:*:*:*","matchCriteriaId":"E56D571B-649D-41E2-A502-6C1EBAB73F62"}]}]}],"references":[{"url":"http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=12982","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103953822705917&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/157961","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6350","source":"cve@mitre.org"},{"url":"http://www.texonet.com/advisories/TEXONET-20021210.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10814","source":"cve@mitre.org"},{"url":"http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=12982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103953822705917&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/157961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.texonet.com/advisories/TEXONET-20021210.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1350","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.2.2.2","matchCriteriaId":"059AB27B-2366-4594-98B0-5B1A10AEB823"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032975103398&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-032.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-033.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-214.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6213","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tcpdump.org/lists/workers/2001/10/msg00101.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10695","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032975103398&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-214.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.tcpdump.org/lists/workers/2001/10/msg00101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1351","sourceIdentifier":"cve@mitre.org","published":"2002-12-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:melange:melange_chat_system:1.10:*:*:*:*:*:*:*","matchCriteriaId":"EE2DC2DF-937C-45F3-AAB2-6FF0EF8BA752"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005831","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6477","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10939","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1353","sourceIdentifier":"cve@mitre.org","published":"2002-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intranet-server:localweb2000:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A2029ACD-646C-4563-A9A8-4CDCD5BBDFAB"}]}]}],"references":[{"url":"http://secunia.com/advisories/7740/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005830","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10948","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7740/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1354","sourceIdentifier":"cve@mitre.org","published":"2002-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.95","matchCriteriaId":"A954C493-3672-446A-B087-4EED7813986E"},{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.97.1:*:*:*:*:*:*:*","matchCriteriaId":"EBBC010D-05B0-4495-9513-BC2D1E9FB31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:0.99.8:*:*:*:*:*:*:*","matchCriteriaId":"B2476AE9-8A03-4883-BE50-85EB6A5EE1F8"}]}]}],"references":[{"url":"http://secunia.com/advisories/7737/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005832","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7737/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1355","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.7","matchCriteriaId":"5039A122-CE16-461C-A157-5FB98FC5A64B"}]}]}],"references":[{"url":"http://www.ethereal.com/appnotes/enpa-sa-00007.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-290.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1356","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.7","matchCriteriaId":"5039A122-CE16-461C-A157-5FB98FC5A64B"}]}]}],"references":[{"url":"http://www.ethereal.com/appnotes/enpa-sa-00007.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-290.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1357","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fissh:ssh_client:1.0a_for_windows:*:*:*:*:*:*:*","matchCriteriaId":"0F994C47-04BA-4286-B206-7EC8844E39A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:intersoft:securenetterm:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"06F753D5-DAAD-491E-8158-1C3CE9C30274"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcomposite:shellguard_ssh:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B4343CA3-F040-4FBE-A688-048BBB3993F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:secureshell:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5259078F-BA9C-4EAB-A331-DCA621D187D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*","matchCriteriaId":"1283B462-042C-4857-A700-4179AAE20E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*","matchCriteriaId":"2791C9DD-F55D-4683-85AF-B6814C34EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.53:*:*:*:*:*:*:*","matchCriteriaId":"58BA8E70-9491-4D4F-9182-2F48347BF6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:winscp:winscp:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833B5B6D-9A6B-4F25-81B0-F27D82940F8D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005812","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005813","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/389665","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6405","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10868","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5849","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/389665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1358","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fissh:ssh_client:1.0a_for_windows:*:*:*:*:*:*:*","matchCriteriaId":"0F994C47-04BA-4286-B206-7EC8844E39A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:intersoft:securenetterm:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"06F753D5-DAAD-491E-8158-1C3CE9C30274"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcomposite:shellguard_ssh:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B4343CA3-F040-4FBE-A688-048BBB3993F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:secureshell:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5259078F-BA9C-4EAB-A331-DCA621D187D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*","matchCriteriaId":"1283B462-042C-4857-A700-4179AAE20E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*","matchCriteriaId":"2791C9DD-F55D-4683-85AF-B6814C34EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.53:*:*:*:*:*:*:*","matchCriteriaId":"58BA8E70-9491-4D4F-9182-2F48347BF6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:winscp:winscp:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833B5B6D-9A6B-4F25-81B0-F27D82940F8D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005812","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005813","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1359","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fissh:ssh_client:1.0a_for_windows:*:*:*:*:*:*:*","matchCriteriaId":"0F994C47-04BA-4286-B206-7EC8844E39A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:intersoft:securenetterm:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"06F753D5-DAAD-491E-8158-1C3CE9C30274"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcomposite:shellguard_ssh:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B4343CA3-F040-4FBE-A688-048BBB3993F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:secureshell:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5259078F-BA9C-4EAB-A331-DCA621D187D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*","matchCriteriaId":"1283B462-042C-4857-A700-4179AAE20E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*","matchCriteriaId":"2791C9DD-F55D-4683-85AF-B6814C34EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.53:*:*:*:*:*:*:*","matchCriteriaId":"58BA8E70-9491-4D4F-9182-2F48347BF6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:winscp:winscp:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833B5B6D-9A6B-4F25-81B0-F27D82940F8D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005812","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005813","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6407","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10870","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5848","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1360","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fissh:ssh_client:1.0a_for_windows:*:*:*:*:*:*:*","matchCriteriaId":"0F994C47-04BA-4286-B206-7EC8844E39A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:intersoft:securenetterm:5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"06F753D5-DAAD-491E-8158-1C3CE9C30274"},{"vulnerable":true,"criteria":"cpe:2.3:a:netcomposite:shellguard_ssh:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"B4343CA3-F040-4FBE-A688-048BBB3993F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pragma_systems:secureshell:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5259078F-BA9C-4EAB-A331-DCA621D187D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*","matchCriteriaId":"1283B462-042C-4857-A700-4179AAE20E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*","matchCriteriaId":"2791C9DD-F55D-4683-85AF-B6814C34EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.53:*:*:*:*:*:*:*","matchCriteriaId":"58BA8E70-9491-4D4F-9182-2F48347BF6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:winscp:winscp:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"833B5B6D-9A6B-4F25-81B0-F27D82940F8D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005812","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005813","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5797","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1361","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:cobalt_raq_4:*:*:*:*:*:*:*:*","matchCriteriaId":"E7B5449B-CE31-44FB-B3CD-F3ED15F2F139"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103912513522807&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-35.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-025.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/810921","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6326","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10776","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103912513522807&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cert.org/advisories/CA-2002-35.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ciac.org/ciac/bulletins/n-025.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/810921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1362","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"31168BE9-7BF8-4178-8CD1-68FBBE95CDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"58A54390-2A44-455D-9160-A8E9144CF481"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B8C14ACF-FB79-4133-8D94-96F045BEB721"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:0.4.9.2b:*:*:*:*:*:*:*","matchCriteriaId":"3E99F3B6-1CB9-4C6E-B3D3-D04C7254083F"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:0.4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"4DD4277A-703B-4B85-89A4-18B15C82B3E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_smith:micq:0.4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"C379646B-0FB7-4190-9E4C-507397B24BA5"}]}]}],"references":[{"url":"http://www.debian.org/security/2002/dsa-211","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-118.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6392","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10872","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1363","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0651E86E-5D11-4FC5-AF7E-431826FAD754"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1A61AA4D-E9AE-4C09-9DAB-0E8034FE77A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4F6BE1F2-76BF-4182-B5A8-C189221CDF40"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6284AC45-DDA1-4084-B23A-6D36618140A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9A2D4098-4051-48B9-8A71-98BF24F0A284"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"C22EE5D6-3163-4217-8A65-08D4904C51AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"FD7F0CDA-F270-40C5-AE72-D3F0856883B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"2A8DED92-89D4-42C1-8898-B2A0B1EF4CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"26C6F860-C157-4FBA-ABD9-7C4451B241D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"126C1AF2-E47C-490A-8357-6CD47C533744"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A4396A76-DA2C-4CA0-B475-8E897672059D"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0E4E6626-F83C-4B63-8F50-24D5979BF833"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"598A54FD-EEF8-4CCD-A77A-D13DEE767710"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7A243D85-1BF9-4F26-9BFE-54AA2C92C577"}]}]}],"references":[{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-213","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_004_libpng.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-006.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-007.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-119.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-157.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-249.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6431","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10925","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3657","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_004_libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6431","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1364","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ehud_gavron:tracesroute:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7867E272-FB0D-4E27-90BD-79429B20EFFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ehud_gavron:tracesroute:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"CB5F869F-B180-4CFB-819A-89F51900365F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103858895600963&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-254","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6166","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10778","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103858895600963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1365","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the \"@\" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses."},{"lang":"es","value":"Desbordamiento de búfer basado en el montículo (heap) en Fetchmail 6.1.3 y anteriores no tiene en cuenta el carácter \"@\" cuando determina la longitud del búfer para direcciones locales, lo que permite a atacantes remotos ejecutar código arbitrario mediante una cabecera con un número largo de direcciones locales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:*:*:*:*:*:*:*:*","versionEndIncluding":"6.1.3","matchCriteriaId":"07031C7D-31F1-491C-ACA2-5B5289DE36E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF519D04-7596-42C6-A1D8-FC1018D1A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9AFEC739-BDFA-4D14-9A04-96FFB71AE330"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E1923712-7B88-483E-B38A-0EA6FB38EB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C9608A96-D131-401B-B041-09ADEEB59354"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F4555DBB-B63B-4637-86A9-399B34B27D14"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D8AB8504-8CD1-4013-9413-1378F3BAE0AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*","matchCriteriaId":"3DC47DA9-D110-4E6B-9F5B-D17ECB942B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*","matchCriteriaId":"345D0848-958F-4B44-8F31-0793C36A5ADD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7E179061-FB6A-44AA-8EAC-4916719D9A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"58A6B5F4-C799-45C4-9EAD-A55023767033"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"54FDB8B9-5537-4E08-8FA0-931D4BED43E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"E7EB9B1D-C6B0-494B-8A8C-752E5659EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"CC13DE1B-1428-4842-9567-BBE5EEF7042F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"215ED879-1E26-4FF4-8857-18499C5DE3A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.6:*:*:*:*:*:*:*","matchCriteriaId":"72604F3D-2DE8-4BFF-97D5-4AFA64399201"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.7:*:*:*:*:*:*:*","matchCriteriaId":"8792F7FF-9E56-4201-89FD-F0146D4F0DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B12812E8-1C5B-46CF-A266-EE19C5CD3B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4DEAA0E8-746D-446D-AAEA-0ED287766332"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.0:*:*:*:*:*:*:*","matchCriteriaId":"7D3E14C3-82AE-4D4A-8963-438BECBA5678"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DCFB7BB-2879-4EB7-BE1D-163238E313C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.2:*:*:*:*:*:*:*","matchCriteriaId":"6ED223B6-1864-415C-96D6-64E1EDE4C840"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.3:*:*:*:*:*:*:*","matchCriteriaId":"14CBC8ED-CC10-40B6-8AA7-9F1342432ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.4:*:*:*:*:*:*:*","matchCriteriaId":"D3417C2E-1117-4FE7-B2FA-74CAB57235B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.5:*:*:*:*:*:*:*","matchCriteriaId":"07C61DC4-50D5-44B2-92F8-A59C65144108"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.6:*:*:*:*:*:*:*","matchCriteriaId":"31A37E19-1E07-4FD0-AC6D-6AC3ED954787"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:4.7.7:*:*:*:*:*:*:*","matchCriteriaId":"570C9443-81CE-42AC-B4A6-3B2ABAD97EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"853DD3E0-668F-4FAC-BA0B-D4E9C416D646"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF70FCA-5DA4-4C0B-B876-0345FA077D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BF0C4F7C-0003-4C77-AE22-A9C2FCBFAF3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"78D12F53-07DE-447D-8403-40EB75B91955"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19ECB844-F378-4A94-B9FC-A731B8186013"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3169AA63-79F6-4B89-9405-8F6A2FB6FD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"88D1D54C-81A4-44CE-BE12-798CF7DD2CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D6615C7D-09B5-4943-A124-2FF9A0F4B927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"EF18219F-0406-4D46-90DE-EA2A17C8EFF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"87B56DFD-BDA9-4D8B-BE54-BF59B762D574"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"33EA0CA8-468F-4A94-8DA3-5D820AB65973"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"BA21C847-57ED-4E7D-9366-6038467D9080"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0450BD04-15D2-4122-A210-6225B89BDA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"18428805-AEB2-4BA4-9762-906B59CE74D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"AFCCBB15-DFFE-4A57-A029-E57707D15E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"0427B5C8-265C-47C3-9BAB-B2A0EAA1DEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"89A4B962-BE5B-471C-83EF-674525C5AE83"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7166ECCB-54FB-44EA-BA80-4D2AAF494AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6B309C89-99E2-4F0B-976C-95E44A45ADC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"A3DE7EE7-F627-4955-8D95-1F00F1F85C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.3.8:*:*:*:*:*:*:*","matchCriteriaId":"D549098D-FE16-4BCB-91C4-D71A8C8D2E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.0:*:*:*:*:*:*:*","matchCriteriaId":"57BFA165-6E2E-49AF-9E2D-3D8923CF36C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F5C67DFF-A1BE-4486-A11F-CD3729927220"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.4:*:*:*:*:*:*:*","matchCriteriaId":"1D365E6E-8777-4084-BEC8-7CBF4997D976"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"20C4FF28-0DBA-4995-8252-2D62FF896BC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.0:*:*:*:*:*:*:*","matchCriteriaId":"F80C6B9B-AFCE-46A1-8DEF-51C1B526EB18"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BF667DB5-F41E-4E73-A01F-4EC3F60BAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D2B144FA-A901-4CDF-AC3D-7F5E820B7A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.5:*:*:*:*:*:*:*","matchCriteriaId":"96774635-9A12-4DAB-BCF6-2D678F244CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EFD2EE7A-36CB-4A26-8EEB-DACA2864D921"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C3898EBC-75A9-4DDD-A0AF-2CDEC72DAE4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.0:*:*:*:*:*:*:*","matchCriteriaId":"4267DCE8-985C-416D-A6B7-536585E5A573"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"50E63EDF-FF0A-447C-A3FC-7BA2414C15CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.7.4:*:*:*:*:*:*:*","matchCriteriaId":"61DDD4A1-6185-41B6-A715-4C70F0AA2631"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8:*:*:*:*:*:*:*","matchCriteriaId":"B10A7E3C-07CD-48A6-9075-5314B4E1EEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"319955A4-27A8-46FF-ACE7-97E6DF27B2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"925CF3DD-682B-40E6-900C-23F784CD9239"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"16366780-611E-4217-A614-EBA01421D148"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"43AEA36F-E730-4305-9CB6-738A7152F02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2B9536BA-6334-4957-9632-6D64365B88AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.6:*:*:*:*:*:*:*","matchCriteriaId":"F52FA32B-8048-4FD7-9D20-20DC5E52098B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.11:*:*:*:*:*:*:*","matchCriteriaId":"9FA92DF1-3AAD-46AC-A9E4-E9386C977818"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.13:*:*:*:*:*:*:*","matchCriteriaId":"837D66DB-F9CB-41F1-A091-BCFBAC2F45B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.14:*:*:*:*:*:*:*","matchCriteriaId":"74D12B67-6E66-419A-A28F-6306402931EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.8.17:*:*:*:*:*:*:*","matchCriteriaId":"A71FCBED-B25D-48E3-916C-FBA9E0DE8D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1A17995E-DCAF-465A-8ABD-F1EA0D538784"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.4:*:*:*:*:*:*:*","matchCriteriaId":"93D03D78-C56E-4189-97FC-916C918EDFEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.5:*:*:*:*:*:*:*","matchCriteriaId":"19A66C77-041F-4A12-8A36-233A6B50641C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.8:*:*:*:*:*:*:*","matchCriteriaId":"C945059C-EF39-486D-A804-FBB8704AB927"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1258CA65-FBC1-4848-A9E5-A8F5E5D6FBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.11:*:*:*:*:*:*:*","matchCriteriaId":"A91C6418-41F0-46EB-ACFC-FCE907F5AA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:5.9.13:*:*:*:*:*:*:*","matchCriteriaId":"0C020534-7596-496C-B9B0-739F58F6F4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0A77D40C-6FF5-42BD-9EFB-B532824D7606"},{"vulnerable":true,"criteria":"cpe:2.3:a:fetchmail:fetchmail:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"F04C6A76-2718-4DBA-8972-A3EECDDB1A17"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103979751818638&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104004858802000&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/052002.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-216","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-293.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-294.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-155.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6390","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10839","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103979751818638&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104004858802000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/052002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-293.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-294.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1366","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68BD578F-CCAD-4515-9205-EB4F297C6DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"734D0C2C-F71F-461A-87EE-202C6B706753"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"35E65857-12C7-49DE-AD27-3CACD456231C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"47CEF035-57A6-470B-916A-E5562C28E866"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D414984E-4F6B-4278-8346-968587E4B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"33C36DCB-2FDD-44E6-85E8-875575AAE69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10907","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1367","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a \"need authorization\" page, as demonstrated by new-coke."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68BD578F-CCAD-4515-9205-EB4F297C6DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*","matchCriteriaId":"F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"734D0C2C-F71F-461A-87EE-202C6B706753"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*","matchCriteriaId":"3F0F402D-5CD0-4477-8B59-C753CECB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*","matchCriteriaId":"959F7AFA-ED20-434C-993F-06C2A8574662"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*","matchCriteriaId":"D4F5A0A4-2884-46CA-A846-8B954EB80CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"35E65857-12C7-49DE-AD27-3CACD456231C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"47CEF035-57A6-470B-916A-E5562C28E866"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D414984E-4F6B-4278-8346-968587E4B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"33C36DCB-2FDD-44E6-85E8-875575AAE69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6436","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10908","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1368","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68BD578F-CCAD-4515-9205-EB4F297C6DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*","matchCriteriaId":"F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"734D0C2C-F71F-461A-87EE-202C6B706753"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*","matchCriteriaId":"3F0F402D-5CD0-4477-8B59-C753CECB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*","matchCriteriaId":"959F7AFA-ED20-434C-993F-06C2A8574662"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*","matchCriteriaId":"D4F5A0A4-2884-46CA-A846-8B954EB80CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"35E65857-12C7-49DE-AD27-3CACD456231C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"47CEF035-57A6-470B-916A-E5562C28E866"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D414984E-4F6B-4278-8346-968587E4B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"33C36DCB-2FDD-44E6-85E8-875575AAE69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7756/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7803","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7913/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8080/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/9325/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6437","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10909","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7756/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7913/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8080/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/9325/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1369","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack."},{"lang":"es","value":"jobs.c en Common Unix Printing System (CUPS) 1.1.14 a  1.1.17 no utiliza adecuadamente la llamada a la función strncat cuando procesa la opción string, lo que permite a atacantes remotos la ejecución arbitraria de código mediante un ataque de desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68BD578F-CCAD-4515-9205-EB4F297C6DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*","matchCriteriaId":"F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"734D0C2C-F71F-461A-87EE-202C6B706753"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*","matchCriteriaId":"3F0F402D-5CD0-4477-8B59-C753CECB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*","matchCriteriaId":"959F7AFA-ED20-434C-993F-06C2A8574662"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*","matchCriteriaId":"D4F5A0A4-2884-46CA-A846-8B954EB80CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"35E65857-12C7-49DE-AD27-3CACD456231C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"47CEF035-57A6-470B-916A-E5562C28E866"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D414984E-4F6B-4278-8346-968587E4B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"33C36DCB-2FDD-44E6-85E8-875575AAE69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6438","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10910","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1371","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif."},{"lang":"es","value":"filters/image-gif.c en Common Unix Printing System (CUPS) 1.1.14 a 1.1.17 no comprueba adecuadamente imágenes GIF de tamaño cero, lo que permite a atacantes remotos ejecutar código arbitrario mediante cabeceras de trozos modificadas, como ha sido demostrado por nogif"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68BD578F-CCAD-4515-9205-EB4F297C6DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*","matchCriteriaId":"F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"734D0C2C-F71F-461A-87EE-202C6B706753"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*","matchCriteriaId":"3F0F402D-5CD0-4477-8B59-C753CECB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*","matchCriteriaId":"959F7AFA-ED20-434C-993F-06C2A8574662"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*","matchCriteriaId":"D4F5A0A4-2884-46CA-A846-8B954EB80CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"35E65857-12C7-49DE-AD27-3CACD456231C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"47CEF035-57A6-470B-916A-E5562C28E866"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D414984E-4F6B-4278-8346-968587E4B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"33C36DCB-2FDD-44E6-85E8-875575AAE69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6439","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10911","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2003/dsa-232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1372","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta."},{"lang":"es","value":"Common Unix Printing System (CUPS) 1.1.14 a 1.1.17 no comprueba adecuadamente los valores de retorno de varias operaciones de ficheros y sockets, lo que podría permitir a un atacante remoto causar una denegación de servicio (consumición de recursos) haciendo que descriptores de ficheros sean asignados y no liberados, como ha sido demostrado por fanta."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-252"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-252"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionStartIncluding":"1.1.14","versionEndIncluding":"1.1.17","matchCriteriaId":"BB349B56-37FA-4ECB-8260-AFBF6B324B34"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*","matchCriteriaId":"58B90124-0543-4226-BFF4-13CCCBCCB243"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2003/dsa-232","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6440","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10912","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.debian.org/security/2003/dsa-232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1373","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call."},{"lang":"es","value":"Vulnerabilidad de enteros con signo en el paquete COM_TABLE_DUMP de MySQL 3.23.x anteriores a 3.23.54 permite a atacantes remotos causar una denegación de servicio (caída o cuelge) en mysqld proveyendo a una llamada a memcpy() con enteros negativos grandes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*","matchCriteriaId":"F79AFBCE-FFF7-4348-BE17-42A7978E17E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*","matchCriteriaId":"6A3C056E-EEB9-4B95-A155-F71B80B9695D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-212","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_003_mysql.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-289.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-166.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/5269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6368","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10846","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_003_mysql.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/5269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1374","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password."},{"lang":"es","value":"El comando COM_CHANGE_USER en MySQL 3.x anterirores de 3.23.54 y 4.x anteriores a 4.0.5 permite a atacantes remotos ganar privilegios mediante un ataque de fuerza bruta usando una contraseña de un carácter, lo que hace que MySQL compare la contraseña suministrada sólo con el primer carácter de la contraseña real."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*","matchCriteriaId":"F79AFBCE-FFF7-4348-BE17-42A7978E17E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*","matchCriteriaId":"6A3C056E-EEB9-4B95-A155-F71B80B9695D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9654E8E-FECD-4C92-9E91-43ADF02C93D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5:*:*:*:*:*:*:*","matchCriteriaId":"3A65F884-02AB-4169-B695-DC040991D06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1:*:*:*:*:*:*:*","matchCriteriaId":"7DC7D206-BF39-4A79-9D05-4DDD1C6242C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2:*:*:*:*:*:*:*","matchCriteriaId":"5AB9922F-4BA9-48D4-B95F-4DF0C87CEB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3:*:*:*:*:*:*:*","matchCriteriaId":"13C425B3-8CE5-41C7-9BA2-9A596D78EAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"01AA2F84-C1B7-44A6-9FD3-E9CA7BF0CF59"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"F9E1A1EF-E6C8-4AF4-95AC-048BE89C3E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3:*:*:*:*:*:*:*","matchCriteriaId":"FAD74A87-CAE9-495E-8159-6AAF8D457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1E8B2231-9796-4974-B40B-5C461D686CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp1:*:*:*:*:*:*:*","matchCriteriaId":"C0CB7D5A-73E9-4899-A885-5A6745614ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp2:*:*:*:*:*:*:*","matchCriteriaId":"7F7A6601-ED3C-4518-BD4F-8D5BFB5F73C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp3:*:*:*:*:*:*:*","matchCriteriaId":"A304AA0E-09F4-4612-ADF8-116078A7CEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"A4051ECB-4173-4EB5-B7BD-4AF9C0361837"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"9197EF82-C76E-41C2-81B6-AE57FC5EC51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp3:*:*:*:*:*:*:*","matchCriteriaId":"821DB1D4-635F-456D-A6E1-F4F2978F097E"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104005886114500&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-212","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_003_mysql.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-289.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-166.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/5269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6373","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10847","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104005886114500&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_003_mysql.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/5269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1375","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response."},{"lang":"es","value":"El comando COM_CHANGE_USER en MySQL 3.x anteriores a 2.23.54 y 4.x anterior a 4.0.6 permite a atacantes remotos ejecutar código arbitrario mediante una respuesta larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*","matchCriteriaId":"F79AFBCE-FFF7-4348-BE17-42A7978E17E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*","matchCriteriaId":"6A3C056E-EEB9-4B95-A155-F71B80B9695D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9654E8E-FECD-4C92-9E91-43ADF02C93D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5:*:*:*:*:*:*:*","matchCriteriaId":"3A65F884-02AB-4169-B695-DC040991D06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1:*:*:*:*:*:*:*","matchCriteriaId":"7DC7D206-BF39-4A79-9D05-4DDD1C6242C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2:*:*:*:*:*:*:*","matchCriteriaId":"5AB9922F-4BA9-48D4-B95F-4DF0C87CEB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3:*:*:*:*:*:*:*","matchCriteriaId":"13C425B3-8CE5-41C7-9BA2-9A596D78EAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"01AA2F84-C1B7-44A6-9FD3-E9CA7BF0CF59"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"F9E1A1EF-E6C8-4AF4-95AC-048BE89C3E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3:*:*:*:*:*:*:*","matchCriteriaId":"FAD74A87-CAE9-495E-8159-6AAF8D457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1E8B2231-9796-4974-B40B-5C461D686CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp1:*:*:*:*:*:*:*","matchCriteriaId":"C0CB7D5A-73E9-4899-A885-5A6745614ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp2:*:*:*:*:*:*:*","matchCriteriaId":"7F7A6601-ED3C-4518-BD4F-8D5BFB5F73C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp3:*:*:*:*:*:*:*","matchCriteriaId":"A304AA0E-09F4-4612-ADF8-116078A7CEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"A4051ECB-4173-4EB5-B7BD-4AF9C0361837"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"9197EF82-C76E-41C2-81B6-AE57FC5EC51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp3:*:*:*:*:*:*:*","matchCriteriaId":"821DB1D4-635F-456D-A6E1-F4F2978F097E"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104005886114500&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-212","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_003_mysql.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-289.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-166.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/5269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6375","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10848","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104005886114500&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_003_mysql.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-289.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/5269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1376","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"La librería de cliente libmysqlclient en MySQL 3.x a 3.23.54 y 4.x a 4.06, no verifica adecuadamente longitudes de campos de ciertas respuestas en las rutinas read_rows o read_one_row, lo que permite a a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*","matchCriteriaId":"F79AFBCE-FFF7-4348-BE17-42A7978E17E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*","matchCriteriaId":"6A3C056E-EEB9-4B95-A155-F71B80B9695D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9654E8E-FECD-4C92-9E91-43ADF02C93D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5:*:*:*:*:*:*:*","matchCriteriaId":"3A65F884-02AB-4169-B695-DC040991D06C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp1:*:*:*:*:*:*:*","matchCriteriaId":"7DC7D206-BF39-4A79-9D05-4DDD1C6242C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp2:*:*:*:*:*:*:*","matchCriteriaId":"5AB9922F-4BA9-48D4-B95F-4DF0C87CEB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_fp3:*:*:*:*:*:*:*","matchCriteriaId":"13C425B3-8CE5-41C7-9BA2-9A596D78EAC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"01AA2F84-C1B7-44A6-9FD3-E9CA7BF0CF59"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"F9E1A1EF-E6C8-4AF4-95AC-048BE89C3E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_advanced_reporter:4.5_mp3:*:*:*:*:*:*:*","matchCriteriaId":"FAD74A87-CAE9-495E-8159-6AAF8D457824"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1E8B2231-9796-4974-B40B-5C461D686CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp1:*:*:*:*:*:*:*","matchCriteriaId":"C0CB7D5A-73E9-4899-A885-5A6745614ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp2:*:*:*:*:*:*:*","matchCriteriaId":"7F7A6601-ED3C-4518-BD4F-8D5BFB5F73C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_fp3:*:*:*:*:*:*:*","matchCriteriaId":"A304AA0E-09F4-4612-ADF8-116078A7CEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"A4051ECB-4173-4EB5-B7BD-4AF9C0361837"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"9197EF82-C76E-41C2-81B6-AE57FC5EC51E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:netbackup_global_data_manager:4.5_mp3:*:*:*:*:*:*:*","matchCriteriaId":"821DB1D4-635F-456D-A6E1-F4F2978F097E"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104005886114500&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104033188706000&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-212","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:087","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6370","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6374","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10849","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10850","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103971644013961&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104004857201968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104005886114500&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104033188706000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/042002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1377","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt."},{"lang":"es","value":"vim 6.0 y 6.1 y posiblemente otras versiones, permite a atacantes ejecutar comandos arbitrarios usando la característica libcall en lineas de modo, que no son apantalladas si no que pueden ser ejecutadas cuando vim es usado como editor para otros productos como mutt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0B6461B4-AD69-4E54-901D-CB354FE9061C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.1:*:*:*:*:*:*:*","matchCriteriaId":"D51F522E-E7A6-4861-BE54-C76B5D6062AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B5306C4-D4FA-48FE-B72A-8ED231DF283A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.3:*:*:*:*:*:*:*","matchCriteriaId":"D8C559F4-82E7-4BFA-B1C2-AAD1EA790DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.4:*:*:*:*:*:*:*","matchCriteriaId":"FD83B9EE-82FF-4DA5-8577-97CE226EFEAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.5:*:*:*:*:*:*:*","matchCriteriaId":"823E99C7-7020-48B2-8F71-6FA5A1097EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.6:*:*:*:*:*:*:*","matchCriteriaId":"0A5B6675-BF67-434D-8D64-7BA6029A6BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.7:*:*:*:*:*:*:*","matchCriteriaId":"826F3339-8674-4A84-8EAC-17C884BBF723"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:5.8:*:*:*:*:*:*:*","matchCriteriaId":"2A7C7C4D-9E38-40A1-B003-939F46CD96CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D3A7789A-E0B0-45EA-B05A-A5A1BF31A24D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vim_development_group:vim:6.1:*:*:*:*:*:*:*","matchCriteriaId":"D6FF1779-4A0A-4E9E-94E1-5F7C4EF0555B"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000812","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108077992208690&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55700","source":"cve@mitre.org"},{"url":"http://www.guninski.com/vim1.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:012","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-297.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-302.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6384","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10835","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108077992208690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/vim1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-297.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-302.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1380","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface."},{"lang":"es","value":"El kernel de Linux 2.2x permite a usuarios locales causar una denegación de servicio (caída) usando la función nmap() con un parámetro PROT_READ para acceder páginas de memoria no legibles mediante el interfaz /proc/pid/mem."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*","matchCriteriaId":"2498D898-D243-4D0C-9AEF-0138D19A68B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*","matchCriteriaId":"3924060B-1EC1-4003-B306-E327634E7797"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*","matchCriteriaId":"D45B43DF-FD4C-4C37-9569-1CCE450B8987"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-336","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2976.html","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:039","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-088.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6420","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0083-kernel.asc.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10884","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-2976.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/misc/2002/TSL-2002-0083-kernel.asc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1381","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pid_file_path value."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en daemon.c de Exim 4.x a 4.10, y 3.x a 3.36, permite a los usurios administradores de de exim ejecutar código arbitrario modificando el valor pid_file_path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:3.35:*:*:*:*:*:*:*","matchCriteriaId":"0EBF5A2F-942A-4EA2-857F-713D841056CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:3.36:*:*:*:*:*:*:*","matchCriteriaId":"1A86F01E-513B-4570-8A4D-BC9CE5E1B490"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:4.10:*:*:*:*:*:*:*","matchCriteriaId":"C26C80A2-98AD-4DED-B3BD-4989B06EBEEE"}]}]}],"references":[{"url":"http://groups.yahoo.com/group/exim-users/message/42358","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103903403527788&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104006219018664&w=2","source":"cve@mitre.org"},{"url":"http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6314","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10761","source":"cve@mitre.org"},{"url":"http://groups.yahoo.com/group/exim-users/message/42358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103903403527788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104006219018664&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1382","sourceIdentifier":"cve@mitre.org","published":"2002-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Flash Player before 6.0.65.0 allows remote attackers to execute arbitrary code via certain malformed data headers in Shockwave Flash file format (SWF) files, a different issue than CAN-2002-0846."},{"lang":"es","value":"Macromedia Flash Player anteriores a 6.0.65.0 permite a atacantes remotos ejecutar código arbitrario mediante ciertas cabeceras de datos malformadas en ficheros en formato Shockwave Flash (.SWF), un problema distinto a CAN-2002-0846."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*","matchCriteriaId":"BAB0102B-7F42-40EA-AD40-B67C6942F860"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EF005FC1-50A0-4233-A500-1E677EACDBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*","matchCriteriaId":"6BB0BE19-EB29-4DEB-883C-89CB2023E54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*","matchCriteriaId":"4B2A9976-1883-4D49-A512-C66FF12FDDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*","matchCriteriaId":"C20DFF23-6215-4860-B091-ECC1C1C08DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"8E1B943A-38AD-4472-B143-B66567EBC9E0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=104014220727109&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vulnwatch&m=104013370116670","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10861","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104014220727109&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vulnwatch&m=104013370116670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1383","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun."},{"lang":"es","value":"Múltiples desbordamientos de enteros en Common Unix Printing System (CUPS) 1.1.14 a 1.1.17 permiten a atacantes remotos ejecutar código arbitrario mediante\r\nel interfaz HTTP CUPSd, como ha sido demostrado por vanilla-coke, y\r\nel código de manejo de imágenes en filtros CUPS, como ha sido demostrado por mksum"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"68BD578F-CCAD-4515-9205-EB4F297C6DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:*","matchCriteriaId":"F3182CA2-7375-43BC-A0E5-DE11D4B65EE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FCF4C8D0-3030-4DD5-800B-76A582A4CD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"734D0C2C-F71F-461A-87EE-202C6B706753"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:*","matchCriteriaId":"3F0F402D-5CD0-4477-8B59-C753CECB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:*","matchCriteriaId":"959F7AFA-ED20-434C-993F-06C2A8574662"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:*","matchCriteriaId":"D4F5A0A4-2884-46CA-A846-8B954EB80CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1741CC9D-C4A8-48F9-86CF-EC20AE2A6BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"35E65857-12C7-49DE-AD27-3CACD456231C"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"47CEF035-57A6-470B-916A-E5562C28E866"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D414984E-4F6B-4278-8346-968587E4B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.14:*:*:*:*:*:*:*","matchCriteriaId":"33C36DCB-2FDD-44E6-85E8-875575AAE69E"},{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:1.1.17:*:*:*:*:*:*:*","matchCriteriaId":"A5428EE6-F90A-4BB6-9D8C-8B99E80AB6DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7756/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7794","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7803","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7843","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7907","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7913/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/8080/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/9325/","source":"cve@mitre.org"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032149026670&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7756/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7913/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/8080/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/9325/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/advisory/12.19.02.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2003_002_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1385","sourceIdentifier":"cve@mitre.org","published":"2002-12-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for  openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be executed."},{"lang":"es","value":"openwebmail_init en Open WebMail 1.81 y anteriores permiten a usuarios locales ejecutar código arbitrario mediante secuencias .. (punto punto) en un nombre de inicio de sesión, como el nombre suministrado en el parámetro sessionid de openwebmail-abook.pl, que es usado para encontrar un fichero de configuración que especifica código adicional para ser ejecutado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*","matchCriteriaId":"9B94ECAA-1148-4A84-93B4-56B56A0938AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*","matchCriteriaId":"DA86C04C-D31E-4B0B-A8E0-13A5FED7644E"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*","matchCriteriaId":"62736A5C-7E68-4E47-9954-D62C913E3AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*","matchCriteriaId":"02D1462D-CC70-41CC-BAF4-48CD0ECAFD4A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=104031696120743&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104032263328026&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?thread_id=782605&forum_id=108435","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6425","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10904","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104031696120743&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104032263328026&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?thread_id=782605&forum_id=108435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1444","sourceIdentifier":"cve@mitre.org","published":"2002-08-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.60:*:*:*:*:*:*:*","matchCriteriaId":"F5F7D4F8-C073-4115-806D-89973A4C2C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/287498","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9883.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5477","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sztolnia.pl/hack/googIE/googIE.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/287498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9883.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sztolnia.pl/hack/googIE/googIE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1445","sourceIdentifier":"cve@mitre.org","published":"2002-08-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:cern_httpd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D2681211-5D4C-4D59-9FA5-81D6F946572B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9834.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5447","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9834.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1446","sourceIdentifier":"cve@mitre.org","published":"2002-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:pkcs_11_library:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"80A9A67E-5873-40C3-AF86-A90A4FB2006D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0172.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9895.php","source":"cve@mitre.org"},{"url":"http://www.ncipher.com/support/advisories/advisory5_c_verify.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5498","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9895.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ncipher.com/support/advisories/advisory5_c_verify.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1447","sourceIdentifier":"cve@mitre.org","published":"2002-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vpn_client:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.1","matchCriteriaId":"5F96EAD5-07E2-4963-9CB9-BC512B2DD51D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277653","source":"cve@mitre.org"},{"url":"http://sec.angrypacket.com/advisories/0002_AP.vpnclient.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-unix-vpnclient-buffer-overflow-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9376.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5056","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sec.angrypacket.com/advisories/0002_AP.vpnclient.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-unix-vpnclient-buffer-overflow-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9376.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1448","sourceIdentifier":"cve@mitre.org","published":"2002-07-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_m770-atm:*:*:*:*:*:*:*:*","matchCriteriaId":"867DFF15-9834-4B92-AF29-76DCF819EE99"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p130:*:*:*:*:*:*:*:*","matchCriteriaId":"08B86C42-0B01-44CE-A189-DE1BFA066600"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:cajun_p330:*:*:*:*:*:*:*:*","matchCriteriaId":"A11A0F29-B4D7-45FC-8A9B-99CDADA594A5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0519.html","source":"cve@mitre.org"},{"url":"http://support.avaya.com/security/Unauthorized_SNMP/index.jhtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9769.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5396","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0519.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/security/Unauthorized_SNMP/index.jhtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9769.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1449","sourceIdentifier":"cve@mitre.org","published":"2002-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frederic_tyndiuk:eupload:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8B00FF6B-6AFC-4115-AB11-18A8E9686038"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0412.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.iss.net/security_center/static/9733.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5369","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0412.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.iss.net/security_center/static/9733.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1450","sourceIdentifier":"cve@mitre.org","published":"2002-07-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM UniVerse with UV/ODBC allows attackers to cause a denial of service (client crash or server CPU consumption) via a query with an invalid link between tables, possibly via a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:u2_universe:*:*:*:*:*:*:*:*","matchCriteriaId":"21FDBEEC-C8EC-4B90-AD33-52E256881C6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0442.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9736.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0442.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9736.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1451","sourceIdentifier":"cve@mitre.org","published":"2002-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) \"+\" or (2) \"\\\" (backslash) character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:desiderata_software:blazix:1.2:*:*:*:*:*:*:*","matchCriteriaId":"DD25E2E4-F6DE-4E07-9F16-2FCE914725E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:desiderata_software:blazix:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8EC5AB45-43C6-462B-82E8-6041B6175575"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0259.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9952.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5566","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5567","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0259.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9952.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1452","sourceIdentifier":"cve@mitre.org","published":"2002-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DBC53A0-8994-470A-ACD0-A06DE4BBE8BF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=102935720109934&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9859.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5469","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=102935720109934&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9859.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1453","sourceIdentifier":"cve@mitre.org","published":"2002-08-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DBC53A0-8994-470A-ACD0-A06DE4BBE8BF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=102935720109934&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9861.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5470","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=102935720109934&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9861.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1571","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"}]}]}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6","source":"cve@mitre.org"},{"url":"http://search.luky.org/linux-kernel.2002/msg24003.html","source":"cve@mitre.org"},{"url":"http://search.luky.org/linux-kernel.2002/msg24992.html","source":"cve@mitre.org"},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html","source":"cve@mitre.org"},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.4/diffs/arch/i386/kernel/i387.c%401.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://search.luky.org/linux-kernel.2002/msg24003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://search.luky.org/linux-kernel.2002/msg24992.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0628.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cs.helsinki.fi/linux/linux-kernel/2002-15/0760.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1572","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"}]}]}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%403d6badc0mxsPaOTT_GuPVxCp1_ormw","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-205.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-206.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%403d6badc0mxsPaOTT_GuPVxCp1_ormw","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1573","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to \"wrap handling.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"}]}]}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%403d6aadcbBIDX67Zl6zZnVKRcsilCVQ","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-205.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-206.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%403d6aadcbBIDX67Zl6zZnVKRcsilCVQ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-205.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1584","sourceIdentifier":"cve@mitre.org","published":"2002-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030402-01-P","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/7899/","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-46944-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/518057","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6484","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1005934","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10935","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030402-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/7899/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-46944-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/518057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1005934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1585","sourceIdentifier":"cve@mitre.org","published":"2002-11-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48601-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6147","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10600","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48601-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1586","sourceIdentifier":"cve@mitre.org","published":"2002-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005742","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48267-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6309","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10769","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48267-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1587","sourceIdentifier":"cve@mitre.org","published":"2002-12-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-46867-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6318","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11146","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-46867-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1588","sourceIdentifier":"cve@mitre.org","published":"2002-11-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openwindows:3.6:*:*:*:*:*:*:*","matchCriteriaId":"FC229F17-D305-4569-82E2-4187675B7D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openwindows:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A8658CFA-1F07-48D3-9793-DA83071BCE3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:openwindows:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E5181066-CBA7-433C-A02A-0F148FFC1695"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48216-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6279","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10732","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48216-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1589","sourceIdentifier":"cve@mitre.org","published":"2002-10-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of service (system panic)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48067-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10496","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48067-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1590","sourceIdentifier":"cve@mitre.org","published":"2002-10-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48320-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/n-010.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10495","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-48320-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/n-010.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1591","sourceIdentifier":"cve@mitre.org","published":"2002-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"}]}]}],"references":[{"url":"http://www.informationweek.com/story/IWK20010927S0021","source":"cve@mitre.org"},{"url":"http://www.instantmessagingplanet.com/security/article.php/10818_1014151","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/744139","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.informationweek.com/story/IWK20010927S0021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.instantmessagingplanet.com/security/article.php/10818_1014151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/744139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2002-1592","sourceIdentifier":"cve@mitre.org","published":"2002-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"Upgrade to newest Apache version.","cveTags":[],"descriptions":[{"lang":"en","value":"The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.36:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"}]}]}],"references":[{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9623.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/165803","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5256","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9623.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/165803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1593","sourceIdentifier":"cve@mitre.org","published":"2002-09-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The vendor has addressed this issue in version v2.0.42.","cveTags":[],"descriptions":[{"lang":"en","value":"mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.42:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005285","source":"cve@mitre.org"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/406121","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5816","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10208","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/dist/httpd/CHANGES_2.0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/406121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1594","sourceIdentifier":"cve@mitre.org","published":"2002-01-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grpck:grpck:*:*:*:*:*:*:*:*","matchCriteriaId":"1F7DE159-CC3C-430D-AB31-CE3A4900F670"},{"vulnerable":true,"criteria":"cpe:2.3:a:pwck:pwck:*:*:*:*:*:*:*:*","matchCriteriaId":"05BFD4CD-47FE-4BB4-8AE2-1A5F48666478"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=100999352406822&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vulnwatch&m=100998205010794&w=2","source":"cve@mitre.org"},{"url":"http://publib.boulder.ibm.com/infocenter/pseries/topic/com.ibm.aix.doc/cmds/aixcmds2/grpck.htm","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/121891","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/877811","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7857","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7859","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=100999352406822&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vulnwatch&m=100998205010794&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://publib.boulder.ibm.com/infocenter/pseries/topic/com.ibm.aix.doc/cmds/aixcmds2/grpck.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/121891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/877811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1595","sourceIdentifier":"cve@mitre.org","published":"2002-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6576F05C-271D-401F-99BF-54D004B8D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"718815AE-B1F2-4275-946A-A6FE5D5106C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"8702F2BF-7B5B-4692-BEA5-EE86142892B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"AE896351-297D-432B-97A5-F5732EC8B419"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/833459","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3832","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7828","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/833459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1596","sourceIdentifier":"cve@mitre.org","published":"2002-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6576F05C-271D-401F-99BF-54D004B8D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"718815AE-B1F2-4275-946A-A6FE5D5106C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"8702F2BF-7B5B-4692-BEA5-EE86142892B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"AE896351-297D-432B-97A5-F5732EC8B419"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/968187","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3834","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7829","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/968187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1597","sourceIdentifier":"cve@mitre.org","published":"2002-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6576F05C-271D-401F-99BF-54D004B8D9B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"718815AE-B1F2-4275-946A-A6FE5D5106C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"8702F2BF-7B5B-4692-BEA5-EE86142892B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:sn_5420_storage_router_firmware:1.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"AE896351-297D-432B-97A5-F5732EC8B419"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/855195","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3833","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7830","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/SN-multiple-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/855195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1598","sourceIdentifier":"cve@mitre.org","published":"2002-04-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:mlink:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4C377D95-DFB4-4E16-BD78-29CD9C6F4F1A"}]}]}],"references":[{"url":"ftp://ftp.ca.com/pub/unicenter/mlink/mlink.13/MLINK13.README","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/544995","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/772915","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/266052","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4440","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4441","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8776","source":"cve@mitre.org"},{"url":"ftp://ftp.ca.com/pub/unicenter/mlink/mlink.13/MLINK13.README","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/544995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/772915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/266052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1599","sourceIdentifier":"cve@mitre.org","published":"2002-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"48EDDC95-97B7-4BA1-B7C7-90683ED8887F"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A1483936-6A0A-4BF5-B829-C7C0ABA0D6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"7A08F4E8-16A8-4BDE-98D8-598DCF4AC9C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E816E235-D11D-4E66-89E1-63A4B83F0968"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2ECD19BF-40D4-4D90-8D6F-45923AC1A7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9555BDF6-C210-4B7A-914A-A7846F595952"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"785C3FB6-3A2F-49F9-9454-1469819508A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"ECB1BA46-2363-4BBC-8F05-4ECC35CA854C"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2_2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"9FCBEA66-C92C-4A24-8B2B-34221246ED6C"}]}]}],"references":[{"url":"http://dansguardian.org/?page=history","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dansguardian.org/?page=knownbugs","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/940203","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5291","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9681","source":"cve@mitre.org"},{"url":"http://dansguardian.org/?page=history","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://dansguardian.org/?page=knownbugs","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/940203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1600","sourceIdentifier":"cve@mitre.org","published":"2002-01-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_classifieds:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B5B1670F-AAE4-4267-88EC-045E99D36EB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_classifieds:1.1:*:*:*:*:*:*:*","matchCriteriaId":"78EE1F15-2EFD-4556-94BC-6BEEF5392BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_classifieds:1.2:*:*:*:*:*:*:*","matchCriteriaId":"27E4396B-7604-4AA8-AF55-EA6DE315D9FA"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003255","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7967.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/181907","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3855","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7967.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/181907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1601","sourceIdentifier":"cve@mitre.org","published":"2002-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:photodeluxe:3.0:*:*:*:*:*:*:*","matchCriteriaId":"33C945E8-3376-41AC-B76F-07C9317432E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:photodeluxe:3.1:*:*:*:*:*:*:*","matchCriteriaId":"2D16ED2A-9115-454E-BC1E-F651275DCD54"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:photodeluxe:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FFD1AF1C-7308-442E-AD39-EE66C982452E"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/116875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-56LQ2J","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4106","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8210","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/116875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-56LQ2J","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8210","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1602","sourceIdentifier":"cve@mitre.org","published":"2002-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:screen:3.9.4:*:*:*:*:*:*:*","matchCriteriaId":"9B90A768-2B20-49E6-949B-F9E3EBEA3CDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:screen:3.9.8:*:*:*:*:*:*:*","matchCriteriaId":"3DAABD8C-EC21-4471-8BF3-13A752BB09DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:screen:3.9.9:*:*:*:*:*:*:*","matchCriteriaId":"883C30DF-F5A5-4452-A343-B101E1E30691"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:screen:3.9.10:*:*:*:*:*:*:*","matchCriteriaId":"44F58668-CFB1-46CA-B133-CA8345FE5E7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:screen:3.9.11:*:*:*:*:*:*:*","matchCriteriaId":"43417611-8539-4625-83A0-4D770A969FF6"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/524227","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/268998","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8929","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/524227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/268998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1603","sourceIdentifier":"cve@mitre.org","published":"2002-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \\, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.0:*:*:*:*:*:*:*","matchCriteriaId":"49A1B406-C1F8-468B-B1A9-F016EBCC4AFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"08178800-0020-4052-AFA8-BC21B10AF491"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"21EFC04A-DC4A-4491-BAFC-996F8C127438"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"40304420-26E0-4F6D-B368-7BBC068CCCCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6B147EAF-E6A0-4D0C-8C27-BA27F844A816"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B729D721-2FD3-4522-8CB3-526B7454D124"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"56B99EBA-8968-4948-9650-36CC2B95AD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"2929801F-548E-490A-9A98-F5DE17A1BD52"},{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"BD03EDC6-0841-41E6-BD54-17578239DB48"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/goahead-adv3.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp","source":"cve@mitre.org"},{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7741","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/124059","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/975041","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7MWKZ3","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13295","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/security_info/vuln_pr0213.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9239","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10885","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/goahead-adv3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://data.goahead.com/Software/Webserver/2.1.8/release.htm#bug-with-urls-like-asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rockwellautomation.custhelp.com/cgi-bin/rockwellautomation.cfg/php/enduser/std_adp.php?p_faqid=57729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/124059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/975041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/RGII-7MWKZ3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/PDFs/ProCheckUp_Vulns_2002.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/security_info/vuln_pr0213.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1604","sourceIdentifier":"cve@mitre.org","published":"2002-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/158499","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/416427","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/437899","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/448987","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/531355","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/567963","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/584243","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/592515","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/846307","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5647","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_nlspath.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/158499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/416427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/437899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/448987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/531355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/567963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/584243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/592515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/846307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1605","sourceIdentifier":"cve@mitre.org","published":"2002-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_xkb.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/569987","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/584243","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/693803","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_xkb.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/569987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/584243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/693803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1606","sourceIdentifier":"cve@mitre.org","published":"2002-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/293305","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/557481","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/651377","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/955065","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/965097","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/293305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/557481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/651377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/955065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/965097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1607","sourceIdentifier":"cve@mitre.org","published":"2002-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/706817","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/706817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1608","sourceIdentifier":"cve@mitre.org","published":"2002-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/629289","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/629289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1609","sourceIdentifier":"cve@mitre.org","published":"2002-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/602009","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/602009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1610","sourceIdentifier":"cve@mitre.org","published":"2002-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00430.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/612833","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5599","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10014","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00430.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/612833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1611","sourceIdentifier":"cve@mitre.org","published":"2002-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/115731","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/115731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1612","sourceIdentifier":"cve@mitre.org","published":"2002-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/408771","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/408771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1613","sourceIdentifier":"cve@mitre.org","published":"2002-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/173977","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/173977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1614","sourceIdentifier":"cve@mitre.org","published":"2002-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435611","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/435611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1615","sourceIdentifier":"cve@mitre.org","published":"2002-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/506441","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"cve@mitre.org"},{"url":"http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/506441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1616","sourceIdentifier":"cve@mitre.org","published":"2002-08-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1af:*:*:*:*:*:*:*","matchCriteriaId":"1839F0EE-84D7-4055-A044-5AB5E350225E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"cve@mitre.org"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/137555","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/177067","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/193347","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/671627","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/864083","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5379","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5380","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5381","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5382","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10614","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11620","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/137555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/177067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/193347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/671627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/864083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10614","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1617","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*","matchCriteriaId":"5F6E90A8-BF8E-46AD-A0E6-4266EE0AE70C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"cve@mitre.org"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/202939","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/600699","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/836275","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/931579","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/202939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/600699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/836275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/931579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/290115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1618","sourceIdentifier":"cve@mitre.org","published":"2002-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:jfs:3.1:*:*:*:*:*:*:*","matchCriteriaId":"72FE0C21-1B72-4E0E-8B00-89A9AD0330F4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/248337","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/4569","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5979","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10399","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5700","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/248337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/4569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1619","sourceIdentifier":"cve@mitre.org","published":"2002-03-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY27310&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/152955","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10127","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY27310&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/152955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1620","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:aix_parallel_systems_support_programs:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C5BE817-FB3E-46D9-ACC6-75E0DA3DF3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:aix_parallel_systems_support_programs:3.2:*:*:*:*:*:*:*","matchCriteriaId":"E097E23C-3C1C-4FF4-A235-4298199AADF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:aix_parallel_systems_support_programs:3.4:*:*:*:*:*:*:*","matchCriteriaId":"53935366-504D-456A-8368-3998B495BCE7"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY20699&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28063&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28065&apar=only","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/640827","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10671","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY20699&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28063&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28065&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/640827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1621","sourceIdentifier":"cve@mitre.org","published":"2002-04-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY26503&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28698&apar=only","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/209363","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-59FJVF","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY26503&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28698&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/209363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-59FJVF","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2002-1622","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a \"variable data type.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28706&apar=only","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/273779","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10112","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY28706&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/273779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1623","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B0F8A14A-F252-4454-A4FB-BB924FE66085"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1_firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"32896C31-7AEA-42B3-94E1-05A3E8E61317"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001223.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103124812629621&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103176164729351&w=2","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/ike.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/886601","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nta-monitor.com/news/checkpoint.htm","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5TP040U8AW.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/290202","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5607","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10034","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001223.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103124812629621&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103176164729351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.checkpoint.com/techsupport/alerts/ike.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/886601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nta-monitor.com/news/checkpoint.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5TP040U8AW.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/290202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1624","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3264F8E8-C40A-4C5C-BF2C-BD4690FE7EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AF9513C4-3F02-4C32-AD91-C4A5941A5A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E570AFE6-CEAF-4F6F-81D3-CFFAAA8D5109"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CF6B527E-B1FE-41A3-A274-7BE2E893E6AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.4:*:solaris:*:*:*:*:*","matchCriteriaId":"1D2DC637-4AEA-412D-A2B2-723C4ED21C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.4a:*:*:*:*:*:*:*","matchCriteriaId":"197E7E1C-D545-46FB-890F-B92AB9DA2B94"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"986B8670-2341-474D-8477-47627DF1ED02"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"908E6F9A-FCE7-48C2-A307-057536944313"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"400521B9-F617-44A5-AF59-3D8DAE78067A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.7:*:solaris:*:*:*:*:*","matchCriteriaId":"10D90491-68DD-44FA-9B5A-81CF19896F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"78DCE051-78E2-4F35-9598-98C19110ECE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A80A1E8B-43C8-449F-9B16-01F30D23E3D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"F49E352F-35C5-4C9A-9B3D-C8C6FC128B35"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.9a:*:*:*:*:*:*:*","matchCriteriaId":"CC2A846C-20EC-41A6-BF4C-8FB84C45CEE4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1004052","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/772563","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6646","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11058","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1004052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/772563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1625","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/128491","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22796&Method=Full&Title=Macromedia%20Flash%20Player%206%20Streaming%20Issue&Cache=False","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4567","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8925","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/128491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=22796&Method=Full&Title=Macromedia%20Flash%20Player%206%20Streaming%20Issue&Cache=False","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1626","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_calendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0C0A1028-6943-4DE8-B3A6-C4A908BD3E49"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_calendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C8EB316-4B9F-45BA-AC2F-462FB317144C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_calendar:1.2:*:*:*:*:*:*:*","matchCriteriaId":"60C142E5-89BA-47D8-86FF-C06FE44FA033"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_calendar:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C04803D8-F487-4715-B414-4A97841B1F89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:my_calendar:1.4:*:*:*:*:*:*:*","matchCriteriaId":"FD3207A0-A277-4A09-B06D-50CB113DAA61"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003256","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/806091","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3856","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7966","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/806091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1627","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:quiz_me:0.5:*:*:*:*:*:*:*","matchCriteriaId":"3B25CB2D-70BA-4BDA-824C-B8F31F357FF6"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003254","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/318835","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3857","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7970","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/318835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1628","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:mikes_vote_cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"18F2CBA4-5BE2-42EB-BDCB-B732CB1507EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:mikes_vote_cgi:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D5A821F3-3E65-4913-8BBA-FED42FF8B654"},{"vulnerable":true,"criteria":"cpe:2.3:a:mike_spice:mikes_vote_cgi:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3BB9056D-44CB-42B8-A929-99610C556372"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/250107","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3854","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7971","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/250107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1629","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:multi-tech:proxyserver:mtpsr1:100:*:*:*:*:*:*","matchCriteriaId":"4ECF4F06-588E-4A8A-A874-642C26944C31"},{"vulnerable":true,"criteria":"cpe:2.3:h:multi-tech:proxyserver:mtpsr1:120:*:*:*:*:*:*","matchCriteriaId":"50BB7072-CA74-4BE5-AE66-519E57D065C3"},{"vulnerable":true,"criteria":"cpe:2.3:h:multi-tech:proxyserver:mtpsr1:202st:*:*:*:*:*:*","matchCriteriaId":"73CBB771-2B85-4107-9F73-D3FA9A04594A"},{"vulnerable":true,"criteria":"cpe:2.3:h:multi-tech:proxyserver:mtpsr2:201:*:*:*:*:*:*","matchCriteriaId":"3CC47401-2AD5-4B94-9987-4200090A06A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:multi-tech:proxyserver:mtpsr3:200:*:*:*:*:*:*","matchCriteriaId":"F111E4EC-E8C0-4731-AAE0-5A60886F8672"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/495705","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7203","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10845","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/495705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1630","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/717827","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-576QLZ","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6556","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8664","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/717827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-576QLZ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1631","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/717827","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-576QLZ","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6556","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/717827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-576QLZ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1632","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/717827","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-576QLZ","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6556","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8665","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/717827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/SVIM-576QLZ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1633","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:qnx_rtos:4.25:*:*:*:*:*:*:*","matchCriteriaId":"D3557BEF-EBD7-4EBA-BC17-05B28FC5E2FE"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/879386","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/276553","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5000","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9341","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/879386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/276553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1634","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.0:*:*:*:*:*:*:*","matchCriteriaId":"471D1E06-05B5-4844-A384-19271CAD743C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"}]}]}],"references":[{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/159203","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.osvdb.org/17461","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17462","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17463","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17464","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17465","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17466","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17467","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/17468","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/security_info/vuln_pr0201.html","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/security_info/vuln_pr0203.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4157","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/advisories/4158","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/4874","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9212","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/159203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.osvdb.org/17461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/17468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/security_info/vuln_pr0201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/security_info/vuln_pr0203.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/4157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/advisories/4158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/4874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1635","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/936507","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10716","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/936507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1636","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"}]}]}],"references":[{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10687","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1637","sourceIdentifier":"cve@mitre.org","published":"2002-02-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/712723","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/968","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/969","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/970","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/971","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/972","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/712723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/papers/hpoas.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1638","sourceIdentifier":"cve@mitre.org","published":"2002-05-27T04:00:00.000","lastModified":"2023-11-07T01:56:03.917","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-2153.  Reason: This candidate is a duplicate of CVE-2002-2153.  Notes: All CVE users should reference CVE-2002-2153 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-1639","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to \"version\" or \"host\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*","versionStartIncluding":"11.5.6.0.0","versionEndIncluding":"11.5.6.16.53","matchCriteriaId":"995089F1-F238-4122-BAB4-06CD8ED4EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*","versionStartIncluding":"11.5.7.0.0","versionEndIncluding":"11.5.7.17.31","matchCriteriaId":"DDE2F798-C8C9-4013-A658-6FCE74B12434"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:configurator:11i:*:*:*:*:*:*:*","matchCriteriaId":"1E3B24CB-5198-4172-AF66-8B210BB14FDA"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003967","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/158323","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4433","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8782","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://securitytracker.com/id?1003967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/158323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1640","sourceIdentifier":"cve@mitre.org","published":"2002-04-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*","versionStartIncluding":"11.5.6.0.0","versionEndIncluding":"11.5.6.16.52","matchCriteriaId":"7DB49A7C-58C0-43DE-86A6-28FB54E49D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*","versionStartIncluding":"11.5.7.0.0","versionEndIncluding":"11.5.7.17.31","matchCriteriaId":"DDE2F798-C8C9-4013-A658-6FCE74B12434"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:configurator:11i:*:*:*:*:*:*:*","matchCriteriaId":"1E3B24CB-5198-4172-AF66-8B210BB14FDA"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003967","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4430","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4436","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8780","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8781","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://securitytracker.com/id?1003967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1641","sourceIdentifier":"cve@mitre.org","published":"2002-05-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2C272DE0-3717-40D0-99A6-2B4108BF85A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4959B7CD-218F-47A3-A604-629B69E1905B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6659ECF3-D355-4357-BB15-DAFA427FCD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7B34A419-42C2-44FC-84C7-65699BA07120"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/291555","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/vna/ora-webcache.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4856","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/291555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/vna/ora-webcache.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1642","sourceIdentifier":"cve@mitre.org","published":"2002-10-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.2:*:*:*:*:*:*:*","matchCriteriaId":"95E0614E-0911-43EE-9F3D-2CF87E0F1851"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF09CFB-F7CE-4659-BB20-83231539F765"},{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EFE8C2A3-7575-41C6-896C-C367E6D35015"}]}]}],"references":[{"url":"http://archives.postgresql.org/pgsql-announce/2002-10/msg00000.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/891177","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7657","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11102","source":"cve@mitre.org"},{"url":"http://archives.postgresql.org/pgsql-announce/2002-10/msg00000.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/891177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1643","sourceIdentifier":"cve@mitre.org","published":"2002-12-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"3EBEBAE1-62CD-4C12-865D-6DB62B5728F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:9.0.2.768:*:*:*:*:*:*:*","matchCriteriaId":"ACB440DF-A9AF-46DC-9ADF-C73D58A6F1BA"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/974689","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/realhelix.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/304203","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6454","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6456","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6458","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.service.real.com/help/faq/security/bufferoverrun12192002.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10916","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10917","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/974689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/realhelix.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/304203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.service.real.com/help/faq/security/bufferoverrun12192002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1644","sourceIdentifier":"cve@mitre.org","published":"2002-11-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"507B82BD-BAC9-4869-B93E-7A1FB07A4397"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D6A1DA84-B950-4586-8057-FB14BC54AE23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C85741CF-125B-4E29-812D-073C03A17FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F227B58E-6AA9-4EC6-B020-43F61728266E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.4:*:*:*:*:*:*:*","matchCriteriaId":"894266AB-9AE6-4CF5-9B0D-14158B124588"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F72378BB-259C-4D15-BB05-7270D85CC484"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D22008E-6548-4F5E-95FA-56F1B96EED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1162A0E9-A994-4F93-8518-22CF7F7B5254"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1:*:*:*:*:*:*:*","matchCriteriaId":"48B16537-6D32-49BE-BA9C-34B38D99582F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"43D3D960-088A-4A25-B685-7A869F4400DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"240D6450-1A4E-4672-BF68-3B3E6D468ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"65D36365-3343-49E4-907F-F0F05E4615BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"19965F3E-3858-430D-A919-AECC81DED356"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.2:*:*:*:*:*:*:*","matchCriteriaId":"22F95328-DC68-41D2-A52C-A9809D62A100"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"88AA4D9E-2727-4DBD-9A01-B692EA151818"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/740619","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6247","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ssh.com/company/newsroom/article/286/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10710","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/740619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ssh.com/company/newsroom/article/286/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1645","sourceIdentifier":"cve@mitre.org","published":"2002-11-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"SSH Secure Shell Windows client versions 3.1.5 and 3.2.2 the URL handling mechanism has been fixed so that the maximum URL length is checked and enforced.","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1:*:*:*:*:*:*:*","matchCriteriaId":"48B16537-6D32-49BE-BA9C-34B38D99582F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"43D3D960-088A-4A25-B685-7A869F4400DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"240D6450-1A4E-4672-BF68-3B3E6D468ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"65D36365-3343-49E4-907F-F0F05E4615BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"19965F3E-3858-430D-A919-AECC81DED356"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.2:*:*:*:*:*:*:*","matchCriteriaId":"22F95328-DC68-41D2-A52C-A9809D62A100"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/140977","source":"cve@mitre.org","tags":["Exploit","Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6263","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ssh.com/company/newsroom/article/287/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10723","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/140977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ssh.com/company/newsroom/article/287/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1646","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell_for_servers:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0A1AD6B7-A164-49CD-A882-12C5D484CE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell_for_servers:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1B20DF45-5EC3-4771-A589-B7264152BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell_for_servers:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89B02880-2593-4071-B2E4-5AFC462A8CF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:secure_shell_for_servers:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"361B7BE0-4779-4692-8D7B-1B940E58BFA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/m-081.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/341187","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4810","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ssh.com/company/newsroom/article/201/","source":"cve@mitre.org"},{"url":"http://www.ssh.com/products/ssh/advisories/authentication.cfm","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9163","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/m-081.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/341187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ssh.com/company/newsroom/article/201/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ssh.com/products/ssh/advisories/authentication.cfm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1647","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slashcode.com:slash:*:*:*:*:*:*:*:*","matchCriteriaId":"F03C1D89-8143-48C5-A07C-740072703D35"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103176636403241&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103177860017930&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103238514720237&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/603945","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=103176636403241&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103177860017930&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=103238514720237&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/603945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2002-1648","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of SquirrelMail as shipped with Red Hat Enterprise Linux 3 or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/153043","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3956","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7989","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/153043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1649","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of SquirrelMail as shipped with Red Hat Enterprise Linux 3 or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/153043","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3956","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7989","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/153043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/3956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1650","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspell_command parameter."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of SquirrelMail as shipped with Red Hat Enterprise Linux 3 or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0296.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0306.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7990","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0306.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1651","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verity:search97:2.1:*:*:*:*:*:*:*","matchCriteriaId":"1F125BDD-6E32-4AA1-8B04-164B8F236B40"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/636431","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5102","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9441","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/636431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1652","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:cgiemail:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F471FE64-73DE-4E29-BF66-9451866A9FC4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1002395","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/185251","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/exploits/5TP0W005FE.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6141","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10595","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1002395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/185251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/exploits/5TP0W005FE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1653","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:farm9:cryptcat:1.10:*:*:*:*:*:*:*","matchCriteriaId":"E2E7104A-BB51-4F0C-83F9-9F7BB4589A50"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/165099","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/8431","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10618","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/165099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/8431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1654","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"25F0A9AF-D3CE-44A3-B989-7A54E8578A51"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.0:*:*:*:*:*:*:*","matchCriteriaId":"F142CDA8-A008-4C22-A433-B3346ADC4589"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.1:*:*:*:*:*:*:*","matchCriteriaId":"8AC7588B-4A51-4019-9092-6DFAEF8A9F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9E5E0298-99D9-476D-A7DF-36C6207482DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D6280F25-3BC7-4701-914A-9ADC35A1A73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"BE2CB845-D0E6-4B45-95A1-879BCCA037D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"F18F9770-12E2-44D5-ABB6-EDFD2383BFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"5C2CB1E6-63A1-42C5-889C-7EA83CB50543"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"34D42A9F-449C-4F4D-B610-538BF133F744"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"}]}]}],"references":[{"url":"http://lists.virus.org/vulnwatch-0201/msg00008.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1003157","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/985347","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-567NFX","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/vulnerabilities/pr0105.html","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5IP0G0060Q.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/3831","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7845","source":"cve@mitre.org"},{"url":"http://lists.virus.org/vulnwatch-0201/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1003157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/985347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-567NFX","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/vulnerabilities/pr0105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5IP0G0060Q.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/3831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1655","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.0:*:*:*:*:*:*:*","matchCriteriaId":"F142CDA8-A008-4C22-A433-B3346ADC4589"},{"vulnerable":true,"criteria":"cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.1:*:*:*:*:*:*:*","matchCriteriaId":"8AC7588B-4A51-4019-9092-6DFAEF8A9F7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D6280F25-3BC7-4701-914A-9ADC35A1A73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"BE2CB845-D0E6-4B45-95A1-879BCCA037D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"F18F9770-12E2-44D5-ABB6-EDFD2383BFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"5C2CB1E6-63A1-42C5-889C-7EA83CB50543"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"34D42A9F-449C-4F4D-B610-538BF133F744"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/191763","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-567N48","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/security_info/vuln_pr0104.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3826","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7842","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/191763","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-567N48","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/security_info/vuln_pr0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1656","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-news:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1A38497-13E0-4A04-8C41-A36D9379DA1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-news:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6080063-2EB4-4DF3-8028-7B7A78F212CD"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003828","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/162723","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4283","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8465","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/162723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/4283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1657","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-916"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-916"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.3.19:*:*:*:*:*:*:*","matchCriteriaId":"99679F07-ED44-47EE-AD51-3139F30B88DB"}]}]}],"references":[{"url":"http://archives.postgresql.org/pgsql-admin/2002-08/msg00253.php","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=111402558115859&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=111403050902165&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20215","source":"cve@mitre.org","tags":["Broken Link","VDB Entry"]},{"url":"http://archives.postgresql.org/pgsql-admin/2002-08/msg00253.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=111402558115859&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=111403050902165&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1658","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument.  NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103480856102007&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10414","source":"cve@mitre.org"},{"url":"https://sardonix.org/audit/apache-45.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=103480856102007&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sardonix.org/audit/apache-45.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1659","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iatek:portalapp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"692121CE-2CDC-412C-B2F3-AAB4F4770996"}]}]}],"references":[{"url":"http://secunia.com/advisories/10465","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005541","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10558","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1660","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.9","matchCriteriaId":"D82C8942-7C53-429C-95FD-3548A65746D9"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005284","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securiteam.com/exploits/5QP0P158AC.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5820","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10176","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securiteam.com/exploits/5QP0P158AC.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1661","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.19:*:*:*:*:*:*:*","matchCriteriaId":"70FC4AE9-66D0-4A09-AF02-73EFE62772F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.20:*:*:*:*:*:*:*","matchCriteriaId":"230C6937-A9E2-4500-9C2C-6A6E3BBE150D"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.21:*:*:*:*:*:*:*","matchCriteriaId":"E900B416-9B01-4613-973D-A904B8C9D2BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.22:*:*:*:*:*:*:*","matchCriteriaId":"E515ECA1-5A4B-4DF4-8912-DF479283CDD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.23:*:*:*:*:*:*:*","matchCriteriaId":"976D590D-3482-42D2-B9CE-553723A533D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.24:*:*:*:*:*:*:*","matchCriteriaId":"75C1A830-A27D-4D04-9DDD-E2926E832C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*","matchCriteriaId":"6D734DEC-8409-439C-B76B-47032F7796EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E92501E-E432-418E-94B5-BBB38793DAF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*","matchCriteriaId":"D5C119D2-23BA-4C0C-80BA-75BBB1B3C373"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*","matchCriteriaId":"684BAA0C-12A9-46A8-BFDE-1C758E2CA2E5"}]}]}],"references":[{"url":"http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=104127108823436&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104152295210075&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7799","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7801","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7870","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6490","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1005865","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10942","source":"cve@mitre.org"},{"url":"http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=104127108823436&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=104152295210075&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1005865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1662","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the \"Your name\" field during account registration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CCB5F323-A895-4392-8801-17A91A3DF23A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6386","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10859","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1663","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing Content-Length header value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.1","matchCriteriaId":"20640916-BCD7-405C-9066-BC9645245694"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0023.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://monkeyd.sourceforge.net/Changelog.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7449","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1005507","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6096","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10529","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0023.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://monkeyd.sourceforge.net/Changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1005507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1664","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/393195","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/393195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2002-1665","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/755755","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=101439616623230&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2002-16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/755755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2002-1666","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.1:*:*:*:*:*:*:*","matchCriteriaId":"34112DA5-C0B6-46E9-A69F-02F24BDBA6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.2:*:*:*:*:*:*:*","matchCriteriaId":"F6883CFF-B2CB-4B75-8E6B-938A78CF7DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.3:*:*:*:*:*:*:*","matchCriteriaId":"9134636B-0CF6-41BE-8C5F-BB6C0C55A199"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.4:*:*:*:*:*:*:*","matchCriteriaId":"5B512964-2367-4C55-BB75-9EBFB3707179"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*","matchCriteriaId":"1DC2C3EF-B1A4-4BF9-B534-A7ABB6490CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*","matchCriteriaId":"BC900808-1118-4FC0-9E48-380A02394F45"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4551","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8897","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8897","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1667","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page invalidation, which allows local users to cause a denial of service (crash) by calling msync on an unaccessed memory map created with MAP_ANON and MAP_NOSYNC flags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:22.mmap.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8921","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:22.mmap.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1668","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a \"file system weakness\" that is possibly via an mmap() system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB008E3-9A00-4D28-8826-A9FCC9F65314"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux_series_700:10.20:*:*:*:*:*:*:*","matchCriteriaId":"8B369244-5327-4946-9C49-AC93AE75866B"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux_series_800:10.20:*:*:*:*:*:*:*","matchCriteriaId":"A40F1951-2AC6-402E-95D6-19ECC3F695F2"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/3770","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3817","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7844","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/3770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1669","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:01.pkg_add.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3819","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7852","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:01.pkg_add.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1670","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3887","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7922","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1671","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of the clipboardData object."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250387/2002-10-11/2002-10-17/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/250248","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3862","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7906","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250387/2002-10-11/2002-10-17/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/250248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1672","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*","matchCriteriaId":"6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C5C38C77-246F-41A9-A3D5-99C2DDA1DAE1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/263181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4328","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.webmin.com/changes.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8595","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/263181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4328","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.webmin.com/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1673","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"30E3CF12-D0B7-4C7F-96C8-36A3FAFA8EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"C808C470-F0A1-4338-A988-3968EABE78E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"C16685C0-94E9-4AE6-8221-1D32112808F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.4:*:*:*:*:*:*:*","matchCriteriaId":"EDACA626-1687-4192-A2E8-C74823B715A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A9641C23-B30A-4CB2-A348-BD708F68F90A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.6:*:*:*:*:*:*:*","matchCriteriaId":"0852A462-22ED-422D-A454-0A6E026D9AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"97FEF73D-767D-4BF2-AA12-67268719A404"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.21:*:*:*:*:*:*:*","matchCriteriaId":"84B5A02C-96AB-46FD-A958-86AC0DFD1F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1B8073-C512-4ACA-8E3F-92D46D63FBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.31:*:*:*:*:*:*:*","matchCriteriaId":"B368FAD0-39A7-4115-9327-1D32BECF2F7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.41:*:*:*:*:*:*:*","matchCriteriaId":"2B3D7B7A-0426-4176-A759-E96024DC492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.42:*:*:*:*:*:*:*","matchCriteriaId":"1E3EFDEE-A99B-4D0E-B6A7-E7C285A5DFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.51:*:*:*:*:*:*:*","matchCriteriaId":"50C3D4D4-246A-4287-AA42-CFDD0C1AE22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.76:*:*:*:*:*:*:*","matchCriteriaId":"F05CF0BA-0606-42E5-A631-D302FF1D59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.77:*:*:*:*:*:*:*","matchCriteriaId":"6A79B7B3-708A-42E4-B4EF-7746F6292DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.78:*:*:*:*:*:*:*","matchCriteriaId":"E2F06BC0-0418-4A1C-BD4A-B7429A6CEA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.79:*:*:*:*:*:*:*","matchCriteriaId":"1817FDA9-31F4-4D4A-A867-386D2F1CDB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*","matchCriteriaId":"23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.83:*:*:*:*:*:*:*","matchCriteriaId":"DFD94AA9-CABA-4FC8-8367-D5D9D8B4F623"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.84:*:*:*:*:*:*:*","matchCriteriaId":"35B136CA-47BF-46DE-885A-9E74EBDE5306"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.85:*:*:*:*:*:*:*","matchCriteriaId":"E9A3F522-6E6D-446C-8694-7AE91F19F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DBB86BC7-4A99-4C5B-9460-CDDA7C4E4041"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0B0813F3-1886-481E-8822-4BD199C4934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*","matchCriteriaId":"6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"C5C38C77-246F-41A9-A3D5-99C2DDA1DAE1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/263181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4329","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8596","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/263181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1674","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:09.fstatfs.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4040","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8112","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:09.fstatfs.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1675","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unreal:unrealircd:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DF8B42EE-E34A-4EAE-9C17-48329AD21AAC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0664.html","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5MP080A6LQ.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8360","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0664.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5MP080A6LQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1676","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netinventory:1.0:*:*:*:*:*:*:*","matchCriteriaId":"34CCEAE9-D062-435C-BAAF-7D3A6921FC48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bindview:netrc:1.0:*:*:*:*:*:*:*","matchCriteriaId":"760DB974-6B4A-4A09-9B4F-201456DE9136"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252293","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/256056","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3957","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7992","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/256056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1677","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mrtg:mrtgconfig:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"6FCB6137-F803-4B18-841F-E529FB7CF979"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0421.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/254278","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8070","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0421.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/254278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1678","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"B53F61D2-5FD2-4625-A9FB-8E0258924BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"306C6BDF-C687-4B63-998B-B520DF1D1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DF18ED7C-80BB-4A78-8809-9AAE817876A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1D731A35-E0DB-4F40-A981-C38229A2EB1E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/263609","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/264023/2002-11-01/2002-11-07/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4349","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8619","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/263609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/264023/2002-11-01/2002-11-07/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1679","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253365","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8039","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/253371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1680","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to execute arbitrary script as other users by injecting script into (1) diagnose.cgi or (2) compatible.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cows:cgi_online_worldweb_shopping:1.1:*:*:*:*:*:*:*","matchCriteriaId":"97627788-CE9D-4808-BFC0-893983186071"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/251570","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3914","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3921","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7986","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/251570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1681","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"552A39DD-FEE3-4459-AC86-1906D3AC35AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3138C055-1054-4F7A-8B80-8A6EA3B44528"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FBE6597C-E7EC-4A53-9B72-925F252EE0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5D667AE2-4F32-411D-84C4-AF1C066D3027"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0330B326-3443-4090-A3D4-5C60B74CA865"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/280218","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/280255","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5140","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9473","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/280218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/280255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1682","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NewsReactor 1.0 uses a weak encryption scheme, which could allow local users to decrypt the passwords and gain access to other users' newsgroup accounts."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daansystems:newsreactor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1F4AAAC1-751C-4C77-9BF9-93D5E2A7D158"}]}]}],"references":[{"url":"http://www.securiteam.com/windowsntfocus/5SP0P0K60C.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3927","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7968","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP0P0K60C.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1683","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:personal_1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"AD283201-D34D-41A1-91CD-1F4F6F65CC42"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281141","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9514","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/281141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1684","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:d2gfx:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE030411-806C-4C8E-8050-0A9359BE0BDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.5:*:*:*:*:*:*:*","matchCriteriaId":"BEED59DB-8836-4172-99B9-A4A4D14ADE9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:personal_1.5.6_beta:*:*:*:*:*:*:*","matchCriteriaId":"791CC387-BB32-4D19-8D94-9D2CFE23AB65"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/251523","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3913","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7946","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/251523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1685","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"02F55B4B-ED2E-4D09-AED9-6A96F8D7B1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:personal_1.7:*:*:*:*:*:*:*","matchCriteriaId":"1DCB9A6E-CB06-4D28-B3C9-4A1A6AF9072D"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:personal_1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"40BA199B-E39E-44FD-B80F-32FCA4EDC9B3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5086","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9513","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/281088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1686","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lscfg of unknown versions of AIX has unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1687","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the diagnostics library in AIX allows local users to \"cause data and instructions to be overwritten\" via a long DIAGNOSTICS environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1688","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267561","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4505","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8844","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1689","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1690","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka \"security issue,\" as fixed by APAR IY28225."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D3C00FC9-AD97-4226-A0EA-7DB14AA592DE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/aix/2002-q1/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1691","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatel-lucent:omnipcx:4400:*:*:*:*:*:*:*","matchCriteriaId":"14F18C03-D6D2-41BA-9217-85737F0E4960"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4127","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8224","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101413767925869&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1692","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:*","matchCriteriaId":"82F7322B-8022-4D0B-ADB3-D0F5B6F20309"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_95:*:sr2:*:*:*:*:*:*","matchCriteriaId":"25DA02ED-9093-42E8-A9AD-F7B882430488"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/3864","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2002/Jan/1003201.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7892","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2002/Jan/1003201.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1694","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:symantec:*:*:*:*:*","matchCriteriaId":"A1BBB40F-209E-4A4C-B9E7-6ACC92D48979"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3888","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7919","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1695","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2001:*:*:*:*:*:*:*","matchCriteriaId":"2D2C8E23-852E-4715-9D8D-18F26B1263A0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/250591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3888","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7919","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/250591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1696","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when \"Automatically decrypt/verify when opening messages\" option is checked, \"Always use Secure Viewer when decrypting\" option is not checked, and the user replies to an encrypted message."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F0276A24-52AA-423B-8D52-B9D56685198D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"61DDF378-20C8-4502-BE6A-85F3C579DBE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"477D315D-D040-463A-B1B5-43F3FF5CF1F9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3825","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7900","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/3825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1697","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vtun_project:vtun:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.5","matchCriteriaId":"0B8860CA-17EC-46B9-ADD1-11C8D7CBBA5C"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Jan/0119.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/3845","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7904","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/bugtraq/2002/Jan/0119.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/3845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1698","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via a long FN (font) argument in the message header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6D9DCDBD-8628-44CF-8A8F-CF0389B40586"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:2.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE4C95-500A-425E-A41C-6B79D6873BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:2.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE590D-A8FD-4D5F-A082-EA1393BCB72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DD36B3-F635-4FB9-856B-215D7FE82AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:3.6:*:*:*:*:*:*:*","matchCriteriaId":"B4EDB077-8CBE-4292-9681-D1FE58771B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71BA7CF9-3089-4525-A251-12233978E258"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"DFEE276F-4ACC-440B-9F36-FAA7DAD4BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"083C6323-8712-4A42-893D-6A6BE5997689"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4675","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9014","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1699","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pascal_michaud:asp_client_check:1.3:*:*:*:*:*:*:*","matchCriteriaId":"DA744189-3E40-4FCB-B90E-6EED4EA46D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:pascal_michaud:asp_client_check:1.5:*:*:*:*:*:*:*","matchCriteriaId":"4C6357C5-842F-42EE-9AB9-207F0A0212CE"}]}]}],"references":[{"url":"http://www.osvdb.org/21558","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5BP031P75C.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4676","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9015","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/21558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5BP031P75C.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1700","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277487","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=23047","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9360","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=23047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9360","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1702","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deltascripts:php_classifieds:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"768C3B0C-3773-4C64-824B-B675F037A242"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5022","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9363","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1703","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as other users via the Term parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mewsoft:netauction:3.0:*:*:*:*:*:*:*","matchCriteriaId":"FDFFC3A9-1918-42EE-BAF0-9DD5C0FDFCB5"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277049","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5023","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9365","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1704","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zeroboard 4.1, when the \"allow_url_fopen\" and \"register_globals\" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*","matchCriteriaId":"021147FB-D153-440D-95F2-B812FB9DEA19"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277126","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5028","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9366","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9366","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1705","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277133","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277140/2002-12-07/2002-12-13/2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5027","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9367","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277140/2002-12-07/2002-12-13/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1706","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionStartIncluding":"11.3","versionEndIncluding":"12.2","matchCriteriaId":"31B3ECA7-7047-4964-B0DD-F1FE3A59AD60"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ubr7100:-:*:*:*:*:*:*:*","matchCriteriaId":"7DE45741-2794-43AD-8ECA-3B15E21D91F0"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:ubr7200:-:*:*:*:*:*:*:*","matchCriteriaId":"543C347E-DBAC-49A0-9BC4-5F89D575DC86"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml","source":"cve@mitre.org","tags":["Not Applicable","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5041","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9368","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1707","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"install.php in phpBB 2.0 through 2.0.1, when \"allow_url_fopen\" and \"register_globals\" variables are set to \"on\", allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_dir parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277318","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9370","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1708","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in BasiliX Webmail 1.10 allows remote attackers to execute arbitrary script as other users by injecting script into the (1) subject or (2) message fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B4F9725-BAE3-4D86-9810-4585978DA041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277710","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5060","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9384","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1709","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the id variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B4F9725-BAE3-4D86-9810-4585978DA041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277710","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5061","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9385","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9385","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1710","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B4F9725-BAE3-4D86-9810-4585978DA041"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00247.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5062","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9386","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9386","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1711","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:basilix:basilix_webmail:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B4F9725-BAE3-4D86-9810-4585978DA041"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277710","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5065","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9387","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9387","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1712","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/252616","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq280446","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3967","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8037","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/252616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq280446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1713","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277515","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/455323","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5050","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9389","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/277515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/455323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1714","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type \"text/html\" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/268776","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4564","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8904","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1715","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1E9C3330-E163-4699-B7F6-2D9B089E8A6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F62C0C54-6BC0-4A8B-8006-F1EEEFAC3699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"011ECCA8-63DD-4FB0-A2F4-B4BAF344242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"86A52DB0-B17A-437C-8E3A-0F824B9F88AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"8EDDCCD5-76B1-4981-BA9D-0C4702DD3FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6A9E54C6-7003-46B0-85B3-0C2E7E611D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"082C8ECC-CDAF-440B-90D0-A1FE028B03F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7D0AAA72-CAA5-4985-ADD9-1790CE3C66D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C0C2A220-D8AB-4FAD-8048-F2C1764F965F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"5010A78A-394E-4196-90CB-5D371C3BD1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"E5F6F181-41B1-47D1-A216-194DC4C762EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"D6EEBDAB-AA0D-407B-B8EE-6C33B0423AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"45446BD9-3B03-43B6-B686-F6EACFABD699"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"FCE6F492-8E28-4FA1-9BF1-96BAF5D68545"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.14:*:*:*:*:*:*:*","matchCriteriaId":"41BF66ED-CB08-440E-AC05-A31371B7A380"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.15:*:*:*:*:*:*:*","matchCriteriaId":"E0EE3216-D8FF-43F0-9329-6676E2CEC250"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.16:*:*:*:*:*:*:*","matchCriteriaId":"9310E12D-1136-4AD6-9678-8ADCD9EE58C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.17:*:*:*:*:*:*:*","matchCriteriaId":"BBEDF399-58DE-491A-8B51-87E0392FF9C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.18:*:*:*:*:*:*:*","matchCriteriaId":"CBDF2DE8-8559-4BED-80AE-E1420BBF4043"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.19:*:*:*:*:*:*:*","matchCriteriaId":"23EB8421-76BF-47D1-B294-68412D5E4572"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D9560989-5342-4C6B-974F-7D90C467BA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.21:*:*:*:*:*:*:*","matchCriteriaId":"971835AF-E908-4C74-9DE0-167349138DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.22:*:*:*:*:*:*:*","matchCriteriaId":"2E0D49C5-54B4-4437-A2D3-3EBFA1D9A3CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.23:*:*:*:*:*:*:*","matchCriteriaId":"926B57D7-009C-4317-ACFB-98551FADC5B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*","matchCriteriaId":"B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*","matchCriteriaId":"7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*","matchCriteriaId":"7D0FF07F-E13B-425F-9892-C50B326B2944"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*","matchCriteriaId":"338EDA76-05D6-48C0-952E-6244A5F206F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*","matchCriteriaId":"F719468E-A218-4EB5-9F8D-7841E84F44C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*","matchCriteriaId":"1E4FCD36-0009-4A93-A190-8FDD11C672CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*","matchCriteriaId":"71727854-1B75-465F-AF8C-DFE6EFF46B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*","matchCriteriaId":"64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"4A7DB2FA-58A8-45B9-AE2E-AE20A872BF90"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2DD92EA8-8C01-4E4E-9AFE-2B1242AB10CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6FB31028-59BA-4833-BF14-3CB1CA18DAAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8A3E89B6-872D-4541-A413-88A956FDAE81"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"98CC86ED-CA78-4E2A-8A12-4F766DB79733"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BD500A33-4D0E-44B5-9BBE-A30AA999F662"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EBB8D72F-51E7-47DF-96A4-4EBB517A79D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EC2379BA-621E-4986-AAC5-AF359FD57381"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"9972B3A4-369E-40B5-9415-F92B7394604A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1B6E719F-010B-4B8A-B508-0491BD15C465"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"E44D2AE3-DD8B-46D0-B6AB-9F0E6B4DCC4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"B7735CDD-8BFC-4E30-9C88-27C8943637CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A1582187-F4BA-44D6-97F0-E78D814A9E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"507B82BD-BAC9-4869-B93E-7A1FB07A4397"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D6A1DA84-B950-4586-8057-FB14BC54AE23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C85741CF-125B-4E29-812D-073C03A17FA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F227B58E-6AA9-4EC6-B020-43F61728266E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.4:*:*:*:*:*:*:*","matchCriteriaId":"894266AB-9AE6-4CF5-9B0D-14158B124588"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:2.5:*:*:*:*:*:*:*","matchCriteriaId":"F72378BB-259C-4D15-BB05-7270D85CC484"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssh:ssh2:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8D22008E-6548-4F5E-95FA-56F1B96EED2F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/268446","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4547","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8908","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1716","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/265087","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.guninski.com/m%24oxp-2.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4398","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8711","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/265087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.guninski.com/m%24oxp-2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1717","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*","matchCriteriaId":"25100F8C-58A0-49D5-8247-8CCD099A734B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/255555","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/archive/1/256125","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4078","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8174","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/255555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/archive/1/256125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1718","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.1:*:*:*:*:*:*:*","matchCriteriaId":"25100F8C-58A0-49D5-8247-8CCD099A734B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/255555","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/archive/1/256125","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4084","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/255555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://online.securityfocus.com/archive/1/256125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1719","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bavo:bavo:0.3:*:*:*:*:*:*:*","matchCriteriaId":"BA05C03C-2E04-48F0-AA85-90767556B2CB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003503","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4079","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40988","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1720","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:outfront:spooky_login:2.0:*:*:*:*:*:*:*","matchCriteriaId":"65A09E76-C355-4F9C-ADE6-CF8049DC94AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:outfront:spooky_login:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A30287CD-6D08-42FC-8DB1-B7C0503B79CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:outfront:spooky_login:2.2:*:*:*:*:*:*:*","matchCriteriaId":"754DBE65-3190-4A85-B8A5-CCCD7171A8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:outfront:spooky_login:2.3:*:*:*:*:*:*:*","matchCriteriaId":"41D4E7C2-9A0F-4778-9159-01D90FD9FE47"},{"vulnerable":true,"criteria":"cpe:2.3:a:outfront:spooky_login:2.4:*:*:*:*:*:*:*","matchCriteriaId":"9A2DC265-EAD5-47E4-AF0A-8829D27A1AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:outfront:spooky_login:2.5:*:*:*:*:*:*:*","matchCriteriaId":"D82B9306-FB58-4E74-8F21-F7D41523DC1E"}]}]}],"references":[{"url":"http://www.securiteam.com/windowsntfocus/5VP030K75G.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4661","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8991","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5VP030K75G.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1721","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pldaniels:altermime:0.1.10:*:*:*:*:*:*:*","matchCriteriaId":"1F797EB1-B648-4D82-BBC7-2972A931FC88"},{"vulnerable":true,"criteria":"cpe:2.3:a:pldaniels:altermime:0.1.11:*:*:*:*:*:*:*","matchCriteriaId":"C8C8444C-AF8C-4AEF-9069-98FBE44F5851"}]}]}],"references":[{"url":"http://www.pldaniels.com/altermime/CHANGELOG","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/bid/4650","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8992","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.pldaniels.com/altermime/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.securityfocus.com/bid/4650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1722","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:cordless_freedom_itouch_keyboard:*:*:*:*:*:*:*:*","matchCriteriaId":"30DA30B5-BE51-49C7-BA8A-EC8DB05CDCBF"},{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:cordless_itouch_keyboard:*:*:*:*:*:*:*:*","matchCriteriaId":"8EE6D6C5-3672-4F90-86FB-9A306CA8B590"},{"vulnerable":true,"criteria":"cpe:2.3:h:logitech:itouch_keyboard:*:*:*:*:*:*:*:*","matchCriteriaId":"001799FF-4C8E-4401-AB70-CB50F4DD8F72"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/270702","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4662","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8994","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/270702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1723","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent username to profiles.php, which displays the full path in the error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerboards:powerboards:2.2b:*:*:*:*:*:*:*","matchCriteriaId":"952D695B-E37F-466D-8767-6BD74D425805"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/266665","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/powerboards.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8824","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/266665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/powerboards.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1724","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinetools.org:phpimageview:1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C5693E-13AC-48B2-9EAC-27E23C97B623"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4668","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9000","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1725","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onlinetools.org:phpimageview:1.0:*:*:*:*:*:*:*","matchCriteriaId":"37C5693E-13AC-48B2-9EAC-27E23C97B623"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970/2002-12-21/2002-12-27/2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4668","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9001","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970/2002-12-21/2002-12-27/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1726","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brokenbytes:photodb:1.4:*:*:*:*:*:*:*","matchCriteriaId":"78A183FE-7FDF-4BEC-B57C-0F2C54F3B610"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9002","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1727","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asksam_systems:asksam_web_publisher:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1D70DEB-AE24-41D4-AC98-B95B93F9A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asksam_systems:asksam_web_publisher:4.0:*:*:*:*:*:*:*","matchCriteriaId":"42FA2922-CFF1-4265-9B3A-F5D153AFB62A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4670","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9003","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1728","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asksam_systems:asksam_web_publisher:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1D70DEB-AE24-41D4-AC98-B95B93F9A0BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:asksam_systems:asksam_web_publisher:4.0:*:*:*:*:*:*:*","matchCriteriaId":"42FA2922-CFF1-4265-9B3A-F5D153AFB62A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4670","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9004","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1729","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the \"web site\" parameter in a guestbook message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspjar:aspjar_guestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AEE12EEC-916A-4E9B-A312-1E61DD7408BA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4671","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9005","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1730","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to \"true\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspjar:aspjar_guestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AEE12EEC-916A-4E9B-A312-1E61DD7408BA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/270970","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4671","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9006","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/82/270970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1731","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v4r2:*:*:*:*:*:*:*","matchCriteriaId":"DF439C25-CE7A-4ADA-A687-01F78729CF07"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v4r3:*:*:*:*:*:*:*","matchCriteriaId":"7840B131-E836-478A-A6B5-5F19FB1B079D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v4r4:*:*:*:*:*:*:*","matchCriteriaId":"5987D179-8327-4ABD-8D23-CCC9D0457FE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v4r5:*:*:*:*:*:*:*","matchCriteriaId":"22D354F5-4D07-4C4A-BE5F-F23A3BA11979"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:os_400:v5r1:*:*:*:*:*:*:*","matchCriteriaId":"7B8413DB-6A89-4CFE-A005-9D2FC9FBD114"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003507","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4059","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8179","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1732","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:actinic:actinic_catalog:4.7:*:*:*:*:*:*:*","matchCriteriaId":"6029C3F2-89DC-4D3F-BD58-DE45528266C2"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003502","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2006-July/000929.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/27095","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/27096","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/27097","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/27098","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4042","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8180","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2006-July/000929.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/27095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/27096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/27097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/27098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1733","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:prospero_technologies:prospero_message_board:*:*:*:*:*:*:*:*","matchCriteriaId":"34840448-AC20-4270-B9B1-E352AB155919"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4109","source":"cve@mitre.org"},{"url":"http://www.sentinelchicken.com/advisories/prospero/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sentinelchicken.com/advisories/prospero/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1734","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to \"logged,true\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspbin:newspro:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AEED4A32-FC98-41F5-86EB-F983DC0ECE60"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4672","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9007","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1735","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davin_mccall:dlogin:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"68F3D847-2B31-4106-AF48-091ED7510946"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003493","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4043","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8186","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1736","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via \"unfiltered user input.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cginews:*:*:*:*:*:*:*:*","matchCriteriaId":"322F5303-E37C-4080-B8E6-A0F467D93AA2"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003506","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8187","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1737","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:2.01:*:*:*:*:*:*:*","matchCriteriaId":"E4C23F03-AF17-43B6-B93C-0ACFE6A87990"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/256124","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/256127","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4103","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8190","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/256124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/256127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1738","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B1B8B55A-93D3-4456-8B84-DA437F7E18FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"EAD8D901-F60B-400B-A51E-0881D0077FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E419B0EF-DB52-43D7-906C-744CEF5D8E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EFB3DE93-03F4-4543-AF4D-A76C0AA86D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"505D587A-DD1A-4C31-9C8E-D407CECF3545"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E131AB50-9C43-4AF9-8637-618172FC1769"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"596930EE-960D-4307-B726-73DEBE5ABF36"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271374","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4685","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9024","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1739","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mdaemon:mdaemon:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndIncluding":"5.0.6","matchCriteriaId":"CA13175A-BDF0-4922-B0D2-B212F95587E0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271374","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4686","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9025","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/271374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1740","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B1B8B55A-93D3-4456-8B84-DA437F7E18FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"EAD8D901-F60B-400B-A51E-0881D0077FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E419B0EF-DB52-43D7-906C-744CEF5D8E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EFB3DE93-03F4-4543-AF4D-A76C0AA86D4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"505D587A-DD1A-4C31-9C8E-D407CECF3545"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E131AB50-9C43-4AF9-8637-618172FC1769"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"596930EE-960D-4307-B726-73DEBE5ABF36"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"B12B5202-F814-4962-A09E-44B9C075FF1F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271374","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4689","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9026","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1741","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a \"..\" (dot dot) in the Attachments parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0:*:*:*:*:*:*:*","matchCriteriaId":"97FD2E84-B802-4BDA-A39B-D84F67ABC21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0:*:pro:*:*:*:*:*","matchCriteriaId":"B12B5202-F814-4962-A09E-44B9C075FF1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9343C918-6C63-4EE7-9B30-30C1209041C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13AE088E-E03F-4BB0-8A5B-ED2734B3B0D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2DFD683F-21E3-49CA-B22A-40FA79FECF57"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6CC30F32-5C76-4D1A-979D-949D0C1DC39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:worldclient:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F4FAD806-A5CE-46D5-AD59-13F364F988EA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271374","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4687","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9027","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1742","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_kulchenko:soap_lite:0.50:*:*:*:*:*:*:*","matchCriteriaId":"2F68CDAA-EB7D-457C-862D-FABC4321731C"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_kulchenko:soap_lite:0.51:*:*:*:*:*:*:*","matchCriteriaId":"4D40C523-B66F-4F54-90BB-30B7A05866D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_kulchenko:soap_lite:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E4B4DCA5-D824-4288-942F-BC56A5D7289D"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267051","source":"cve@mitre.org"},{"url":"http://use.perl.org/articles/02/04/09/000212.shtml?tid=5","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phrack.com/show.php?p=58&a=9","source":"cve@mitre.org"},{"url":"http://www.phrack.org/show.php?p=58&a=9","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4493","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.soaplite.com/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8838","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/267051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://use.perl.org/articles/02/04/09/000212.shtml?tid=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phrack.com/show.php?p=58&a=9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrack.org/show.php?p=58&a=9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.soaplite.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1743","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2002a_build3722:*:*:*:*:*:*:*","matchCriteriaId":"28ABA292-10F6-447A-9494-CA716B9F47FD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267656","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8843","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1744","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded \"%c0%ae%c0%ae\" string, which is the Unicode representation for \"..\" (dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267945","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/268065","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4525","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8853","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/268065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1745","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/268303","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4543","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8853","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/268303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/4543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1746","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxim_krasnyansky:vtun:2.5b1:*:*:*:*:*:*:*","matchCriteriaId":"89B63A69-0E9D-408F-A462-B664874E09B8"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Jan/0119.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7870","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jan/0119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1747","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxim_krasnyansky:vtun:2.5b1:*:*:*:*:*:*:*","matchCriteriaId":"89B63A69-0E9D-408F-A462-B664874E09B8"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Jan/0119.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7868","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jan/0119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1748","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B9FD066C-B64A-46CB-A9AA-F6347E544134"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1520586E-C02B-47C6-BABD-80636ACA6226"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2:*:*:*:*:*:*:*","matchCriteriaId":"BD921000-F257-450D-92F4-B6411D46FC21"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"552A39DD-FEE3-4459-AC86-1906D3AC35AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3138C055-1054-4F7A-8B80-8A6EA3B44528"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/249355","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3839","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/249355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1749","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4095","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8199","source":"cve@mitre.org"},{"url":"http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1750","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript:csguestbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"37F43BD3-53F2-4D47-9429-C32FC82F5BA8"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4448","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1751","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:cslivesupport:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4079F805-69E7-445C-A38B-A63C5B660008"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4450","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1752","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript:cschat-r-box:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ACEAA7C2-12F4-4107-9694-5FF24A633BEC"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4452","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1753","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript:csnews_professional:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BFA79252-F2F1-4418-B596-557860649C36"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4451","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1754","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netware_client:4.80:*:*:*:*:*:*:*","matchCriteriaId":"2E777D34-C2B0-4897-BF52-C26DEC135FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netware_client:4.81:*:*:*:*:*:*:*","matchCriteriaId":"E1F109DD-BA31-41A9-8B27-92752183F5EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netware_client:4.82:*:*:*:*:*:*:*","matchCriteriaId":"044DEABB-891D-4C53-BF4E-2A35C2149EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netware_client:4.83:*:*:*:*:*:*:*","matchCriteriaId":"333665A6-3363-41B2-B077-F624737AE188"}]}]}],"references":[{"url":"http://support.novell.com/servlet/tidfinder/2962694","source":"cve@mitre.org"},{"url":"http://www.cqure.net/advisories.jsp?id=15","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9035","source":"cve@mitre.org"},{"url":"http://support.novell.com/servlet/tidfinder/2962694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cqure.net/advisories.jsp?id=15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1755","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinc:tinc:1.0pre3:*:*:*:*:*:*:*","matchCriteriaId":"97B33973-2F05-43B8-B3C1-3E35AF66DE57"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinc:tinc:1.0pre4:*:*:*:*:*:*:*","matchCriteriaId":"52995A7F-640A-4953-BF49-3E4E21DA3F64"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/249142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/249142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1756","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acd_systems:acdsee:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0791C94C-0CC5-4026-B84A-4E9471420FDB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/271963","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4719","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9052","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/271963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1757","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with \"sms\" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using \"mail_send.php/sms\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/269407","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4596","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8943","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1758","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/269407","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4599","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8943","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1759","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4597","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8944","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1760","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4598","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8945","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1761","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1762","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\\Documents and Settings\\username\\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:baseline_security_analyzer:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AB486232-6AE2-4E62-8D4C-8AE659A61E07"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/269408","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4594","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8947","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/269408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1763","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dtscreen Sun Solaris 8 CDE screensaver crashes when the \"Shift\" and \"Return\" keys are pressed repeatedly and quickly, which allows local users to access the current session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277316","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277335","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9406","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/277724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1764","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"707D7124-6063-4510-80B4-AD9675996F67"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277932","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5068","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9407","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1765","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ximian:evolution:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A4A2F537-E877-43CA-89A3-AF3C09AFAAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ximian:evolution:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"86D0D1A5-209C-4BA2-9D15-5790F44C176D"}]}]}],"references":[{"url":"http://mail.gnome.org/archives/gnome-announce-list/2002-May/msg00020.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/advisories/4117","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHBA-2002-080.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4715","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9059","source":"cve@mitre.org"},{"url":"http://mail.gnome.org/archives/gnome-announce-list/2002-May/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://online.securityfocus.com/advisories/4117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHBA-2002-080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1766","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"5A823994-786D-41D7-9FA7-FF8058C4AFD8"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276876","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5010","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9355","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1767","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BB401046-E029-4CD1-A937-E9E70A081BF4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/265452","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4413","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8772","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/265452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1768","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.2:*:*:*:*:*:*:*","matchCriteriaId":"E8026B11-6144-467F-8094-F4F73CD37526"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4948","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9282","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1769","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the \"Log on locally\" privilege."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:i386:*:*:*:*:*","matchCriteriaId":"91135137-B22A-4781-B00F-16694DCD79E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:apha:*:*:*:*:*:*","matchCriteriaId":"FB1FE371-F651-4C19-AF3B-010377CA1317"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp1:i386:*:*:*:*:*","matchCriteriaId":"C564694A-4F12-4F60-927A-3A44285F9CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp1_alpha:*:*:*:*:*:*","matchCriteriaId":"AC0E3DFF-4350-4D9B-8A71-F40F53309C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp2:i386:*:*:*:*:*","matchCriteriaId":"C2E57145-267A-4821-96AC-547C8DD760AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp2_alpha:*:*:*:*:*:*","matchCriteriaId":"AE95FF1F-DC1E-4F88-8787-E3BE137672DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp3:i386:*:*:*:*:*","matchCriteriaId":"68595843-FF27-4BBC-9F41-84C18C4F38A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp3_alpha:*:*:*:*:*:*","matchCriteriaId":"9A2D72A5-8C8F-4461-B8F8-3ECC8CE50F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"35EBE0A3-F521-4B04-95B7-3C57D3090A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp1_alpha:*:*:*:*:*:*","matchCriteriaId":"FF88B4B1-509D-42BE-9694-B42CBA3F0F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp2_alpha:*:*:*:*:*:*","matchCriteriaId":"5E666F3A-DB90-451F-B65F-618F51308E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp3_alpha:*:*:*:*:*:*","matchCriteriaId":"20BC46F5-9CDD-44B5-8979-57F811C52C0E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/3843","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3BQ248840","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3998","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8048","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/advisories/3843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3BQ248840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1770","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code, which is launched and executed in the My Computer zone by Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E129DE88-C286-41CC-B82F-C80718E19701"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=101680576827641&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=101680201823534&w=2","source":"cve@mitre.org"},{"url":"http://security.greymagic.com/adv/gm002-ie/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8609","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=101680576827641&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=101680201823534&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.greymagic.com/adv/gm002-ie/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1771","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E030BDBE-4B0F-4FE1-8115-93E5ACEC591A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2012B4FA-7A4A-4AFF-8961-2A2750B9642B"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C8B21721-890E-498E-92F9-49C080070F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.3:*:*:*:*:*:*:*","matchCriteriaId":"41978011-ADC9-4F22-B2E9-7C45945BCDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1480C519-2325-427E-B394-2832430F611C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.5:*:*:*:*:*:*:*","matchCriteriaId":"23BF8E39-98A9-4950-91EE-B4F4EAF7FA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.6:*:*:*:*:*:*:*","matchCriteriaId":"B565A52D-EA07-4603-91B7-0105E632A2EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.7:*:*:*:*:*:*:*","matchCriteriaId":"C2CA3226-1F70-49A3-8415-2861C82DAF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.8:*:*:*:*:*:*:*","matchCriteriaId":"E078DE78-8DD0-42F8-9E58-C7DBDB02DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"1301D169-6E80-4917-AD54-9F4F4D3874CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html","source":"cve@mitre.org"},{"url":"http://www.scriptarchive.com/readme/formmail.html#history","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3955","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8013","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scriptarchive.com/readme/formmail.html#history","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1772","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Netware 5.0 through 5.1 may allow local users to gain \"Domain Admin\" rights by logging into a Novell Directory Services (NDS) account, and executing \"net use\" on an NDS_ADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.0:*:*:*:*:*:*:*","matchCriteriaId":"471D1E06-05B5-4844-A384-19271CAD743C"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.0:sp5:*:*:*:*:*:*","matchCriteriaId":"D6002095-9692-4B60-800E-B85A0BA7A9D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253373","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8065","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1773","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq_for_macos_x:2.6_x_beta:*:*:*:*:*:*:*","matchCriteriaId":"DE4D41CE-ED2F-4317-B843-7D39D4262DE3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/254133","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254141","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8085","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/254133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/254141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1774","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260271","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4242","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8389","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1775","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260271","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4243","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8390","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1776","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260271","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4245","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8391","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1777","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name.  NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Norton AntiVirus or the Office plug-in would detect the virus before it is executed"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/260271","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8392","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/260271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/260678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1778","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*","matchCriteriaId":"898D5369-E2F3-450C-8554-1C692EAA9906"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267850","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4521","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8859","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8859","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1779","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"block fragmented IP Packets\" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*","matchCriteriaId":"898D5369-E2F3-450C-8554-1C692EAA9906"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/267850","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4545","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/267850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4545","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1780","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con.  NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Windows, and as such, such applications should not be considered vulnerable themselves."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alcatech_gmbh:bpm_studio_pro:4.2:*:*:*:*:*:*:*","matchCriteriaId":"628E43D0-B088-4B7D-B891-290E81BE16A3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/258644","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258986","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8299","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/258644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/258986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1781","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9180C95-FF6F-4A0C-9DE0-DFF6D8387698"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"68FA1404-9FA2-4379-96BC-6D7970C0EAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*","matchCriteriaId":"EABEE7AB-7C45-473E-9873-0423F2249F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A1F66F57-6AEB-4E3C-B148-BC7D11E1EBEC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0051.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/256117","source":"cve@mitre.org"},{"url":"http://www.globalintersec.com/adv/delegate-2002012101.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4055","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8114","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/256117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.globalintersec.com/adv/delegate-2002012101.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1782","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:uw-imap:2001.0a:*:*:*:*:*:*:*","matchCriteriaId":"D9C2ECEF-8CAD-47D0-B4AD-79EF9BB7DC7F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/275127","source":"cve@mitre.org"},{"url":"http://www.security.nnov.ru/advisories/courier.asp","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4909","source":"cve@mitre.org"},{"url":"http://www.washington.edu/imap/IMAP-FAQs/index.html#5.1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9238","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/275127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security.nnov.ru/advisories/courier.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.washington.edu/imap/IMAP-FAQs/index.html#5.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1783","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2002/dsa-168","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5681","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10080","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0086.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0132.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2002/dsa-168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1784","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"C3F90BA0-45D4-4089-BFBC-69FD1DB10C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"B5840611-A108-48EE-9D5A-4B6DA0621FF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"684BEA17-3BFC-4C30-9E8A-411D9D057354"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4288","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9614.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5242","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/advisories/4288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9614.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1785","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C3F4CDAE-795D-4544-984E-F313674FD481"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D094FA6F-39DC-4F34-9FED-718690D8652A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r1:*:*:*:*:*:*:*","matchCriteriaId":"B8D0A87A-A195-4A60-A955-D1B1A3BEDCAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r2:*:*:*:*:*:*:*","matchCriteriaId":"BDDDDFAB-9F52-4F24-AD10-1A65020C9916"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r3:*:*:*:*:*:*:*","matchCriteriaId":"D39A0155-37D9-45E0-B81E-4477AAE5CC1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeus_technologies:zeus_web_server:4.1_r4:*:*:*:*:*:*:*","matchCriteriaId":"8294A726-0E86-4D0C-A01E-BE395B7DC46B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/302961","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10567.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6144","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/302961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10567.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1786","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI IRIX 6.5 through 6.5.14 applies a umask of 022 to root core dumps, which allows local users to read the core dumps and possibly obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10138.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5737","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020902-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10138.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1787","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uux in eoe.sw.uucp package of SGI IRIX 6.5 through 6.5.17 allows local users to execute arbitrary code via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-004.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10274.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5892","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-004.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10274.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1788","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kim_storm:nn:6.6.0:*:*:*:*:*:*:*","matchCriteriaId":"E127FAEE-41D0-42E4-8504-FD0D7722BF70"},{"vulnerable":true,"criteria":"cpe:2.3:a:kim_storm:nn:6.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DB18DC61-B830-4D2A-A500-1FF36484A447"},{"vulnerable":true,"criteria":"cpe:2.3:a:kim_storm:nn:6.6.2:*:*:*:*:*:*:*","matchCriteriaId":"38D37E7A-4803-41BA-94DA-08885A9607E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kim_storm:nn:6.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4111638F-4744-4F04-8AA4-AE02F4486F9D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/280639","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9491.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/27086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5160","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/280639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9491.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/27086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1789","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsx:newsx:1.4_pl6:*:*:*:*:*:*:*","matchCriteriaId":"3B5AD1F7-24DB-42A4-B3B1-DAD66E9F0D83"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9583.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5240","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9583.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1790","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"EC01670D-4550-4034-86A5-7879B6334241"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281914","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9580.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5213","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/281914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9580.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1791","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-004.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10273.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5895","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-004.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10273.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1792","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long request that is split into multiple packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fake_identd:fake_identd:0.9:*:*:*:*:*:*:*","matchCriteriaId":"26ADFBE8-1EFB-4875-8B24-974FDE6A79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fake_identd:fake_identd:0.9b:*:*:*:*:*:*:*","matchCriteriaId":"B73A4A7E-37DC-4347-9A7A-B0444F44EB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fake_identd:fake_identd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"61B38F88-C4EB-4E84-9DDD-89674F7E14EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fake_identd:fake_identd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4639E2CC-04A4-4BAB-9FAB-5DF039D4C4DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fake_identd:fake_identd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"78A7BC26-EA44-4226-AE2C-78CD05B8EDBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fake_identd:fake_identd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1F9ECABC-6AAE-4147-A707-80E0C36B7E26"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284953","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9731.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5351","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://online.securityfocus.com/archive/1/284953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9731.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1793","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.5:*:*:*:*:*:*:*","matchCriteriaId":"2609CA23-B892-428D-93D1-D210B8D5741D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.6:*:*:*:*:*:*:*","matchCriteriaId":"129075F9-F03E-4298-8515-5A046816C7C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*","matchCriteriaId":"1D462D6F-EB68-4E31-87FD-D918F5DEF3FB"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10206.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5791","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/advisories/4502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10206.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1794","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux_integration:b.02.00:*:*:*:*:*:*:*","matchCriteriaId":"22A26F71-2F31-4F3B-B170-A59AD8B199D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ldap-ux_integration:b.03.00:*:*:*:*:*:*:*","matchCriteriaId":"3E530E6E-AF1C-438B-B81A-953F471BC3ED"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4512","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-006.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10266.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5839","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5593","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/n-006.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10266.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1795","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:tsac_activex_control:*:*:*:*:*:*:*:*","matchCriteriaId":"CD7A78E3-D25A-4A22-B5C7-6EE10A750C69"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/294938","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10342.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.lac.co.jp/security/english/snsadv_e/56_e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5952","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/294938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10342.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.lac.co.jp/security/english/snsadv_e/56_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1796","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-347"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:chaivm_ezloader:-:*:*:*:*:*:*:*","matchCriteriaId":"490B782C-11BF-47E2-8899-8B462D2D8AA6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hp:laserjet_4100:-:*:*:*:*:*:*:*","matchCriteriaId":"8A1779FF-AF54-49D7-B357-3CB62371FA21"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:laserjet_4500:-:*:*:*:*:*:*:*","matchCriteriaId":"FADCF8F9-297F-43B8-A380-D91FDB66BD98"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:laserjet_4550:-:*:*:*:*:*:*:*","matchCriteriaId":"6EEF0E42-3082-4648-BA3A-3372763F72DD"},{"vulnerable":false,"criteria":"cpe:2.3:h:hp:laserjet_8150:-:*:*:*:*:*:*:*","matchCriteriaId":"E4D75D04-E717-4361-9D62-08DCFF23ED9A"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4317","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9695.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.phenoelit.de/stuff/HP_Chai.txt","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/284648","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5334","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/advisories/4317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9695.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.phenoelit.de/stuff/HP_Chai.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/284648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1797","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:chaivm:*:*:*:*:*:*:*:*","matchCriteriaId":"AFA8AD68-F38D-4049-8124-5EFAFC5A8C4C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284648","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9694.php","source":"cve@mitre.org"},{"url":"http://www.phenoelit.de/stuff/HP_Chai.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5332","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284648","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9694.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phenoelit.de/stuff/HP_Chai.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1798","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a direct request to admin/credit_card_info.php."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-425"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midicart:midicart_php:-:*:*:*:*:*:*:*","matchCriteriaId":"0367FADF-6B51-49C1-BECF-5B872F1B1BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:midicart:midicart_php_maxi:-:*:*:*:*:*:*:*","matchCriteriaId":"B0C57BC0-5C0B-49E7-9904-E4F7F93A344C"},{"vulnerable":true,"criteria":"cpe:2.3:a:midicart:midicart_php_plus:-:*:*:*:*:*:*:*","matchCriteriaId":"E8FCB884-F41C-4E65-A5C1-C8A353142F1D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.iss.net/security_center/static/10306.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5851","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5855","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.iss.net/security_center/static/10306.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1799","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) email parameter to add.php or (2) banurl parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprank:phprank:1.8:*:*:*:*:*:*:*","matchCriteriaId":"6D3021E4-40E3-4184-83B2-9816A044586D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10336.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10336.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1800","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpRank 1.8 stores the administrative password in plaintext on the server and in the \"ap\" cookie, which allows remote attackers to retrieve the administrative password."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprank:phprank:1.8:*:*:*:*:*:*:*","matchCriteriaId":"6D3021E4-40E3-4184-83B2-9816A044586D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10352.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5947","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10352.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1801","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.23:*:*:*:*:*:*:*","matchCriteriaId":"D5662DE5-1F10-4B5F-8CF7-CB20C3244CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.24:*:*:*:*:*:*:*","matchCriteriaId":"B95BBD99-5342-460F-B304-9D55528A0FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.26:*:*:*:*:*:*:*","matchCriteriaId":"73AD4E7B-E03B-4A8E-B68E-83F5C1947A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.27:*:*:*:*:*:*:*","matchCriteriaId":"DE34C2E9-1F43-494D-9C12-03690B040E64"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276133","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9308.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4976","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/276133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9308.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1802","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"EFE4119C-E4A0-405F-AF9A-DAE023F79862"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0286.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/293161","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5785","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0286.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/293161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1803","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5796","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1804","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:npds:npds:4.8:*:*:*:*:*:*:*","matchCriteriaId":"E6D565FC-1787-4076-8C5F-265D6BFF9D3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5797","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1805","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dacode:dacode:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3FA9B94D-BA56-4CB7-BB4A-7BBC1B83A058"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5798","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1806","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drupal:drupal:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E0CA1165-C304-48FA-9676-08EC5284C847"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5801","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1807","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3EAD02-CF8D-4154-9A67-9774BA4029AB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5802","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10173.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1808","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zack_coburn:meunity_community_system:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E4BDAFE-2105-4AA1-87B8-50EAE47D4B00"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0179.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10369.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5957","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10369.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1809","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0185.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9902.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0185.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9902.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1810","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dwl-900ap\\+_firmware:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D3895DC9-E71A-4FFB-B40F-AF7A85A742C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:dlink:dwl-900ap\\+_firmware:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5B7E0C45-62B9-4FA0-B19F-99A3E2B3E565"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dlink:dwl-900ap\\+:-:*:*:*:*:*:*:*","matchCriteriaId":"21699FDD-7F80-4971-A79B-8B0424540403"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296374","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/10424.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6015","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/296374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/10424.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1811","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:belkin:f5d6130_wnap:ap14g8:*:*:*:*:*:*:*","matchCriteriaId":"42053B48-5D90-48D7-8274-4F305629BFD6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/289112","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9960.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5571","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/289112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9960.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1812","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gdam:gdam:0.933:*:*:*:*:*:*:*","matchCriteriaId":"5DAC71BF-0DD6-4F4A-A952-2FF166EC09B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gdam:gdam:0.942:*:*:*:*:*:*:*","matchCriteriaId":"45C8A3A8-355C-4370-A14C-6F41F63BFB58"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9991.php","source":"cve@mitre.org"},{"url":"http://www.netric.org/advisories/netric-adv007.txt","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5CP0Y0080G.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9991.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netric.org/advisories/netric-adv007.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5CP0Y0080G.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1813","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*","matchCriteriaId":"E80E2514-9F43-48FB-B55E-094F45088D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*","matchCriteriaId":"2E553111-8B78-4B66-95BC-FD0EE897DDC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.0.2938:*:*:*:*:*:*:*","matchCriteriaId":"81FDEE59-4E96-4AA7-BE33-9199CF9EA9BB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0319.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10441.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6027","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0319.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10441.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1814","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:bonobo:*:*:*:*:*:*:*:*","matchCriteriaId":"CD879CDE-5533-4F50-ADFE-C7780961A03A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EC1FF5D-5EAB-44D5-B281-770547C70D68"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*","matchCriteriaId":"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"C1DE93B9-1ADD-4B19-BA32-7D9F9CCD293F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"78D76664-F4AC-470A-9686-3F708922A340"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279676","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9451.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5AP0E0K8AO.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5125","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/279676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9451.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5AP0E0K8AO.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1815","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a ..  (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aquonics_scripting:aquonics_file_manager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"68189C7C-5B8C-405F-A8C2-FC71CDE87A5B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288415","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9929.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5533","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/288415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9929.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1816","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redshift:atphttpd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.4b","matchCriteriaId":"0C118822-3AD5-4E3A-980A-22CC449FA562"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0187.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/7293","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10362.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5956","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0187.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/7293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10362.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1817","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-UX allows attackers to gain privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.2_nt:*:*:*:*:*:*:*","matchCriteriaId":"0C055944-1396-4692-9179-87A29EF23282"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6EAA9C58-CB8A-412F-AA4E-70CD8ECA27F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_hp-ux:*:*:*:*:*:*:*","matchCriteriaId":"848F6883-F72C-4B3A-B5D9-58C719DC02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris:*:*:*:*:*:*:*","matchCriteriaId":"245260CC-E50B-40CC-88DE-94B130922E64"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005204","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://seer.support.veritas.com/docs/238143.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10082.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5688","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1005204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://seer.support.veritas.com/docs/238143.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10082.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1818","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ez_systems:httpbench:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A6473ACC-DCC4-4FEC-9218-4ED507A180B4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/299235","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10589.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6153","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/299235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10589.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1819","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a \"..\" (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyhttpd:tinyhttpd:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"03A1DE1B-E94D-4792-AED1-543848E718DC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/299287","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10596.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6158","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/299287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10596.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1820","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital \"A,\" but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case \"a.\""}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:-:*:*:*:*:*:*","matchCriteriaId":"6644F071-4F2F-4021-BAF2-B5DC3BA2E264"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultimate_php_board_project:ultimate_php_board:1.0:beta:*:*:*:*:*:*","matchCriteriaId":"0BBCBEC8-C540-49DB-AAF6-84A8AAB8B588"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9972.php","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/289417","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5580","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9972.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/289417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1821","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to (1) admin_members.php, (2) admin_config.php, (3) admin_cat.php, or (4) admin_forum.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"63D4AA57-F9FD-423D-8AE9-A6606009152E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"122A4771-B26A-457C-8E97-47BA813E74B6"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005198","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5666","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1822","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4E57CC63-1B22-4589-8C84-F790D5F6BCB3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103726020802411&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10628.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6181","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103726020802411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10628.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1823","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lonerunner:zeroo_http_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E82F6568-D10C-40EA-855D-C4B516CC0D83"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/300066","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10642.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/300066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10642.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1824","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear whether this poses a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/292842","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10180.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5778","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/292842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10180.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1825","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wasd:wasd_http_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"757E1966-F24B-4621-A6E7-BBB5DE753D36"},{"vulnerable":true,"criteria":"cpe:2.3:a:wasd:wasd_http_server:7.2:*:*:*:*:*:*:*","matchCriteriaId":"107A410D-1441-453E-A843-CABABFB31FFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:wasd:wasd_http_server:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"191E74E9-A7AC-435C-908D-AD3BE5BAC8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:wasd:wasd_http_server:7.2.2:*:*:*:*:*:*:*","matchCriteriaId":"023610C4-44A0-44E5-94C6-B460398130A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wasd:wasd_http_server:7.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FD84EA57-2F59-4B07-889C-5F775117026B"},{"vulnerable":true,"criteria":"cpe:2.3:a:wasd:wasd_http_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7524322C-C0D0-49A7-8469-8F2D535508E0"}]}]}],"references":[{"url":"http://wasd.vsm.com.au/ht_root/doc/misc/wasd_advisory_020925.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10213.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/21288","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/293229","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5811","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.teaser.fr/~jlgailly/security/wasd-vuln-2002-09.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://wasd.vsm.com.au/ht_root/doc/misc/wasd_advisory_020925.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10213.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/21288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/293229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5811","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.teaser.fr/~jlgailly/security/wasd-vuln-2002-09.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1826","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:grsecurity:grsecurity_kernel_patch:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"1E8B4803-8997-458A-A62C-F8E1BDC0A57E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273002","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9109.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4762","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/273002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9109.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1827","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*","matchCriteriaId":"76A9602B-8E5A-4BF4-81F5-D1152D09FCAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"EFD0B100-D822-4EBF-8EC9-ADAB8141116B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"196D77DF-E6D4-46D0-BC2C-8804A587CA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B743E5A3-6B15-4877-9424-A1F1A4214B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*","matchCriteriaId":"76A60742-7815-4658-A6F7-147AA48C24B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*","matchCriteriaId":"9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*","matchCriteriaId":"120271B8-08A9-4C21-A108-0DA61095A006"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA859AF-4E4E-4077-8E98-523E617A1DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*","matchCriteriaId":"A9791650-C367-43B6-A0F4-5BB56CE10778"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*","matchCriteriaId":"8340DDA8-77DD-4AEB-B267-F86F64A851B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*","matchCriteriaId":"07DCBBEE-1DF0-40FE-B755-1FC35CF16788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*","matchCriteriaId":"581626E7-47B5-4819-B34F-B6DFD07A12F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*","matchCriteriaId":"8BBE9A4A-8AB9-4A97-A106-970FEB08952C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*","matchCriteriaId":"BD99394C-5408-4A01-8D4E-417FFFFDE9C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*","matchCriteriaId":"AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*","matchCriteriaId":"97D641EF-0B69-45A1-B85E-3C9C93AB9D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*","matchCriteriaId":"8972211B-6A5B-4095-9CBB-CEF4C23C9C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*","matchCriteriaId":"8F81A2AD-90A0-4B97-86A3-92690A0FCA71"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"598F74BA-2B71-435E-92B8-9DEADB3311A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"581E5904-1A2B-49FF-BE3F-D42019AD816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC4C83-4FB9-4344-AFCB-C260659F81DD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274033","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9162.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4822","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.sendmail.org/LockingAdvisory.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/274033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9162.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.sendmail.org/LockingAdvisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1828","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savant:savant_webserver:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BE6A595E-2779-46A2-A091-E01B5EA12CE6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/291791","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10103.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5707","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/291791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10103.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1829","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror attribute in an IMG tag (a variant of CVE-2002-0330), or (3) a glow tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"1713141D-40B0-4338-B697-3A077A080438"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102221487407632&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4819","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9160","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102221487407632&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1830","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2CE48C90-79EA-4333-97BF-8ABD0789D625"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"1713141D-40B0-4338-B697-3A077A080438"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102221487407632&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9160.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4823","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=vuln-dev&m=102221487407632&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9160.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1831","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6D9DCDBD-8628-44CF-8A8F-CF0389B40586"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:2.0:*:*:*:*:*:*:*","matchCriteriaId":"44CE4C95-500A-425E-A41C-6B79D6873BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:2.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE590D-A8FD-4D5F-A082-EA1393BCB72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A6DD36B3-F635-4FB9-856B-215D7FE82AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:3.6:*:*:*:*:*:*:*","matchCriteriaId":"B4EDB077-8CBE-4292-9681-D1FE58771B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"71BA7CF9-3089-4525-A251-12233978E258"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"DFEE276F-4ACC-440B-9F36-FAA7DAD4BAB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"083C6323-8712-4A42-893D-6A6BE5997689"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274086","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9161.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4827","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/274086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9161.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1832","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the \"ipopts decode\" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service (crash) via certain IP options."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scaramanga:firestorm_ids:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E5267241-1057-4EC8-8276-9799D459FA5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:scaramanga:firestorm_ids:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B165B165-1ECA-4E7A-B6E4-B18A28A44416"},{"vulnerable":true,"criteria":"cpe:2.3:a:scaramanga:firestorm_ids:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"71178BEF-7A06-4CF9-940E-19366000E5FD"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9192.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.scaramanga.co.uk/firestorm/NEWS","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9192.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.scaramanga.co.uk/firestorm/NEWS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1833","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) \"service!\" on Solaris 8.0 or (2) \"administ\" on Windows NT, which allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6110:*:*:*:*:*:*:*:*","matchCriteriaId":"0E4E5482-94AD-4BDD-BAB3-335E2EFE56AC"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6115:*:*:*:*:*:*:*:*","matchCriteriaId":"E485C25D-ABD3-4097-A135-2C7788C7053E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273029","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273078","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273079","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273089","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4765","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4766","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1834","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print jobs directly into the \"print now\" queue or (2) read the scanner job history."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6110:*:*:*:*:*:*:*:*","matchCriteriaId":"0E4E5482-94AD-4BDD-BAB3-335E2EFE56AC"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6115:*:*:*:*:*:*:*:*","matchCriteriaId":"E485C25D-ABD3-4097-A135-2C7788C7053E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273029","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273078","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4766","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1835","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6110:*:*:*:*:*:*:*:*","matchCriteriaId":"0E4E5482-94AD-4BDD-BAB3-335E2EFE56AC"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6115:*:*:*:*:*:*:*:*","matchCriteriaId":"E485C25D-ABD3-4097-A135-2C7788C7053E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273029","source":"cve@mitre.org"},{"url":"http://totally.righteous.net/jedgar/overview_of_security.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4765","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://totally.righteous.net/jedgar/overview_of_security.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1836","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, which may allow remote attackers to modify sensitive files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6110:*:*:*:*:*:*:*:*","matchCriteriaId":"0E4E5482-94AD-4BDD-BAB3-335E2EFE56AC"},{"vulnerable":true,"criteria":"cpe:2.3:h:xerox:docutech_6115:*:*:*:*:*:*:*:*","matchCriteriaId":"E485C25D-ABD3-4097-A135-2C7788C7053E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273029","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273089","source":"cve@mitre.org"},{"url":"http://totally.righteous.net/jedgar/overview_of_security.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4765","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://totally.righteous.net/jedgar/overview_of_security.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9108.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1837","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via \"..\" sequences in the album parameter, which generates different error messages depending on whether the directory exists or not."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ids:ids:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"887E5B32-A6B7-4BE7-93A5-57D03FA2ECE5"}]}]}],"references":[{"url":"http://ids.sourceforge.net/ChangeLog.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274433","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9201.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4870","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ids.sourceforge.net/ChangeLog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/274433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9201.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1838","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steve_sachs:charities.cron:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"EE9D2709-E932-48F9-9213-769FB70F9A29"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_sachs:charities.cron:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E9D0FBEC-014C-45A2-8B01-4FE100660193"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_sachs:charities.cron:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"99515771-6848-4C9E-9D01-C324A81E0A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steve_sachs:charities.cron:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"33B76732-9B93-4A99-B425-614ABAFCAA91"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4869","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.stevesachs.com/charities.cron_CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.stevesachs.com/charities.cron_CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1839","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.52:*:*:*:*:*:*:*","matchCriteriaId":"0B132F48-3C0D-4DC9-9255-BB2D1CEBF855"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274144","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9168.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4830","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/274144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9168.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1840","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"CC775325-9EA0-4E13-A03A-BD315E10C056"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274132","source":"cve@mitre.org"},{"url":"http://real.irssi.org/?page=backdoor","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9176.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4831","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/274132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://real.irssi.org/?page=backdoor","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9176.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1841","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noguska:nola:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE434C5B-9280-4B51-9A65-BAD2AF3759BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:noguska:nola:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19990936-0711-4E89-A169-EA039000E313"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102511114021370&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102520790718208&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/archive/1/280340","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9438.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5116","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=vuln-dev&m=102511114021370&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102520790718208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/archive/1/280340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9438.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1842","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (2) an e-mail address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perlbot:perlbot:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"9DBEE6D0-90AE-4471-B969-0540AF206A21"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296073","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10401.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10402.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5998","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5999","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/296073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10401.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10402.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1843","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perlbot:perlbot:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EC033F64-8DEF-4469-B36D-01C43E37FEB8"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296134","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10403.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10404.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6009","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/296134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10403.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10404.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1844","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.3:*:*:*:*:*:*:*","matchCriteriaId":"D5341552-9A9B-4F79-906B-E58E302CCE7E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*","matchCriteriaId":"91F372EA-3A78-4703-A457-751B2C98D796"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0260.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10398.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6003","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10398.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1845","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.40:*:*:*:*:*:*:*","matchCriteriaId":"E45990B7-1AA5-450C-86B6-33653F332B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.41:*:*:*:*:*:*:*","matchCriteriaId":"183071C9-0D08-4A9C-8566-2F9E81742F40"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296121","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10406.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/296121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10406.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1846","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submitting the change in a profile2 action to index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.40:*:*:*:*:*:*:*","matchCriteriaId":"E45990B7-1AA5-450C-86B6-33653F332B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.41:*:*:*:*:*:*:*","matchCriteriaId":"183071C9-0D08-4A9C-8566-2F9E81742F40"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296121","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/296121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1847","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:-:*:*:*:*:*:*:*","matchCriteriaId":"1CDD85BA-0CDA-4EF2-A447-84A4F7B94B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.3:*:*:*:*:*:*:*","matchCriteriaId":"D5341552-9A9B-4F79-906B-E58E302CCE7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:6.4:*:*:*:*:*:*:*","matchCriteriaId":"1CE4EC55-63B7-409E-9E4D-DBC5A36D2F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7:*:*:*:*:*:*:*","matchCriteriaId":"E5C9557F-DCBF-48BA-9045-AA5DF58F604A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:7.1:*:*:*:*:*:*:*","matchCriteriaId":"C66EBE04-CE6A-4B81-BC09-60DC5DB121E3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/285082","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9727.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5357","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/285082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9727.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1848","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1A0DE39B-0852-4BDC-9592-56004DC9A2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F9E11A57-016E-4720-A266-A53743629CD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F84CBC3F-6A63-4ED0-803E-5D008845A856"},{"vulnerable":true,"criteria":"cpe:2.3:a:tightvnc:tightvnc:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"AF990CCF-70BE-46F6-9360-ECC39B6D6F3B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4835","source":"cve@mitre.org"},{"url":"http://www.tightvnc.com/changelog-win32.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tightvnc.com/changelog-win32.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1849","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with invalid users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parachat:parachat_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D3814119-8804-441D-AFB9-D055B892D8CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0427.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9735.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5370","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0427.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9735.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1850","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Apache HTTP server as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"}]}]}],"references":[{"url":"http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/generators/mod_cgi.c?r1=1.148.2.7&r2=1.148.2.8","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=10515","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=22030","source":"cve@mitre.org","tags":["Issue Tracking","Patch"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=103291952019514&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://seclists.org/bugtraq/2002/Sep/0253.html","source":"cve@mitre.org","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1007823","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/10200.php","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/5787","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/8725","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/generators/mod_cgi.c?r1=1.148.2.7&r2=1.148.2.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=10515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=22030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"http://marc.info/?l=apache-httpd-dev&m=103291952019514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://seclists.org/bugtraq/2002/Sep/0253.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1007823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/10200.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/5787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/8725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1851","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:7.5:*:*:*:*:*:*:*","matchCriteriaId":"BC6CA6D1-772C-4D26-8786-A837B6A7DEC1"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10185.php","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/vna/ips-wsftp.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4850","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10185.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/vna/ips-wsftp.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1852","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"61108B01-9BE4-47EC-81E3-CD3A4FE3F6E7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10226.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10229.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5829","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10226.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10229.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1853","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E4334E96-2103-4626-A051-8E88754B29E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:carlos_sanchez_valle:mynewsgroups:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0D30CA32-5EB9-4280-BD83-D1DCEF1EA0E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/7177","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10238.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/293564","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5836","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/7177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10238.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/293564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1854","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rlaj:rlaj_whois:1.0:*:*:*:*:*:*:*","matchCriteriaId":"16007842-0171-46D3-82B9-870EA4386F42"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279268","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9439.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5113","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/279268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9439.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1855","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23164","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1856","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:application_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"0C264DA8-3348-4941-A779-D8488F149F36"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1857","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jo:jo_webserver:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"0F03FA8A-B357-4B77-A7E6-FC8BC5CAB3FF"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1858","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert47rev1.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert47rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1859","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orionserver:orion_application_server:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"8410F074-5EF4-4C6A-A608-758B5D645A89"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1860","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pramati:pramati_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9490BFCD-0A73-4C9A-86CA-ED54C0F9BB35"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1861","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:easerver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B4940C2F-9ABB-404A-BD0C-BE117FCC1F3D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279582","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/279582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9446.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1862","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the connection before all the data has been sent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtualzone:smartmail_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"77B7DA4E-FA0A-4DE6-8734-B5A79540D265"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0418.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10533.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6074","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10533.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1863","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iomega:network_attached_storage:a300u:*:*:*:*:*:*:*","matchCriteriaId":"6C4C7FA6-95A4-40B7-A1B2-AF1FB93B3101"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10530.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10530.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1864","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a \"..\" (dot dot) in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D61368-7B32-45CB-A130-BDCA5BFB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"42C7A12D-70DF-46A9-A14A-CEBBED8736D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B748388D-6505-443A-A08F-1C4F5BDC90E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"595951BF-3D87-4C1A-8679-5C21E7EC4536"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10070.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5662","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10070.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1865","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-804:4.68:*:*:*:*:*:*:*","matchCriteriaId":"682B925F-6936-473E-B567-401248F9E450"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dl-704:2.56_b5:*:*:*:*:*:*:*","matchCriteriaId":"0E526B60-E8B4-4D52-A9D4-DFAD64422AA7"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dl-704:2.56_b6:*:*:*:*:*:*:*","matchCriteriaId":"CDABE9BE-EB0D-4AC9-8916-C5E1C5365011"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"42622989-F386-4C7F-8F64-7C792075D980"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.37.2:*:*:*:*:*:*:*","matchCriteriaId":"2303BCE5-C79C-470E-A1C8-89BCEF555669"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.37.2b:*:*:*:*:*:*:*","matchCriteriaId":"071EE444-052C-4FF9-83E6-D3E6C42F0448"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.37.9b:*:*:*:*:*:*:*","matchCriteriaId":"26CFCACD-B22F-4CD3-A1A5-D70AEB7A58E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.40.3:*:*:*:*:*:*:*","matchCriteriaId":"A7E62382-218A-4F2A-828F-85A8DE1867DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befw11s4:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"581EDB94-7607-432B-8FD0-8FB8FB587F65"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap11:1.3:*:*:*:*:*:*:*","matchCriteriaId":"F4B03C2B-DAB8-4BB2-BDAC-66340134B5B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap11:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F357B531-7BA8-4081-A689-C56730F7F2CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10537.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6090","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10537.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1866","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D61368-7B32-45CB-A130-BDCA5BFB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"42C7A12D-70DF-46A9-A14A-CEBBED8736D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B748388D-6505-443A-A08F-1C4F5BDC90E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"595951BF-3D87-4C1A-8679-5C21E7EC4536"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10071.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5659","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10071.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5659","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1867","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph-build.cgi, which allows remote attackers to cause a denial of service (CPU consumption)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.23:*:*:*:*:*:*:*","matchCriteriaId":"D5662DE5-1F10-4B5F-8CF7-CB20C3244CC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.24:*:*:*:*:*:*:*","matchCriteriaId":"B95BBD99-5342-460F-B304-9D55528A0FF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bizdesign:imagefolio:2.26:*:*:*:*:*:*:*","matchCriteriaId":"73AD4E7B-E03B-4A8E-B68E-83F5C1947A4A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102373053829427&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9308.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4975","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102373053829427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9308.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1868","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:dispair:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5A70743E-BF6D-48B0-B37C-F1136B223AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_stenberg:dispair:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9F53D700-AB0E-4A34-9284-83EFAE18C4FA"}]}]}],"references":[{"url":"http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9787.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5392","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.contactor.se/~dast/dispair/dispair.cgi?file=dispair-0.3.tar.gz&dir=&view=CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9787.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1869","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW"},"exploitabilityScore":1.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heysoft:eventsave:5.1:*:*:*:*:*:*:*","matchCriteriaId":"F3904208-D3EA-4F05-8F6A-58C568B9DBAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:heysoft:eventsave:5.2:*:*:*:*:*:*:*","matchCriteriaId":"F602B9C7-4B4B-4609-8557-9AC9C6A34604"},{"vulnerable":true,"criteria":"cpe:2.3:a:heysoft:eventsave\\+:5.1:*:*:*:*:*:*:*","matchCriteriaId":"24B81803-B579-4BD1-8661-9CE8C6BE5E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:heysoft:eventsave\\+:5.2:*:*:*:*:*:*:*","matchCriteriaId":"83A27D19-2E44-4444-BC50-970FEB6DA0A9"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005517","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.heysoft.de/nt/eventlog/hsb01e.htm","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.iss.net/security_center/static/10535.php","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/6095","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1005517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.heysoft.de/nt/eventlog/hsb01e.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.iss.net/security_center/static/10535.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/6095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1870","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D61368-7B32-45CB-A130-BDCA5BFB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"42C7A12D-70DF-46A9-A14A-CEBBED8736D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B748388D-6505-443A-A08F-1C4F5BDC90E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"595951BF-3D87-4C1A-8679-5C21E7EC4536"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10072.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5660","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10072.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1871","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a \"?\" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-45693-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9544.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5208","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-45693-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9544.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1872","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"7C1304C5-2A47-4062-B1CD-E56F1F81A81A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:6.5:*:*:*:*:*:*:*","matchCriteriaId":"08CB788D-CFEC-4F8B-9158-8A15319FAB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/298361","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10542.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.nextgenss.com/papers/tp-SQL2000.pdf","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6097","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/298361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10542.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.nextgenss.com/papers/tp-SQL2000.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1873","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"34300FD4-EC3B-4206-B6C0-1345F17EC5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"47132D0D-7691-40A3-A4BF-37D2ACE580C3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/286220","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9789.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5412","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/286220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9789.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1874","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:0.9-1-1:beta:*:*:*:*:*:*","matchCriteriaId":"9F3AA8DC-D1E9-49FD-B76C-CAB5057C3CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:0.9-5-1:beta:*:*:*:*:*:*","matchCriteriaId":"84B47FFC-F749-45A2-A078-A0A59BF1D062"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:0.9-7-3:beta:*:*:*:*:*:*","matchCriteriaId":"D93A4872-716C-48DA-BBA9-51B6B1A47EFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:1.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"CC9129CE-04C3-4E0A-B33F-2D09A6960092"},{"vulnerable":true,"criteria":"cpe:2.3:a:astrocam:astrocam:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"CACAA884-D48E-4F68-A768-17EC528E579B"}]}]}],"references":[{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005523","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10538.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6105","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10538.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1875","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the entercept_agent account and conceal their identity."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:entercept_agent:2.5:*:win32:*:*:*:*:*","matchCriteriaId":"30A37DF0-5387-4294-9AFC-14F37827231C"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-07/0010.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9546.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5206","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-07/0010.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9546.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1876","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"34300FD4-EC3B-4206-B6C0-1345F17EC5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"47132D0D-7691-40A3-A4BF-37D2ACE580C3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/286220","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9791.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5413","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/286220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9791.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1877","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fm114p:*:*:*:*:*:*:*:*","matchCriteriaId":"205820B8-9492-4F86-9DD0-05BBF2B00989"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/290849","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10061.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5667","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/290849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10061.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1878","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3AAD2937-EA09-4AFB-936B-B825E1A4A311"},{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"DFBC5AD8-D20C-4819-9F66-B807E0F7F07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"46746F4A-4CA9-4876-B839-D00F73B88FC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/W-Agora.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9317.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4977","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.w-agora.net/current/view.php?site=support&bn=support_dl&key=1023878911&first=1023878911&last=957369563","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/W-Agora.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9317.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.w-agora.net/current/view.php?site=support&bn=support_dl&key=1023878911&first=1023878911&last=957369563","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1879","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokwa:lokwabb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F108B4A5-CCE4-4A76-B0F4-2A2342F25BD2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9318.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4981","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9318.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1880","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lokwa:lokwabb:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D3112286-3B53-4BE9-BEF3-52ACDFCD2DD5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1881","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*","matchCriteriaId":"BAB0102B-7F42-40EA-AD40-B67C6942F860"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EF005FC1-50A0-4233-A500-1E677EACDBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*","matchCriteriaId":"6BB0BE19-EB29-4DEB-883C-89CB2023E54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*","matchCriteriaId":"4B2A9976-1883-4D49-A512-C66FF12FDDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*","matchCriteriaId":"C20DFF23-6215-4860-B091-ECC1C1C08DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"8E1B943A-38AD-4472-B143-B66567EBC9E0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0088.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9843.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5445","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9843.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1882","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.1:*:*:*:*:*:*:*","matchCriteriaId":"34112DA5-C0B6-46E9-A69F-02F24BDBA6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.2:*:*:*:*:*:*:*","matchCriteriaId":"F6883CFF-B2CB-4B75-8E6B-938A78CF7DFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.3:*:*:*:*:*:*:*","matchCriteriaId":"9134636B-0CF6-41BE-8C5F-BB6C0C55A199"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.4:*:*:*:*:*:*:*","matchCriteriaId":"5B512964-2367-4C55-BB75-9EBFB3707179"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5:*:*:*:*:*:*:*","matchCriteriaId":"1DC2C3EF-B1A4-4BF9-B534-A7ABB6490CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*","matchCriteriaId":"BC900808-1118-4FC0-9E48-380A02394F45"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10285.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdf","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5901","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10285.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1883","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qt_assistant:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F1195577-4F4F-463F-B675-DFEE3EAEDE89"}]}]}],"references":[{"url":"http://lists.trolltech.com/qt-interest/2002-09/thread00549-0.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/293556","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10227.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5833","source":"cve@mitre.org"},{"url":"http://lists.trolltech.com/qt-interest/2002-09/thread00549-0.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/293556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10227.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1884","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to \"admin\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:py-membres:py-membres:3.1:*:*:*:*:*:*:*","matchCriteriaId":"F63D9F28-F7C4-46C6-8B86-F6ED1221B5BF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10308.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5849","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10308.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1885","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EEEA724B-27B6-4542-A480-A6D96086821D"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C7984E0B-1DA6-4B1F-80D1-488882EF99C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerphlogger:powerphlogger:2.2.2a:*:*:*:*:*:*:*","matchCriteriaId":"3176D208-293F-4CF3-83AA-98A7B73C908B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10309.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5860","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10309.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1886","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tightauction:tightauction:3.0:*:*:*:*:*:*:*","matchCriteriaId":"491F7DF0-E28F-47A4-A103-CF2DCCC9D38C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10310.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5850","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10310.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1887","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gregory_kokanosky:phpmynewsletter:0.6.10:*:*:*:*:*:*:*","matchCriteriaId":"E5AC3DB4-5CA3-4AA8-9F61-ECD87B90EE8E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0060.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/7220","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10288.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/7220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10288.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1888","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:commonname:commonname_toolbar:3.5.2.0:*:*:*:*:*:*:*","matchCriteriaId":"578ABA17-568B-4A1A-BE4A-BEC6EB1BE7BB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0043.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10293.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5878","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10293.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1889","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logsurfer:logsurfer:1.5:*:*:*:*:*:*:*","matchCriteriaId":"57B55D8D-ED38-4909-BCA1-8F51B0CA933E"},{"vulnerable":true,"criteria":"cpe:2.3:a:logsurfer:logsurfer:1.5a:*:*:*:*:*:*:*","matchCriteriaId":"B415A5B7-77E5-4702-B308-761A2BCBD031"},{"vulnerable":true,"criteria":"cpe:2.3:a:logsurfer:logsurfer:1.41:*:*:*:*:*:*:*","matchCriteriaId":"BB986CC7-081B-4524-ACDD-2FE2B28152F1"}]}]}],"references":[{"url":"ftp://ftp.cert.dfn.de/pub/tools/audit/logsurfer/logsurfer.README.asc","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294131","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10287.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5898","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.cert.dfn.de/pub/tools/audit/logsurfer/logsurfer.README.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/294131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10287.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1890","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:rhmask:1.0-9:*:*:*:*:*:*:*","matchCriteriaId":"3247FE48-6643-4559-96C0-54C18304ACB0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276317","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9335.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4984","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9335.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1891","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ayman_akt:ircit:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7477A4FA-6299-45D3-822F-B5250B0147B5"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276537","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9340.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4998","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/276537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9340.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1892","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fvs318:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE59DCA1-F551-46D8-8B80-F9F902F4D5FD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0133.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00004.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10216.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5830","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0133.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10216.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1893","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:argosoft_mail_server:1.8.1.9:*:pro:*:*:*:*:*","matchCriteriaId":"1E1CE4B3-AC43-4311-82A9-085F3C8D59E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0085.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10301.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5906","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10301.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1894","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/300362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10653.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phpbb.com/phpBB/viewtopic.php?t=56283","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6195","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/300362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10653.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phpbb.com/phpBB/viewtopic.php?t=56283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1895","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C0CDF9E1-9412-450E-B1D4-438F128FFF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7641278D-3B8B-4CD2-B284-2047B65514A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10348.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10348.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1896","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alsaplayer:alsaplayer:0.99.71:*:*:*:*:*:*:*","matchCriteriaId":"94E7E917-A1F2-41B8-8D0F-AA1C81CE5FB4"}]}]}],"references":[{"url":"http://alsaplayer.org/changelog.php3","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10157.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5767","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://alsaplayer.org/changelog.php3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10157.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1897","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4DD2E017-6046-44CF-92E3-60B96666ADFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B30A5DB6-3FF2-436E-BFB6-B9A5FD911E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4DBC53A0-8994-470A-ACD0-A06DE4BBE8BF"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Oct/0177.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10349.php","source":"cve@mitre.org"},{"url":"http://www.mywebserver.org/us/downloads/whats_new_in_this_version.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5954","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/lists/bugtraq/2002/Oct/0177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10349.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mywebserver.org/us/downloads/whats_new_in_this_version.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1898","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:terminal:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.1","matchCriteriaId":"4BA786C7-14EB-47CD-A3D1-9FACA63A1143"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"}]}]}],"references":[{"url":"http://apple.slashdot.org/apple/02/09/21/122236.shtml?tid=172","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2002/Sep/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10156.php","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/5768","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://apple.slashdot.org/apple/02/09/21/122236.shtml?tid=172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2002/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10156.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/5768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1899","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the \"Full Name\" (addressname) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"DBCCB69B-030D-45F4-A71F-5DD9C3258839"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"B3CA3EF0-5480-493B-B29D-15FEE37C9F3F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0135.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0172.html","source":"cve@mitre.org"},{"url":"http://www.icewarp.com/Products/IceWarp_Web_Mail/releasenotes.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9866.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.icewarp.com/Products/IceWarp_Web_Mail/releasenotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9866.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1900","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pinboard:pinboard:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A6D6E6FE-64EB-40FE-AAB3-346FDF859FE7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4988","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1901","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bodo_bauer:bbgallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"EE974DA3-F04F-4BEE-9090-DE0545A2E687"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/4992","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1902","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"FD95F968-93AD-471C-B0B9-C1A28996307D"},{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0AA2522D-5E8A-4BFA-9809-F012414E4A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"482D0BCC-6609-4A8C-862F-10725CE8DB72"},{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D8E7B2D1-2F47-46B7-8675-DFD968888441"},{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"87DD2B50-25B1-4343-B039-8DB20589CED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:markus_triska:cgiforum:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58A99599-0233-49DC-B871-CAC4A600D825"}]}]}],"references":[{"url":"http://freshmeat.net/releases/86842/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10055.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4960","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://freshmeat.net/releases/86842/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10055.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1903","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162899\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n","lastModified":"2006-09-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.30:*:*:*:*:*:*:*","matchCriteriaId":"9F7C068F-1664-4022-B88D-E486EEDD501C"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.33:*:*:*:*:*:*:*","matchCriteriaId":"A3F37B4B-C812-46AD-A23B-3FE60D31587D"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.44:*:*:*:*:*:*:*","matchCriteriaId":"8E10453B-C2A8-4203-B8D1-C77D00DE4315"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276029","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9297.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4963","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/276029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9297.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1904","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gaztek:ghttpd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B75C8C65-2943-48DE-8E9E-0306EAB275E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gaztek:ghttpd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F731E52E-AA90-4A17-904F-72EF4BE67D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:gaztek:ghttpd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E7E40185-745E-4A0E-8BED-5679258B9E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:gaztek:ghttpd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"CBBDEDD3-A10B-4824-BB91-B9726A5CF38A"}]}]}],"references":[{"url":"http://lynorics.sundawn.net/prog/ghttpd.html#versionen","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/295141","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10361.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5960","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lynorics.sundawn.net/prog/ghttpd.html#versionen","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/295141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10361.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1905","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:polycom:viavideo:2.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8A7856-E88E-48AD-9040-2BBDEAB4DF9E"},{"vulnerable":true,"criteria":"cpe:2.3:h:polycom:viavideo:3.0:*:*:*:*:*:*:*","matchCriteriaId":"48D6B565-3997-46DA-A13F-368137BB42CA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/295146","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10359.php","source":"cve@mitre.org"},{"url":"http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5964","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://online.securityfocus.com/archive/1/295146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10359.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1906","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:polycom:viavideo:2.2:*:*:*:*:*:*:*","matchCriteriaId":"0A8A7856-E88E-48AD-9040-2BBDEAB4DF9E"},{"vulnerable":true,"criteria":"cpe:2.3:h:polycom:viavideo:3.0:*:*:*:*:*:*:*","matchCriteriaId":"48D6B565-3997-46DA-A13F-368137BB42CA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/295146","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10360.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5962","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://online.securityfocus.com/archive/1/295146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10360.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1907","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telcondex:simplewebserver:2.06.20817:*:*:*:*:*:*:*","matchCriteriaId":"5B713782-424E-4EF3-946C-8F1CF0FB3D06"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/295149","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10367.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5961","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://online.securityfocus.com/archive/1/295149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10367.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1908","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of \"/\" (forward slash) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10370.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5907","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10370.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1909","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:click2learn:ingenium_learning_management_system:5.1:*:*:*:*:*:*:*","matchCriteriaId":"3CA58902-35D8-48B6-816A-EB2640E3B10E"},{"vulnerable":true,"criteria":"cpe:2.3:a:click2learn:ingenium_learning_management_system:6.1:*:*:*:*:*:*:*","matchCriteriaId":"8139F36D-56DA-44A3-A214-304FA5F2731C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/295309","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10387.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5969","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/295309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10387.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1910","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:click-2:ingenium_learning_management_system:5.1:*:*:*:*:*:*:*","matchCriteriaId":"AAFC5CF8-2137-4FCD-BAF8-3C329A1F78D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:click-2:ingenium_learning_management_system:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A7D9A0C9-1A0C-4405-B2EA-673F629129EA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/295309","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/10389.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5970","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/295309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/10389.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1911","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood).  NOTE: the vendor was not able to reproduce the issue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"B3FA13D7-D421-4B5D-B0ED-11BA501638CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"C114E941-4170-4D71-96B2-1E7DF234358A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0238.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10379.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/295434","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5975","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0238.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10379.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/295434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1912","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:skystream:emr5000:1.16:*:*:*:*:*:*:*","matchCriteriaId":"225F3E3C-D2ED-4A41-9701-772EA37F8B78"},{"vulnerable":true,"criteria":"cpe:2.3:h:skystream:emr5000:1.17:*:*:*:*:*:*:*","matchCriteriaId":"147A736D-2779-41D4-8078-DC043CB7355A"},{"vulnerable":true,"criteria":"cpe:2.3:h:skystream:emr5000:1.18:*:*:*:*:*:*:*","matchCriteriaId":"CBD24A47-2974-4217-8CD4-DAF442447F53"}]}]}],"references":[{"url":"http://www.globalintersec.com/adv/skystream-2002021001.txt","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch"]},{"url":"http://www.iss.net/security_center/static/10380.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/295516","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5977","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.globalintersec.com/adv/skystream-2002021001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch"]},{"url":"http://www.iss.net/security_center/static/10380.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/295516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5977","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1913","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpnuke:myphpnuke:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"0D673DA6-49A1-425C-8A59-66479784FD73"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0225.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10396.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5982","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10396.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1914","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dump_project:dump:0.4:beta10:*:*:*:*:*:*","matchCriteriaId":"D6D40EBC-1700-4989-8D7F-A09F6DC0375F"},{"vulnerable":true,"criteria":"cpe:2.3:a:dump_project:dump:0.4:beta29:*:*:*:*:*:*","matchCriteriaId":"035AE381-95A6-428F-8240-0A94D2B2D9F0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283033","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/21520","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9632.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-583.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5264","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/283033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/21520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.iss.net/security_center/static/9632.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-583.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1915","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9DF613C9-DC4A-45F0-BEE1-8450762B0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"441CEF2E-9687-4930-8536-B8B83018BD28"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"55DD3C82-0B7D-4B25-B603-AD6C6D59239A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FC7A39CD-C4B2-4FD9-A450-E5C7A5480174"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283033","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9633.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5265","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/283033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9633.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1916","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pirch:pirch_irc:*:*:*:*:*:*:*:*","matchCriteriaId":"ADB7206B-D126-4933-B4F6-9D25CA17D934"},{"vulnerable":true,"criteria":"cpe:2.3:a:pirch:ruspirch:*:*:*:*:*:*:*:*","matchCriteriaId":"F8988077-4A6B-45AB-AD2B-7ABB23513D32"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10395.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/6F00A205QQ.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10395.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/6F00A205QQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1917","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the \"User Profile: Send Email\" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.3.5_sr1:*:*:*:*:*:*:*","matchCriteriaId":"BA9D0264-484D-4BCF-9250-EB3D3953107F"},{"vulnerable":true,"criteria":"cpe:2.3:a:geeklog:geeklog:1.35:*:*:*:*:*:*:*","matchCriteriaId":"F75D7F33-6DD0-4B15-B953-26F0740C31D3"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283140","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9639.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5271","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/283140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9639.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1918","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors.  NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:gold:*:*:*:*:*:*","matchCriteriaId":"092A2E97-C8C4-4F4F-9EC1-70E64DF0052D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"950834D8-A6CE-4636-9ABC-47528001983D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:sp2:*:*:*:*:*:*","matchCriteriaId":"0D819A49-C10C-47C8-8A82-6CAE4FD5396D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:gold:*:*:*:*:*:*","matchCriteriaId":"CE28EB73-C986-4184-9C82-AC55432B3BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:sp1:*:*:*:*:*:*","matchCriteriaId":"9BA9FEED-B40F-4673-B9D0-265B4BDC6411"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.7:gold:*:*:*:*:*:*","matchCriteriaId":"6FC21845-6911-4FA4-9B9A-19F533ED3E1A"}]}]}],"references":[{"url":"http://www.nextgenss.com/vna/ms-ado.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4849","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10186","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/vna/ms-ado.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1919","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"ABED79BC-78D4-4FD7-98F6-7927517B90E7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0233.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0061.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4861","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1920","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:datawizard:ftpxq:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3E5676E3-313C-475F-9188-C02B9050FD5D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/274279","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9189.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4862","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/274279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9189.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1921","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:*","matchCriteriaId":"B270BC3E-FCB8-4E85-A069-A6AA3D348E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*","matchCriteriaId":"1BFFFBBE-E604-4BCB-A143-E26CD91C0B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288105","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9908.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5511","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/288105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9908.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1922","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"B53F61D2-5FD2-4625-A9FB-8E0258924BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"306C6BDF-C687-4B63-998B-B520DF1D1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DF18ED7C-80BB-4A78-8809-9AAE817876A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1D731A35-E0DB-4F40-A981-C38229A2EB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4053C8E5-5510-4814-A46E-89B81266C29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8E6753AB-DFCF-4D40-8267-645810F7967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4B2B3772-A566-4A51-8B51-68E78C86CB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAFBBAA9-BD46-44E3-9618-D87384E959A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0272.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10407.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5997","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0272.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10407.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1923","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:*","matchCriteriaId":"B270BC3E-FCB8-4E85-A069-A6AA3D348E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*","matchCriteriaId":"E441A8AB-8057-4C0F-A2D8-02CDB125B9CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*","matchCriteriaId":"1BFFFBBE-E604-4BCB-A143-E26CD91C0B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288105","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9909.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5513","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/288105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9909.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1924","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerChute plus 5.0.2 creates a \"Pwrchute\" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apc:powerchute:5.0.2:*:plus:*:*:*:*:*","matchCriteriaId":"8E6AADA3-A409-4CCB-88AB-3C4DB2DED344"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277930","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9413.php","source":"cve@mitre.org"},{"url":"http://www.security.nnov.ru/news2064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5069","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9413.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security.nnov.ru/news2064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1925","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiny_software:tiny_personal_firewall:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D040AB28-0A70-4A37-8F78-97FCA4CEBA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiny_software:tiny_personal_firewall:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"015A6C97-9F95-47B2-AE4B-3C87030670D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiny_software:tiny_personal_firewall:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3463AA90-C156-4005-AFF8-A8982B05CEC6"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00298.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9918.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5525","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00298.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9918.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1926","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aquonics_scripting:aquonics_file_manager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"68189C7C-5B8C-405F-A8C2-FC71CDE87A5B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9929.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5533","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9929.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1927","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aquonics_scripting:aquonics_file_manager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"68189C7C-5B8C-405F-A8C2-FC71CDE87A5B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9930","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1928","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing \"~\" (tilde) or \".bak\" extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2002:*:*:*:*:*:*:*","matchCriteriaId":"087BBF48-CED1-4BC7-B4F9-1F62D0AFCB91"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0265.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10450.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0265.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10450.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1929","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EF4CCDF7-5945-4478-9661-217F823DE9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DFC5717A-E248-406F-A281-C5B2F5368127"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296387","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10416.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/6J00Q0A5PK.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6018","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6020","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/296387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10416.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/6J00Q0A5PK.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1930","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.38:*:*:*:*:*:*:*","matchCriteriaId":"62D6B81E-4362-4FE6-8F28-EAD7C0EEA59A"},{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.39:*:*:*:*:*:*:*","matchCriteriaId":"F17E8AF6-7171-4790-AF9B-BB8BC8A02B09"},{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.40:*:*:*:*:*:*:*","matchCriteriaId":"0AE7DA9E-6D96-43B4-8853-94892ACA8CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.41:*:*:*:*:*:*:*","matchCriteriaId":"93BE60DD-D7EF-46AF-A8B2-8B942E846A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.41b:*:*:*:*:*:*:*","matchCriteriaId":"A0444AD2-4096-44D9-9121-6EB40D0EC604"},{"vulnerable":true,"criteria":"cpe:2.3:a:an:an-httpd:1.41c:*:*:*:*:*:*:*","matchCriteriaId":"BADA8F67-3EEE-4573-BA2C-D38B6366C4C8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0032.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10410.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6012","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10410.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1931","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EF4CCDF7-5945-4478-9661-217F823DE9F0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296387","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10451.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phparena.net/downloads/pafiledb.php?action=license&id=1&file=16","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6021","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/296387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10451.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phparena.net/downloads/pafiledb.php?action=license&id=1&file=16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1932","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the \"Do not overwrite events (clear log manually)\" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/295341","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10377.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5972","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/295341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B329350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10377.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1933","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*","matchCriteriaId":"9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*","matchCriteriaId":"8208AFC9-0EFC-4A90-AD5A-FD94F5542885"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4D4168AE-D19E-482E-8F2B-3E798B2D84E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*","matchCriteriaId":"B5E149E7-B748-44F6-BB55-68D5BF87AF41"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288415","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9946.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5535","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/288415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9946.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1934","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1BDFC05A-697B-4422-8E9E-A4A04F68ABCC"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9637C232-D310-4303-9936-CECF52E78992"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FACC7001-AB2F-4BDE-ADC5-F4E0FED70382"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288383","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9948.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5534","source":"cve@mitre.org"},{"url":"http://www.sys-security.com/archive/advisories/More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://online.securityfocus.com/archive/1/288383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9948.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sys-security.com/archive/advisories/More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-1935","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) \"To\" and \"From\" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1BDFC05A-697B-4422-8E9E-A4A04F68ABCC"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9637C232-D310-4303-9936-CECF52E78992"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FACC7001-AB2F-4BDE-ADC5-F4E0FED70382"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288383","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9949.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5537","source":"cve@mitre.org"},{"url":"http://www.sys-security.com/archive/advisories/More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://online.securityfocus.com/archive/1/288383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9949.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sys-security.com/archive/advisories/More_Vulnerabilities_with_Pingtel_xpressa_SIP-based_IP_phones.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-1936","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of \"*field\", (2) guru account with a password of \"*3noguru\", (3) snmp account with a password of \"snmp\", or (4) dbase account with a password of \"dbase\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:utstarcom:bas_1000:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"DC9069E4-1730-4B63-AEF5-49992D183607"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288866","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9951.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5564","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/288866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9951.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1937","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*","matchCriteriaId":"E5851263-81A6-40AE-8486-E919D5279CC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0D3199-365E-4D26-8D23-6492832EF096"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*","matchCriteriaId":"5081F382-CC20-4C7B-A3F8-08FAF31012D9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0314.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0329.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10442.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10442.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1938","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (ZIELPORT) parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virgil:cgi_scanner:0.9:*:*:*:*:*:*:*","matchCriteriaId":"EBA68DC7-E1C2-4A32-95E6-A25E45681423"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296635","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10444.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6031","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/296635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10444.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1939","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:flashfxp:flashfxp:1.4:*:*:*:*:*:*:*","matchCriteriaId":"0012C0A2-3509-47C7-A2F1-12D82A3E808C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296658","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10445.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6032","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/296658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10445.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1940","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information.  NOTE: it has been reported that this problem is due to the OS and not the application."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jacob_navia:lcc-win32:3.2:*:*:*:*:*:*:*","matchCriteriaId":"7694388F-5FF0-4927-90B8-8EB901233E98"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9749.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5391","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0504.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9749.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1941","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:radiobird_software:web_server_4_everyone:1.28:*:*:*:*:*:*:*","matchCriteriaId":"6F4D55B4-648F-47BA-88DE-065A529D13E1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296759","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10447.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6034","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/296759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10447.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1942","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service (crash) via a large number of concurrent sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5_b5:*:*:*:*:*:*:*","matchCriteriaId":"0DAF1705-A518-4205-9975-04ADA96ECCCE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0507.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0516.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9751.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5394","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0507.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0516.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9751.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1943","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safetp:safetp_server:1.46:*:*:*:*:*:*:*","matchCriteriaId":"E6D58C76-231C-404C-91D4-FA2FED380ADC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/293443","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10210.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5822","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/293443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10210.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1944","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such as nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:surfboard:4200:*:*:*:*:*:*:*","matchCriteriaId":"F95D7915-5C9A-40AC-9ED2-EC12F403EDC5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0429.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10513.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0429.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10513.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1945","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long request to (1) TCP port 25 (SMTP) or (2) TCP port 110 (POP3)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtualzone:smartmail_server:1.0_beta_10:*:*:*:*:*:*:*","matchCriteriaId":"B05BE4B5-0E9E-415F-8ECF-FFDB9A8CF36D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0418.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10512.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6075","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10512.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1946","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the \"Save Password\" option is used, stores the password with a weak encryption scheme (one-to-one mapping) in a registry key, which allows local users to obtain and decrypt the password."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tata:integrated_dialer:1.2.000:*:*:*:*:*:*:*","matchCriteriaId":"E8BB8403-DFE3-435D-8687-2A3891AD0AB8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0438.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10517.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0438.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10517.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2002-1947","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.21:*:*:*:*:*:*:*","matchCriteriaId":"84B5A02C-96AB-46FD-A958-86AC0DFD1F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1B8073-C512-4ACA-8E3F-92D46D63FBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.31:*:*:*:*:*:*:*","matchCriteriaId":"B368FAD0-39A7-4115-9327-1D32BECF2F7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.41:*:*:*:*:*:*:*","matchCriteriaId":"2B3D7B7A-0426-4176-A759-E96024DC492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.42:*:*:*:*:*:*:*","matchCriteriaId":"1E3EFDEE-A99B-4D0E-B6A7-E7C285A5DFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.51:*:*:*:*:*:*:*","matchCriteriaId":"50C3D4D4-246A-4287-AA42-CFDD0C1AE22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.76:*:*:*:*:*:*:*","matchCriteriaId":"F05CF0BA-0606-42E5-A631-D302FF1D59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.77:*:*:*:*:*:*:*","matchCriteriaId":"6A79B7B3-708A-42E4-B4EF-7746F6292DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.78:*:*:*:*:*:*:*","matchCriteriaId":"E2F06BC0-0418-4A1C-BD4A-B7429A6CEA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.79:*:*:*:*:*:*:*","matchCriteriaId":"1817FDA9-31F4-4D4A-A867-386D2F1CDB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*","matchCriteriaId":"23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.85:*:*:*:*:*:*:*","matchCriteriaId":"E9A3F522-6E6D-446C-8694-7AE91F19F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DBB86BC7-4A99-4C5B-9460-CDDA7C4E4041"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0B0813F3-1886-481E-8822-4BD199C4934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*","matchCriteriaId":"6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*","matchCriteriaId":"C1F2D028-F2F9-4CE0-A24B-7DB44D488D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*","matchCriteriaId":"82EE7A9B-5688-4933-95B9-476873D44A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.95:*:*:*:*:*:*:*","matchCriteriaId":"30A57D7A-B989-4D82-B667-029A245AA6D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.96:*:*:*:*:*:*:*","matchCriteriaId":"C664186B-DD40-490B-B2DE-4279B00102F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.97:*:*:*:*:*:*:*","matchCriteriaId":"88E1D6C5-20FE-4514-B618-312BB19E5F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.98:*:*:*:*:*:*:*","matchCriteriaId":"B5017EA5-7188-4293-9FDF-5D23DCB40B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.99:*:*:*:*:*:*:*","matchCriteriaId":"FF6C5F07-330D-46C5-8A8B-8DF734F4640F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:*","matchCriteriaId":"2B4A574A-5B2A-4769-B932-E1736564160A"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10381.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5936","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.webmin.com/changes.html","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10381.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.webmin.com/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1948","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gringotts:gringotts:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"0A9441D2-D331-4A9D-918D-9CD1A1949E0C"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9882.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5488","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9882.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1949","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:iomega:nas_a300u_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"AF0B2E25-AA33-4DCD-A8B5-4CE4714445BD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:iomega:nas_a300u:-:*:*:*:*:*:*:*","matchCriteriaId":"8A28EF2A-797F-4375-B38E-E1B660B370D8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10521.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6092","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10521.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1950","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) the email parameter of add.php or (2) the banner URL (banurl parameter) in the main list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprank:phprank:1.8:*:*:*:*:*:*:*","matchCriteriaId":"6D3021E4-40E3-4184-83B2-9816A044586D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10351.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5946","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10351.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1951","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goahead_software:goahead_webserver:2.1:*:*:*:*:*:*:*","matchCriteriaId":"08178800-0020-4052-AFA8-BC21B10AF491"}]}]}],"references":[{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"cve@mitre.org"},{"url":"http://osvdb.org/81099","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9884.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securiteam.com/securitynews/5MP0C1580W.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/5464","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://freecode.com/projects/embedthis-goahead-webserver/releases/343539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/81099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9884.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securiteam.com/securitynews/5MP0C1580W.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/5464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-1952","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprank:phprank:1.8:*:*:*:*:*:*:*","matchCriteriaId":"6D3021E4-40E3-4184-83B2-9816A044586D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10353.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5948","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10353.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1953","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name parameter, which triggers the overflow when the user selects \"Get Info\" on the buddy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*","matchCriteriaId":"E80E2514-9F43-48FB-B55E-094F45088D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*","matchCriteriaId":"2E553111-8B78-4B66-95BC-FD0EE897DDC4"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/288980","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9950.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5492","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/288980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9950.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1954","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinfo.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-06/0027.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0021.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10355.php","source":"cve@mitre.org"},{"url":"http://www.techie.hopto.org/vulns/2002-36.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-06/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10355.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.techie.hopto.org/vulns/2002-36.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1955","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iomega:nas:a300u:*:*:*:*:*:*:*","matchCriteriaId":"DA964A81-948D-4E38-8991-B72B9302A6D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10523.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6093","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10523.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1956","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rox:filer:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"8107EDB4-A8F1-4759-BC76-35DBB93E44B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rox:filer:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3AEA6AAB-91CB-4C45-B2B4-E78241D07760"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9504.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5172","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9504.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1957","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pen:pen:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7EBF7EE6-FF99-432F-805B-686FA13A8584"},{"vulnerable":true,"criteria":"cpe:2.3:a:pen:pen:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"7C4363F0-EB3C-439C-91DC-30E7C161367D"}]}]}],"references":[{"url":"http://siag.nu/pen/news-0.9.3.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9505.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5152","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://siag.nu/pen/news-0.9.3.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9505.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5152","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1958","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in kmMail 1.0, 1.0a, and 1.0b allows remote attackers to inject arbitrary web script or HTML via (1) javascript in onmouseover or other attributes in \"safe\" HTML tags such as the \"b\" tag, or (2) the Subject field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kmmail:kmmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E4996C23-052A-4514-9DC0-E37498BC10CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kmmail:kmmail:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"5761311C-48DE-4310-92A0-7E670B7BD476"},{"vulnerable":true,"criteria":"cpe:2.3:a:kmmail:kmmail:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"2B747B6E-7B5E-4B8C-AEE5-963E81743B39"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-October/002207.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=191501","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9507.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5173","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6013","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-October/002207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=191501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9507.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1959","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nagios 1.0b1 through 1.0b3 allows remote attackers to execute arbitrary commands via shell metacharacters in plugin output."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"C178226A-CBE8-4ECB-BDA7-1E86C61D2A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b2:*:*:*:*:*:*:*","matchCriteriaId":"5B75383C-C37C-485F-B6D2-B4A7F2F7B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nagios:nagios:1.0_b3:*:*:*:*:*:*:*","matchCriteriaId":"67AF4805-B2EE-40F5-8D92-D2953866AD6B"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9508.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nagios.org/changelog.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5174","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9508.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nagios.org/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1960","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cybozu:share360:1.1:*:*:*:*:*:*:*","matchCriteriaId":"88D6F5FE-219F-415F-B8F2-78801CECC39C"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9510.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5151","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.share360.com/products/s360/Release_Notes.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9510.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.share360.com/products/s360/Release_Notes.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1961","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL whose hostname portion uses a fully qualified domain name (FQDN) that ends in a \".\" (dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4E454259-93F6-4D13-9EF7-5F6F17F95F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3FFFFDA-3FA8-40E3-B154-D19F6DDB1FB0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0032.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0043.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10037.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5634","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10037.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1962","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4E454259-93F6-4D13-9EF7-5F6F17F95F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3FFFFDA-3FA8-40E3-B154-D19F6DDB1FB0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0032.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0043.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10038.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5629","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10038.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1963","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.4.1 through 2.4.19 sets root's NR_RESERVED_FILES limit to 10 files, which allows local users to cause a denial of service (resource exhaustion) by opening 10 setuid binaries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281100","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9515.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/281359","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5178","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/281100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9515.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/281359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1964","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in WesMo phpEventCalendar 1.1 allows remote attackers to execute arbitrary commands via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wesmo:phpeventcalendar:1.1:*:*:*:*:*:*:*","matchCriteriaId":"568E5EA8-2C33-4A46-A305-C89AAA187F24"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/5021","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1965","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Errors.gsl in Imatix Xitami 2.5b4 and 2.5b5 allows remote attackers to inject arbitrary web script or HTML via the (1) Javascript events, as demonstrated via an onerror event in an IMG SRC tag or (2) User-Agent field in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5_b4:*:*:*:*:*:*:*","matchCriteriaId":"65FF9B19-8A3D-4CB6-9AF2-3196AF204E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:imatix:xitami:2.5_b5:*:*:*:*:*:*:*","matchCriteriaId":"0DAF1705-A518-4205-9975-04ADA96ECCCE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277058","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/279269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5025","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/277058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/279269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1966","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in magiccard.cgi in My Postcards Platinum 5.0 and 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:my_postcards:my_postcards_platinum:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0DFC98F3-0BA1-456D-AD76-A142274061B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:my_postcards:my_postcards_platinum:6.0:*:*:*:*:*:*:*","matchCriteriaId":"391C3F4F-681F-485A-A590-F59DE8EF10E6"}]}]}],"references":[{"url":"http://packetstormsecurity.nl/0206-exploits/magiccard_vuln.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/unixfocus/5IP0G2K7FQ.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5029","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0206-exploits/magiccard_vuln.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/unixfocus/5IP0G2K7FQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1967","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service (disconnect) via a long (1) ctcp, (2) primsg, (3) msg, or (4) notice command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_hanson:xircon:1.0_beta_4:*:*:*:*:*:*:*","matchCriteriaId":"1A6A87F3-7C1F-4874-AC09-78A812C993B9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0005.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9516.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5185","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9516.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5185","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1968","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:com21:doxport_1100:2.1.1.106:*:*:*:*:*:*:*","matchCriteriaId":"4F860C81-4E56-490B-A5DF-5AC34086A0C3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0017.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005524","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10543.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10543.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1969","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Magic Notebook 1.0b and 1.1b allows remote attackers to cause a denial of service (crash) via an invalid username during login."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_magic_notebook:the_magic_notebook:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"B17D5071-480C-4A50-A760-554DB4D68BFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_magic_notebook:the_magic_notebook:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"F20B537F-03F9-4911-8A0D-CC11F3944B54"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10562.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6106","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10562.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1970","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snortcenter:snortcenter:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"5B67B799-A255-431E-AD5D-E699D4912A74"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/298587","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10540.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6109","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/298587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10540.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1971","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourcecraft:networking_utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3322E921-79A1-46FC-BC05-1CDA6BB682B1"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/298588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005543","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10541.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6107","source":"cve@mitre.org"},{"url":"http://www.sourcecraft.org/index.php","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/298588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10541.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sourcecraft.org/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1972","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Parallel port powerSwitch (aka pp_powerSwitch) 0.1 does not properly enforce access controls, which allows local users to access arbitrary ports."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sebastian_dehne:pp_powerswitch:0.1:*:*:*:*:*:*:*","matchCriteriaId":"41478ED8-29C3-425C-84D6-01F839FA22B2"}]}]}],"references":[{"url":"http://freshmeat.net/releases/101529/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1005534","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10552.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://freshmeat.net/releases/101529/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1005534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10552.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1973","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:foundation_class_library:7.0:*:*:*:*:*:*:*","matchCriteriaId":"4BE28A60-A979-431A-94C8-1C79B9689064"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:personal_1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"AD283201-D34D-41A1-91CD-1F4F6F65CC42"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0082.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0135.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0144.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0145.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B216562","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B310649","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9529","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0145.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B216562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B310649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1974","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sharp:zaurus:sl-5000d:*:*:*:*:*:*:*","matchCriteriaId":"CB8D34DE-DC84-4B34-83DC-3637CD644348"},{"vulnerable":true,"criteria":"cpe:2.3:a:sharp:zaurus:sl-5500:*:*:*:*:*:*:*","matchCriteriaId":"533F95A4-441A-44D7-A99D-F9EAE522D56C"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281437","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9534.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/281549","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/281652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5200","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/281437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9534.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/281549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/281652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5200","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1975","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of \"A0\" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sharp:zaurus_sl-5000d_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"D77A45A8-14DE-4AB0-8E2B-01F3D2F24D04"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sharp:zaurus_sl-5000d:-:*:*:*:*:*:*:*","matchCriteriaId":"DDCC07C5-0633-49E0-B168-05CA8A72CE5A"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sharp:zaurus_sl-5500_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"76E071CE-EDDA-46F6-97D0-AF49FC1AABC7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sharp:zaurus_sl-5500:-:*:*:*:*:*:*:*","matchCriteriaId":"304BBA12-4A60-4F10-8743-C6E05ECFBF03"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/281437","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9535.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5201","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/1/281437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9535.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-1976","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*","matchCriteriaId":"4817429F-B24F-47E3-BB3B-7EF9036D5F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0279.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284142","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284257","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9676.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5304","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0279.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9676.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1977","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Associates PGP 7.0.4 and 7.1 does not time out according to the value set in the \"Passphrase Cache\" option, which could allow attackers to open encrypted files without providing a passphrase."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6276F384-4A11-43C6-9863-87C401295E9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:pgp:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7819DC8C-8A49-45EB-AB3D-0065FE255490"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9690.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5318","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0313.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0322.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9690.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1978","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"26E4A0A0-E3CC-4C42-9BCD-023A76DEB6C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7DDDB4A5-D4E5-4316-8986-B794C8C33E4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4D9BC89B-FE9D-4B42-AB21-CEB798875FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D36EF6B7-D2D0-45D0-8930-FD79FA4D3869"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"3B2E5FF3-518F-450D-BD75-9A4288C6E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E17D71B7-FD7F-449B-88C6-3910947B711A"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"075BB881-9210-4601-8294-50AB7249C715"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"A030894F-F327-46BC-A20B-549BC2636DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"12D0D5D0-9592-4D53-9BBF-5431B30FADDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"68315B19-7EAB-40F5-9A68-030D45B20153"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0184C1B2-0B35-484C-BDAA-145D06C28828"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3B582D8D-C784-4617-B9EF-84D8266D1F75"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B0B3CD7E-742F-43DD-9179-348D345EBCA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B304AA52-CA2E-4BB6-8083-DA23F5E3666B"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8651AFB6-AE6B-476E-9040-686E8D3B3E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"9D06BB0F-7C38-4D0F-8F1D-DDEA5BA72FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"DE1C3525-3BA8-4198-9932-394E77290863"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"802826A3-6CF8-4821-A186-6BE979CE536D"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.9:*:*:*:*:*:*:*","matchCriteriaId":"ADEB76BF-F6DA-47DF-8212-85700E147D33"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"FA4E6702-F0F0-42CA-A135-839C09C061E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.11:*:*:*:*:*:*:*","matchCriteriaId":"19E45505-ED50-4B82-B75E-930B358A9A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.12:*:*:*:*:*:*:*","matchCriteriaId":"19DA89AA-ADD6-4E9B-BF2F-066533A93EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"2E1436E9-742A-4DD9-A1E7-807083F3799E"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"E48E3505-8D18-461D-B087-D92636359DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"1C14D21A-D868-4243-9746-7E83AE69A6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.16:*:*:*:*:*:*:*","matchCriteriaId":"D8E4E90D-B36B-4EC2-996A-D2733C65F360"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.17:*:*:*:*:*:*:*","matchCriteriaId":"3A77D625-8460-4E4E-A504-E97E37C939B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.18:*:*:*:*:*:*:*","matchCriteriaId":"19380123-9F42-4F75-8940-EE7C09612500"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.19:*:*:*:*:*:*:*","matchCriteriaId":"5C8E384F-10C7-4FD6-B15F-1916DB9DB9F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.20:*:*:*:*:*:*:*","matchCriteriaId":"D70A9AC2-F6B9-4391-8E5D-218FF1633F01"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.21:*:*:*:*:*:*:*","matchCriteriaId":"882D1996-8DC4-4A6B-A78E-EDEBEA160D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.2.22:*:*:*:*:*:*:*","matchCriteriaId":"A8AF3B46-C364-440D-92D5-1CB4136F56EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"FC9FA9F3-6A7F-4546-BF48-771B0105945B"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"80037D62-258E-4037-86DC-502BDDD8DB00"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1E5185D9-640C-4849-A018-C78B66CCE742"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B3E4E0B0-995B-4115-BDA5-165B44795AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"4CD005F7-B67B-481F-BDB3-727CC801BAA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"140AA53E-62B6-48C3-9074-6CEC4F6089FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.7:*:*:*:*:*:*:*","matchCriteriaId":"8CA67F7C-3C37-4984-B668-C58B07C121FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.8:*:*:*:*:*:*:*","matchCriteriaId":"4C67B056-B6F9-48F7-AB7F-8203EDEC0547"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.9:*:*:*:*:*:*:*","matchCriteriaId":"55497D90-7903-42E8-9C44-57012A8DD9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.10:*:*:*:*:*:*:*","matchCriteriaId":"A4EB3C13-9B23-489E-9784-8340629D2AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.11:*:*:*:*:*:*:*","matchCriteriaId":"8A84FC92-0567-45E3-8355-07A31F82F6EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.12:*:*:*:*:*:*:*","matchCriteriaId":"5442D120-BB1A-4CBD-BD93-329B10A2EFF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.13:*:*:*:*:*:*:*","matchCriteriaId":"5E33DB56-7ED3-4AC5-BDF2-E4385BCADAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.14:*:*:*:*:*:*:*","matchCriteriaId":"CF539F65-7FB4-40C2-8429-E0DA405A4D54"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.15:*:*:*:*:*:*:*","matchCriteriaId":"5D5F9210-DD20-4D86-B4F0-74F60A263F5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.16:*:*:*:*:*:*:*","matchCriteriaId":"A6763EC5-36E6-4E34-9268-F4F7EE1F3B02"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.17:*:*:*:*:*:*:*","matchCriteriaId":"95406641-A7DB-4B9F-9212-7DF4E0EEC578"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.18:*:*:*:*:*:*:*","matchCriteriaId":"34A374CF-7F47-468F-A508-A1BCCB855197"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.19:*:*:*:*:*:*:*","matchCriteriaId":"D988022E-2F8B-4134-B5BD-B516448B5F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.20:*:*:*:*:*:*:*","matchCriteriaId":"9AA7B3A1-17F5-4E63-B3EA-B81C17B20D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.21:*:*:*:*:*:*:*","matchCriteriaId":"1459DC62-C5E7-4C77-BA7C-74E6B225E129"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.3.22:*:*:*:*:*:*:*","matchCriteriaId":"7F5BB252-A315-4835-8336-5E014545E88B"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0E5454FF-50A2-4930-B20C-F7F640B88F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"42F5B869-4CAD-4E68-AAF9-CBE7A833A221"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"ACB9F76C-D145-4347-9A4C-1BD243AE68FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D5A01E8E-3D78-4BC3-9C02-CB03FA957C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"9E1D4063-E0DC-4046-9B2A-ED845CE9A0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9731E97D-9B2A-4763-9D7C-0B0294C4648E"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"32108513-D91F-4C99-8EE7-26B1D6C0C295"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"5A71447D-53DF-4CA4-924C-2A7FDFE896C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"587AD4C8-F4B4-4E37-A477-0C29933EF47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"2B2B3061-DA23-4242-98FF-B0C7BFA3AB57"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"A72F8D32-9DA4-4EC5-A90B-D1E7D5D7AADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"5A59E7EB-2492-4F57-B2DE-5E87BE66D361"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.13:*:*:*:*:*:*:*","matchCriteriaId":"8E3DD0D4-1A89-40C5-8DE9-DE618DA20ED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.14:*:*:*:*:*:*:*","matchCriteriaId":"D70F1AEB-6978-4F52-899C-0995FE51F779"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.15:*:*:*:*:*:*:*","matchCriteriaId":"59CCC790-E71E-4CCD-AAF5-D7860C8E5190"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.16:*:*:*:*:*:*:*","matchCriteriaId":"CD56A050-563D-4FB4-9B89-BADFD62ED3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.17:*:*:*:*:*:*:*","matchCriteriaId":"5DE88E2D-FC71-47F8-9BB5-189BFC9D7365"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.18:*:*:*:*:*:*:*","matchCriteriaId":"7BD3C01B-2C0C-4FF4-92CC-9495D26CA80C"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.19:*:*:*:*:*:*:*","matchCriteriaId":"9822472D-99A3-48E5-A96A-5B9A2B60F0BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.20:*:*:*:*:*:*:*","matchCriteriaId":"D53362DF-1BC0-4816-8C0A-E27852DD3AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.21:*:*:*:*:*:*:*","matchCriteriaId":"2A966144-3BD4-4CB8-9FDC-C4028819910E"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.22:*:*:*:*:*:*:*","matchCriteriaId":"A6907EC5-A0D0-448B-9B67-E1EA99700A07"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.23:*:*:*:*:*:*:*","matchCriteriaId":"8E0B777F-0870-4B2F-A809-9B232709B892"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.24:*:*:*:*:*:*:*","matchCriteriaId":"050439CC-D269-4AF2-96D5-3A9D4FA6D5F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.25:*:*:*:*:*:*:*","matchCriteriaId":"4F24A9D1-B4C8-4216-9AD5-61572A550185"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.26:*:*:*:*:*:*:*","matchCriteriaId":"0ADDA4F6-BCD7-45A7-B46F-132F31E06B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.27:*:*:*:*:*:*:*","matchCriteriaId":"391EF94E-1315-4078-9404-28A426AA2687"},{"vulnerable":true,"criteria":"cpe:2.3:a:darren_reed:ipfilter:3.4.28:*:*:*:*:*:*:*","matchCriteriaId":"AA6C86A1-2D96-487E-A494-FC80FC5E7857"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-024.txt.asc","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005442","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10409.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/328867","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6010","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-024.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10409.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/328867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1979","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:legacy_rssa:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2_sp1","matchCriteriaId":"39A02CDD-085D-4351-B28C-5141005116DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:soho:*:*:*:*:*:*:*:*","versionEndIncluding":"5.1.6","matchCriteriaId":"A96FC683-AA27-426C-8D5F-46673722A06F"},{"vulnerable":true,"criteria":"cpe:2.3:h:watchguard:vclass:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2_sp1","matchCriteriaId":"15144365-AD24-4654-A513-AF0D864ED38F"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/328867","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-5EQR65","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/328867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-5EQR65","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1980","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Volume Manager daemon (vold) of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45707","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9545.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5207","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9545.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1981","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 2000 through SQL Server 2000 SP2 allows the \"public\" role to execute the (1) sp_MSSetServerProperties or (2) sp_MSsetalertinfo stored procedures, which allows attackers to modify configuration including SQL server startup and alert settings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:*:*:*:*:*:*:*","matchCriteriaId":"A5D559EE-727C-405C-987C-247973A84D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp1:*:*:*:*:*:*","matchCriteriaId":"4A74EBC1-FD61-4DD1-AC8A-E4B0F333A980"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"4BC2A389-68BF-45B1-833D-96B331844424"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Sep/0009.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10012.php","source":"cve@mitre.org"},{"url":"http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5604","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2002/Sep/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10012.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngssoftware.com/advisories/mssql-sp_MSSetServerProperties.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1982","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"AB7336AF-1276-41F6-8BC9-68B2110A92A5"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9530.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/82/281274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9530.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/82/281274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1983","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/298689","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6114","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10550","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/298689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1984","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of \"CLSID:00022613-0000-0000-C000-000000000046\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Jun/0303.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5094","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jun/0303.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1985","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long \"MAIL FROM\" command, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:incognito_software_inc:ismtp_gateway:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"54450191-7847-4FC0-8AB9-49B9F3B03DA9"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/299232","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10577.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nii.co.in/vuln/ismtp.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6151","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/299232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10577.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nii.co.in/vuln/ismtp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1986","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (\".\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C425BEDA-67B0-4868-B0EE-050CC91DFBBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A3F4B012-BC01-46A7-A824-286C44F124DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4D5D13A-B6B3-4292-8F00-4A74C4389C55"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0074.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10635.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10635.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1987","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a \"\\..\" (backslash dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D8755492-7266-4BC5-87BE-337E48C5DD78"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277225","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9351.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5031","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/277225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9351.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1988","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long variables for non-existent resources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F38D4DA6-469A-45DC-B93D-41C2DB6A22D7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277232","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9352.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5032","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/277232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9352.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1989","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F38D4DA6-469A-45DC-B93D-41C2DB6A22D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0108.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1990","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8862C76C-A7AE-4B0D-81DA-A543DE97E019"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F38D4DA6-469A-45DC-B93D-41C2DB6A22D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D8755492-7266-4BC5-87BE-337E48C5DD78"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/278747","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9419.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5095","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/278747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9419.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5095","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1991","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BFB8C352-B248-4FA3-8F3B-E3557E47145F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/277312","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9369.php","source":"cve@mitre.org"},{"url":"http://www.oscommerce.com/about.php/news%2C72","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/277312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9369.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oscommerce.com/about.php/news%2C72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1992","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:*:*:*:*:*:*:*:*","matchCriteriaId":"ECDAD5E7-FB8E-41CA-89BB-D0D41E3B8AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:*:*:developer:*:*:*:*:*","matchCriteriaId":"8BAC377F-C330-46F8-A219-F44104F50C4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion_professional:*:*:*:*:*:*:*:*","matchCriteriaId":"C2B48563-3108-43C4-BFE7-04D5E52FBC2B"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9460.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23161","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5121","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9460.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/handlers/index.cfm?ID=23161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1993","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B96AD347-5015-4970-AF19-7FA63190206C"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D2F81B1D-B675-4187-A1F3-6E2668A8F7A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8D865197-8C02-40F6-95E6-582A59835AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.10:*:*:*:*:*:*:*","matchCriteriaId":"46DE5E53-D7B4-446E-80D8-310A881F4204"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.11:*:*:*:*:*:*:*","matchCriteriaId":"FFF57F9E-D25E-4E9A-8ECD-57DFA62FCD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.12:*:*:*:*:*:*:*","matchCriteriaId":"274D3B3A-6D86-450F-BE19-B6BBA61213FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.20:*:*:*:*:*:*:*","matchCriteriaId":"8DB413F1-DB04-4280-9D48-1D66E2AE7646"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.21:*:*:*:*:*:*:*","matchCriteriaId":"37108185-A4F9-4F1A-99C6-B992633FBDA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.22:*:*:*:*:*:*:*","matchCriteriaId":"086243EF-071B-466D-9FE1-73521B838002"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.30:*:*:*:*:*:*:*","matchCriteriaId":"B6603479-8B36-46C6-B053-3544BA843FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.31:*:*:*:*:*:*:*","matchCriteriaId":"4720A227-B003-45DD-AB54-AA2E4250B4D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.32:*:*:*:*:*:*:*","matchCriteriaId":"2347F05D-FFF7-4293-BDBF-6DF3995EC748"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:4.33:*:*:*:*:*:*:*","matchCriteriaId":"F3E38FD4-B85A-4B68-836B-AA731CC28D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:affordable_web_space_design:affordable_web_space_design_webbbs:5.0:*:*:*:*:*:*:*","matchCriteriaId":"812D22EE-5ACE-4571-B416-99F39B59EBEC"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00232.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9378.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00232.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9378.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1994","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamecheats:advanced_web_server_professional:1.030000:*:*:*:*:*:*:*","matchCriteriaId":"3FA7FA28-01F5-4ABB-867C-3600D654F181"}]}]}],"references":[{"url":"http://elaboration.8bit.co.uk/projects/texts/advisories/AdvServer.DoS.txt","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/278181","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9410.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5080","source":"cve@mitre.org"},{"url":"http://elaboration.8bit.co.uk/projects/texts/advisories/AdvServer.DoS.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/278181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9410.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1995","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the filnavn parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lebios:phptonuke.php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2586844B-658C-4043-ACD5-BCC1C45869EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0048.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7837.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3807","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0048.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7837.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-1996","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.7:*:*:*:*:*:*:*","matchCriteriaId":"7F30D2AF-1E7F-4426-8D34-84C86408CFA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.62:*:*:*:*:*:*:*","matchCriteriaId":"DB291E9E-3002-4A68-A3E8-B3A6FF4D4E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.63:*:*:*:*:*:*:*","matchCriteriaId":"8738C97F-A6A7-4EC6-84A6-D38A7D2E4E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.64:*:*:*:*:*:*:*","matchCriteriaId":"DD378628-2AA0-4244-A4D7-8591BEB7A926"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.70:*:*:*:*:*:*:*","matchCriteriaId":"ED90D204-84B5-4EA4-B21D-A6CE37E45CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.71:*:*:*:*:*:*:*","matchCriteriaId":"D14AA995-3B50-4B91-9634-0D63B0BD35EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.703:*:*:*:*:*:*:*","matchCriteriaId":"BFC564FD-9700-4979-93C0-BA93E57FEF03"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0288.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0299.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=524777&group_id=27927&atid=392228","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8605.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4350","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0288.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=524777&group_id=27927&atid=392228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8605.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1997","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DC75BACC-90EF-4B4D-A21D-7B5C2698D769"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/265387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4407","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/265387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4407","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1998","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_unix:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"83279CFC-DE3C-494F-9498-8EF487EC2CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"}]}]}],"references":[{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.12/CSSA-2002-SCO.12.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0127.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0129.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8597.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.12/CSSA-2002-SCO.12.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0127.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0129.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8597.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-1999","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:praesidium_webproxy:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6E034FF3-DCA8-4511-90A7-6C41A316D105"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q1/0092.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/m-061.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8606.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4342","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q1/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/m-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8606.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2000","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:acms:4.3:*:*:*:*:*:*:*","matchCriteriaId":"42A3C969-CC1B-420A-A408-8796D8D5584F"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:acms:4.4:*:*:*:*:*:*:*","matchCriteriaId":"E82A6CB2-BB32-44D6-8AC0-EA4648D0FFF5"}]}]}],"references":[{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0813.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8306.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4184","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT0813.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8306.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2001","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jmcce:jmcce:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"AD993E2B-2628-4529-B75B-7002377E9DA0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7980.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3940","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7980.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2002","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3198FD9F-ACB8-4F59-A896-68A3A7287D78"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8863.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.lac.co.jp/security/english/snsadv_e/51_e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4544","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8863.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.lac.co.jp/security/english/snsadv_e/51_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2003","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"AB2B5B59-B0CD-4F49-870B-F8F8BE902965"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E296E409-EF32-48FC-88CB-C38C7CF4A239"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.1a:*:*:*:*:*:*:*","matchCriteriaId":"B9413090-D930-49DB-B7ED-7035C717B821"}]}]}],"references":[{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2004","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"75546AD4-15DD-45FD-AFFB-8A59CB8D401C"},{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:5.0a:*:*:*:*:*:*:*","matchCriteriaId":"5C85EF72-0F04-4705-9BED-C921F5FB7860"}]}]}],"references":[{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"cve@mitre.org"},{"url":"http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2005","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_start:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C1E8E17-C426-424C-82D7-0D54D2B83687"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_start:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2C248C52-F922-458D-9566-0AEA9FEC037A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_web_start:1.0.1_01:*:*:*:*:*:*:*","matchCriteriaId":"D5B745C9-7B4B-4ECD-AE4C-11C332DB08FA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q1/0084.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8483.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4310","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/hp/2002-q1/0084.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8483.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2006","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BAFF8D91-80A2-454A-8B44-A5A889002692"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FEC42876-65AD-476A-8B62-25D4E15D1BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"724A8FF9-8089-4302-8200-08987A712988"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3F97DDB7-E32B-422F-8AEA-07C75DEAD36E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7079F63C-7CA8-4909-A9C8-45C4C1C1C186"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EC829C8E-1061-4F62-BA4B-FE5C7F11F209"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"143BA75E-A186-47EF-A18C-B1A1A1F61C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C0CDF9E1-9412-450E-B1D4-438F128FFF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"32561F50-6385-4D71-AFAC-3D2F8DB55A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"914E1404-01A2-4F94-AA40-D5EA20F55AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"401A213A-FED3-49C0-B823-2E02EA528905"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30899","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30908","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1","source":"cve@mitre.org"},{"url":"http://tomcat.apache.org/security-4.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8932.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4575","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1979/references","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/30899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8932.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2008/1979/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2007","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EC829C8E-1061-4F62-BA4B-FE5C7F11F209"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"143BA75E-A186-47EF-A18C-B1A1A1F61C00"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9208.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/116963","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.procheckup.com/security_info/vuln_pr0205.html","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/security_info/vuln_pr0206.html","source":"cve@mitre.org"},{"url":"http://www.procheckup.com/security_info/vuln_pr0207.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4876","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4877","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4878","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9208.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/116963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.procheckup.com/security_info/vuln_pr0205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/security_info/vuln_pr0206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.procheckup.com/security_info/vuln_pr0207.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2008","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://tomcat.apache.org/security-4.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9394.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5054","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9394.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2009","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"}]}]}],"references":[{"url":"http://tomcat.apache.org/security-4.html","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0286.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4557","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42915","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"cve@mitre.org"},{"url":"http://tomcat.apache.org/security-4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0286.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2010","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FB1B424C-CCA5-41F5-A022-A57F31E5A8CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"7A8A8C9D-5667-42CB-8C6D-9FB6896E05C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"04A77C93-4737-451F-95FA-529D706E5E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:htdig:htdig:3.2.0b3:*:*:*:*:*:*:*","matchCriteriaId":"74EBEB9A-82D9-4B18-85F3-85A8C8CB3D7B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9433.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5091","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9433.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2011","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jon_howell:faq-o-matic:2.711:*:*:*:*:*:*:*","matchCriteriaId":"FA23C58A-C764-42D1-844B-1897F0DEEFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jon_howell:faq-o-matic:2.712:*:*:*:*:*:*:*","matchCriteriaId":"CEC622D2-41FA-4F21-86A8-4B3B0AAAF8CD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0287.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8906.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4565","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0287.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8906.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2012","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause \"unexpected results\" via an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7810.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/advisories/3761","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3796","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7810.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/advisories/3761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2013","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Mozilla as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.4:*:*:*:*:*:*:*","matchCriteriaId":"0B711600-425F-4FF9-BC5E-B8D182A2B9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"213EB326-33D1-4329-A6BB-B1AA1C626E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"61268CF9-E279-4F63-B228-F9ED4B93BB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:*","matchCriteriaId":"C97DE00F-4C73-4C54-918E-D540F2C3297B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.76:*:*:*:*:*:*:*","matchCriteriaId":"C5A07AD2-2293-443A-9A32-316B832A5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"5A823994-786D-41D7-9FA7-FF8058C4AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.78:*:*:*:*:*:*:*","matchCriteriaId":"B4613823-DA14-4BE2-986C-2EED3DB82BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"FA4FBB90-8A52-41B4-B08A-53A86CF56898"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5421CDE-6C31-42FF-8A06-23A6207D1B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.01:*:*:*:*:*:*:*","matchCriteriaId":"6469EB31-32FF-415C-82DD-670513911371"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F112CED-879B-4A19-993A-16858B4EC16C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7D7FA24-4B6F-4D67-95BE-46819033CA6F"}]}]}],"references":[{"url":"http://alive.znep.com/~marcs/security/mozillacookie/demo.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7973.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3925","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://alive.znep.com/~marcs/security/mozillacookie/demo.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7973.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2014","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A80A1E8B-43C8-449F-9B16-01F30D23E3D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0373.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0258.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8038.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3991","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0373.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0258.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8038.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2015","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.703:*:*:*:*:*:*:*","matchCriteriaId":"BFC564FD-9700-4979-93C0-BA93E57FEF03"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8699.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4381","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8699.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2016","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:user-mode_linux:user-mode_linux:2.4.17.8:*:*:*:*:*:*:*","matchCriteriaId":"A9AF5AED-1679-43EC-BA4C-150F1ECA0FE3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0338.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8005.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3973","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0338.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8005.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2017","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sas:base:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1122DC90-2494-46D6-9172-3A23AEAB0127"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:integration_technologies:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C01DEB5E-50AE-4E7E-A7DA-A5415D6D6D66"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253183","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8024.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3994","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8024.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2018","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sas:base:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1122DC90-2494-46D6-9172-3A23AEAB0127"},{"vulnerable":true,"criteria":"cpe:2.3:a:sas:integration_technologies:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C01DEB5E-50AE-4E7E-A7DA-A5415D6D6D66"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/253183","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003406","source":"cve@mitre.org"},{"url":"http://www.sas.com/service/techsup/unotes/SN/004/004201.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3995","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/253183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1003406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sas.com/service/techsup/unotes/SN/004/004201.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2019","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the include_file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BFB8C352-B248-4FA3-8F3B-E3557E47145F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0188.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9369.php","source":"cve@mitre.org"},{"url":"http://www.oscommerce.com/about.php/news%2C72","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5037","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9369.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oscommerce.com/about.php/news%2C72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2020","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rp114:3.26:*:*:*:*:*:*:*","matchCriteriaId":"2AA7BDD8-A286-478C-B8CE-D1FAE323FA4F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0177.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9371.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5036","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9371.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2021","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:woltlab:burning_board:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E2271970-E8FD-42A0-9D29-DFBF515DBD11"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0163.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8841.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4512","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0163.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8841.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2022","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaffe:kaffe_openvm:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C9BC2DED-1F45-44C2-BA89-E10FBD029960"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/vuln-dev/2002/03/msg00050.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8399.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4249","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/vuln-dev/2002/03/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8399.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2023","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local users to read arbitrary files via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yamaguchi:shingo_beep2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"81150285-604A-4A0F-B951-0F9D919477D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:yamaguchi:shingo_beep2:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"59B4883E-0E15-4E81-B173-9B2AB2E59D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:yamaguchi:shingo_beep2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"09DF2CEA-8F5E-4F78-B992-846A2EF3E982"},{"vulnerable":true,"criteria":"cpe:2.3:a:yamaguchi:shingo_beep2:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0FB03679-B5BD-4333-BD05-CCDBD5E5C3B9"}]}]}],"references":[{"url":"http://www.kip.iis.toyama-u.ac.jp/~shingo/beep/package/src/beep2-1.2a.tar.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3859","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kip.iis.toyama-u.ac.jp/~shingo/beep/package/src/beep2-1.2a.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2024","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the information in error messages."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-219"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"6ED34889-9F98-46BC-9176-557484272C05"}]}]}],"references":[{"url":"http://bugs.horde.org/show_bug.cgi?id=916","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8768.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4445","source":"cve@mitre.org"},{"url":"http://bugs.horde.org/show_bug.cgi?id=916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8768.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2025","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:4.6.1:*:*:*:*:*:*:*","matchCriteriaId":"8A8A3D44-0105-4071-97AE-F1B61951F076"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:4.6.3:*:*:*:*:*:*:*","matchCriteriaId":"76ADA94C-3063-4226-AF3D-D2D10B6E99D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:4.6.4:*:*:*:*:*:*:*","matchCriteriaId":"714B415F-44F7-40D6-A2DB-20B39EE40CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"47387F0B-5045-49FD-B4F9-4BCB645C32A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C8EE00D7-3DAB-425C-BF45-23B8CC3D4BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E052235E-7A16-4895-AAC5-05E77EFA4C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CA1BDD28-189B-48B3-B9EB-E102B4E5DB48"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"058980E6-AD9E-4380-8E7D-02C5810DE9EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4E88EE93-FC1B-42CF-A8B6-12E0E4921298"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8DFA3BF-A527-4FBE-B574-7C542DB13DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F8B53D84-D377-4DD5-B7B8-F26B0D0C4141"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"2C5FCD28-FB5E-4C60-B318-152BD9323F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"E76988B0-D865-44C7-B695-3C0A09C6BCE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino_server:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"46B032E6-C9E6-4117-9A7C-7192C4A32283"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0037.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/945e97608fda942a85256b37007905b1?OpenDocument&Highlight=0%2CJCHN547JWV","source":"cve@mitre.org"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/a77f8a5132cce70085256b8000792112?OpenDocument&Highlight=0%2CJCHN4UMKLA","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/253830","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4019","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4020","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/945e97608fda942a85256b37007905b1?OpenDocument&Highlight=0%2CJCHN547JWV","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/a77f8a5132cce70085256b8000792112?OpenDocument&Highlight=0%2CJCHN4UMKLA","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/253830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2026","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP \"220\" message reply."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:browseftp:browseftp_client:1.62:*:*:*:*:*:*:*","matchCriteriaId":"F7A6733F-01EA-42B3-84E2-B71BF0C526D6"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003130","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7793.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3781","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1003130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7793.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2027","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Database of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions, which allows remote attackers to perform unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:doow:doow:0.1:*:*:*:*:*:*:*","matchCriteriaId":"33A4083B-4442-4452-9F89-A880B3C3F963"},{"vulnerable":true,"criteria":"cpe:2.3:a:doow:doow:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8311505C-0434-4892-8C2E-381A4298CA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:doow:doow:0.2:*:*:*:*:*:*:*","matchCriteriaId":"A21F849E-67E2-44E1-BB5D-264FC0FDB928"},{"vulnerable":true,"criteria":"cpe:2.3:a:doow:doow:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"87C46AF3-B6A4-4F66-8D04-79923DE609DC"}]}]}],"references":[{"url":"http://prdownloads.sourceforge.net/doow/doow_v0.2.2.zip?use_mirror=unc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3932","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://prdownloads.sourceforge.net/doow/doow_v0.2.2.zip?use_mirror=unc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2028","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700","source":"cve@mitre.org"},{"url":"http://www.heysoft.de/nt/lbh.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3933","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.heysoft.de/nt/lbh.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2029","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"06F447C8-15FE-44DE-86AD-5E2D496AB2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A4955E57-9C5D-40C2-BD5F-A383FF3C33FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"6A7607F8-6C2A-4976-A861-3BEE1F45002B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/7815.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5ZP030U60U.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3786","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7815.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5ZP030U60U.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2030","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause a denial of service via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sqldata:sqldata_enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5A87CCD9-7E09-4EC0-815A-88649BE552F1"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003123","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7821.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3778","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7821.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2031","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7784.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3779","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/7784.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2032","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A9E1DB3-F0A2-4BD8-9D9D-53CA07B50ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7200662-F3B7-4755-8887-3BEEEDB469F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CB52E20-9A87-4CE4-9E75-B0833F083845"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E87A3E6-935F-4569-8B5F-70A88442FD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D7E4C570-648F-48EF-B965-16C5878A0CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EC3CBB92-6A11-4B5B-A910-B0287AB12846"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C17255B-64E1-4DFF-8C21-8BB1D78A5256"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"E3ED3BFC-C8CF-4537-832C-0D00400AC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.4:*:*:*:*:*:*:*","matchCriteriaId":"8720AE61-41C7-4EA8-8C01-81AC0BFACBCC"}]}]}],"references":[{"url":"http://www.securityfaq.com/unixfocus/5OP041P6BE.html","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/3906","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfaq.com/unixfocus/5OP041P6BE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/3906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2033","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0892B7B0-BA84-4B1F-9CEE-4C75FF153A56"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E8B49C72-CE53-461D-A9B3-945406FC1D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DCB6D529-4045-44FD-BDF4-427766AFD22C"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F8978446-F9C4-4A07-91B0-4CCEE37FBA92"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ADC5BF13-EE14-490E-AD8C-779D6E561F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"6FC6F44A-5876-4C23-A460-ED3B29580CA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E961F6BD-B799-4818-A86E-CFBF56C821C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"46F4E5F5-2667-4E63-901A-785A945EAF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E3E5488E-5497-4988-8A65-E9C27044D984"},{"vulnerable":true,"criteria":"cpe:2.3:a:faqmanager:faqmanager.cgi:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D2E27DC1-E4BA-4C33-941A-27A8BC749CB2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0065.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7833.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3810","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7833.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2034","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_hardin:procmail_email_sanitizer:1.131:*:*:*:*:*:*:*","matchCriteriaId":"6E38E597-E5A0-4196-B579-B8059837F005"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_hardin:procmail_email_sanitizer:1.132:*:*:*:*:*:*:*","matchCriteriaId":"C143D36B-E0D4-49D8-B081-51CAF6A2EEDD"}]}]}],"references":[{"url":"http://www.impsec.org/email-tools/sanitizer-changelog.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7847.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3820","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.impsec.org/email-tools/sanitizer-changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7847.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2035","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password in the login form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realityscape:mylogin_2000:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D6AD1909-776B-4DA2-BC00-6FD392DF9252"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9016.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5CP041P75S.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9016.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5CP041P75S.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2036","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:1.3:*:*:*:*:*:*:*","matchCriteriaId":"341C2AE7-FE84-4038-86F3-0C1393E77A9B"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-44069-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9252.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4911","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-44069-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9252.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2037","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Provisioning Tool (VSPT) runs on default installations of Solaris 2.6 with unnecessary services and without the latest security patches, which allows attackers to exploit known vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:bams:*:*:*:*:*:*:*:*","matchCriteriaId":"65412341-C475-44AD-8CEA-DE5BB43E342D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pgw_2200:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"C412A9AD-5E06-4DC0-BD1D-005761137699"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:sc2200:*:*:*:*:*:*:*:*","versionEndIncluding":"7.4","matchCriteriaId":"B1B16DA7-CE36-436D-8D06-58EADD930587"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vsc3000:*:*:*:*:*:*:*:*","versionEndIncluding":"9.1","matchCriteriaId":"B676067F-A013-4E06-86EE-4121BB54FA7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:vspt:*:*:*:*:*:*:*:*","matchCriteriaId":"752E6984-859E-4B9C-A839-BFB317F9B703"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/Solaris-for-MGC-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7912.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3897","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/Solaris-for-MGC-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7912.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2038","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:bill_abt:next_generation_posix_threading:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"1FD1ECED-3AB5-4598-A17F-3ABC7D6FD593"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9255.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4913","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9255.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2039","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"/bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*","matchCriteriaId":"F05ACD69-8EEF-4D6B-A825-92051DFE9C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102312549511726&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9256.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4914","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=102312549511726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9256.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4914","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2040","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) phrafx and (2) phgrafx-startup programs in QNX realtime operating system (RTOS) 4.25 and 6.1.0 do not properly drop privileges before executing the system command, which allows local users to execute arbitrary commands by modifying the PATH environment variable to reference a malicious crttrap program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*","matchCriteriaId":"F05ACD69-8EEF-4D6B-A825-92051DFE9C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/275218","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9257.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4915","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4916","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/275218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9257.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2041","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in realtime operating system (RTOS) 6.1.0 allows local users to execute arbitrary code via (1) a long ABLANG environment variable in phlocale or (2) a long -u option to pkg-installer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/275218","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9258.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9259.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4917","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4918","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/275218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9258.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9259.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2042","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ptrace in the QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows programs to attach to privileged processes, which could allow local users to execute arbitrary code by modifying running processes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*","matchCriteriaId":"F05ACD69-8EEF-4D6B-A825-92051DFE9C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/275218","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9260.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4919","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/275218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9260.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4919","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2043","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue only affects a third-party patch to Cyrus SASL, not distributed with Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*","matchCriteriaId":"F5B837A3-E1D7-469D-9A2C-1648DB869524"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*","matchCriteriaId":"6D5319DC-7C56-4661-83A6-6F226DD6804F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0020.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8748.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4409","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8748.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2044","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-stat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7DE79EB2-0C14-4282-B901-28FA360C2B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-stat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"90C17C73-CED5-4EAA-9672-1F528126D50C"}]}]}],"references":[{"url":"http://seclists.org/lists/vuln-dev/2002/Mar/0156.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003827","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8468.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4281","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/vuln-dev/2002/Mar/0156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1003827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8468.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2045","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-stat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7DE79EB2-0C14-4282-B901-28FA360C2B76"},{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-stat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"90C17C73-CED5-4EAA-9672-1F528126D50C"}]}]}],"references":[{"url":"http://seclists.org/lists/vuln-dev/2002/Mar/0156.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003827","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4279","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8467","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/vuln-dev/2002/Mar/0156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1003827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2046","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_password cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xqus:x-news:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6080063-2EB4-4DF3-8028-7B7A78F212CD"}]}]}],"references":[{"url":"http://seclists.org/lists/vuln-dev/2002/Mar/0156.html","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/lists/vuln-dev/2002/Mar/0156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/x_holes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2047","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sketch:sketch:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"216FB795-2E9F-4DCD-B445-D847788353CE"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003818","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sketch.sourceforge.net/oldnews.html#N1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8469.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4296","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1003818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sketch.sourceforge.net/oldnews.html#N1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8469.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2048","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a long query value passed to the (1) finger program, (2) -l, (3) -d, and (4) -t options.  NOTE: if PFinger is not setuid or setgid, then this issue would not cross privilege boundaries and would not be considered a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_baumer:pfinger:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"CE4B203A-A7CA-4CCA-8FED-F292F3E7E7A0"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102321152215055&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9269.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102321152215055&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9269.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2049","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dug_song:dsniff:2.3:*:*:*:*:*:*:*","matchCriteriaId":"3BEDEF47-8205-42DD-93B7-100B1F7F1872"},{"vulnerable":true,"criteria":"cpe:2.3:a:dug_song:fragroute:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B6CA105F-3CFF-4A4A-9508-05431452DFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:dug_song:fragrouter:1.6:*:*:*:*:*:*:*","matchCriteriaId":"9EE0B22B-AEC7-4E84-A0CE-F5E3B855446C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0281.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=38716","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9272.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4898","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0281.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=38716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9272.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2050","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in the hostname of a log entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.5:*:*:*:*:*:*:*","matchCriteriaId":"0F559407-D086-4CF3-977F-8102E5F507DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"1BC2BEF1-0D91-46F7-93FA-A37F1668E9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7FC192BF-89EF-4D2D-A8DC-E55F3B6886F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.6:*:*:*:*:*:*:*","matchCriteriaId":"A05D2B41-D918-4E64-AC52-58608CBE85E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"055DF106-40F8-4F01-BD65-2B01AF205CF7"}]}]}],"references":[{"url":"http://jan.kneschke.de/projects/modlogan/download/ChangeLog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7848.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3821","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jan.kneschke.de/projects/modlogan/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7848.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2051","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.5:*:*:*:*:*:*:*","matchCriteriaId":"0F559407-D086-4CF3-977F-8102E5F507DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"1BC2BEF1-0D91-46F7-93FA-A37F1668E9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7FC192BF-89EF-4D2D-A8DC-E55F3B6886F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.6:*:*:*:*:*:*:*","matchCriteriaId":"A05D2B41-D918-4E64-AC52-58608CBE85E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:modlogan:modlogan:0.7.11:*:*:*:*:*:*:*","matchCriteriaId":"055DF106-40F8-4F01-BD65-2B01AF205CF7"}]}]}],"references":[{"url":"http://jan.kneschke.de/projects/modlogan/download/ChangeLog","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7848.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3821","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://jan.kneschke.de/projects/modlogan/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7848.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2052","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scanning a network of hosts for a single open port through the router.  NOTE: the vendor could not reproduce this issue, saying that the original reporter was using an interim release of the software."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(6.5\\):*:*:*:*:*:*:*","matchCriteriaId":"2A759C05-80B5-4A5C-8B9A-C0AC13638EF8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9281.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4947","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9281.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2053","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the same IP address as the interface on which HSRP is running, which causes a loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9283.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4949","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9283.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2054","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the valid_level cookie to admin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teekai:teekai_forum:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1F845E63-035E-4A15-8755-D09C76158E60"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9285.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4925","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9285.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2055","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teekai:teekai_tracking_online:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6CF716C7-4724-4285-B70B-D80DC93AECC2"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9284.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4924","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9284.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2056","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the valid_username_online cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teekai:teekai_forum:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1F845E63-035E-4A15-8755-D09C76158E60"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2057","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/member_log.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teekai:teekai_forum:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1F845E63-035E-4A15-8755-D09C76158E60"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9286.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4926","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=vuln-dev&m=102313697923798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/Teekai.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9286.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2058","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-327"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:teekai:tracking_online:1.0:*:*:*:*:*:*:*","matchCriteriaId":"523720B9-4867-4CE1-B26B-DCC3B67ADB19"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/82/275246","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9286.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4926","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://online.securityfocus.com/archive/82/275246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9286.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2059","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845bg_motherboard:p01-0012:*:*:*:*:*:*:*","matchCriteriaId":"82C92072-5239-4F84-BA71-F94254754010"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845bg_motherboard:p02-0015:*:*:*:*:*:*:*","matchCriteriaId":"50EC7EF9-0347-4462-919E-45856367E97E"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845bg_motherboard:p03-0021:*:*:*:*:*:*:*","matchCriteriaId":"94AC2564-3368-40CE-AA49-7B1B505B25C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845bg_motherboard:p04-0023:*:*:*:*:*:*:*","matchCriteriaId":"B7A214A7-B78E-4CA1-8AF0-8F9F8E261065"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845bg_motherboard:p05-0024:*:*:*:*:*:*:*","matchCriteriaId":"02CF09A7-22EE-4D19-BB9C-00A1BD3AADA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p04-0018:*:*:*:*:*:*:*","matchCriteriaId":"8214CC6A-F7FE-4457-9A20-0FC1D37CACC6"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p05-0022:*:*:*:*:*:*:*","matchCriteriaId":"22068CD2-E63F-418D-A0AF-2D70DBA485D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p06-0024:*:*:*:*:*:*:*","matchCriteriaId":"06756736-D263-4706-816C-722F8CB33D1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p07-0029:*:*:*:*:*:*:*","matchCriteriaId":"58AB600C-6141-45BF-B9D3-5166C2D653BA"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p08-0031:*:*:*:*:*:*:*","matchCriteriaId":"20D8B39E-D936-4EE8-9963-7DDA6C5C5B53"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p09-0035:*:*:*:*:*:*:*","matchCriteriaId":"51D90687-5E00-47AB-9422-18C8A32CE6BA"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p10-0038:*:*:*:*:*:*:*","matchCriteriaId":"3F3516EA-CA40-4FA5-91E6-D309323385DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845hv_motherboard:p11-0040:*:*:*:*:*:*:*","matchCriteriaId":"AB1B0EC5-3F8A-41E1-8174-DD2BDC8C0D7D"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845pt_motherboard:p01-0012:*:*:*:*:*:*:*","matchCriteriaId":"BEE9A0EF-63CD-4756-930F-496ECD191C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845pt_motherboard:p02-0015:*:*:*:*:*:*:*","matchCriteriaId":"49A390D5-B09A-4391-A01C-0E0E3CC0D753"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845pt_motherboard:p03-0021:*:*:*:*:*:*:*","matchCriteriaId":"F1EC4C43-D932-4D51-9DB5-591104E3F599"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845pt_motherboard:p04-0023:*:*:*:*:*:*:*","matchCriteriaId":"AD929E01-A51C-40DA-8D4E-A1606428FBE6"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845pt_motherboard:p05-0024:*:*:*:*:*:*:*","matchCriteriaId":"C0140AB7-149C-488D-BB16-EEEF6CCCBA67"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p04-0018:*:*:*:*:*:*:*","matchCriteriaId":"8A20F484-20CC-434C-AB1F-F7A6E78DBDCE"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p06-0024:*:*:*:*:*:*:*","matchCriteriaId":"1971EF9E-1286-4340-9B37-4436F3DA257B"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p07-0029:*:*:*:*:*:*:*","matchCriteriaId":"9AD0B3EB-5E49-4E4F-9F6E-CFB1E57EC296"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p08-0031:*:*:*:*:*:*:*","matchCriteriaId":"C1E3FBA0-5788-401B-AAE7-9C7550496A0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p09-0035:*:*:*:*:*:*:*","matchCriteriaId":"832EFA02-A6B6-463E-9647-C3B26A4DA986"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p10-0038:*:*:*:*:*:*:*","matchCriteriaId":"70C77D1B-D155-4CC0-A0B2-6E25E9402037"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:d845wn_motherboard:p11-0040:*:*:*:*:*:*:*","matchCriteriaId":"1670E8C7-F511-4C5E-8AE8-6E62ECD07641"}]}]}],"references":[{"url":"ftp://download.intel.com/design/motherbd/bg/P06-0027.pdf","source":"cve@mitre.org"},{"url":"ftp://download.intel.com/design/motherbd/hv/P12-0041d.pdf","source":"cve@mitre.org"},{"url":"ftp://download.intel.com/design/motherbd/pt/P06-0027.pdf","source":"cve@mitre.org"},{"url":"ftp://download.intel.com/design/motherbd/wn/P12-0041d.pdf","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0356.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0017.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8998.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4610","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://download.intel.com/design/motherbd/bg/P06-0027.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://download.intel.com/design/motherbd/hv/P12-0041d.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://download.intel.com/design/motherbd/pt/P06-0027.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://download.intel.com/design/motherbd/wn/P12-0041d.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0356.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8998.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2060","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Links 2.0 pre4 allows remote attackers to crash client browsers and possibly execute arbitrary code via gamma tables in large 16-bit PNG images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twibright_labs:links:2.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"ED25AAE5-274D-4D5F-8354-68B16BFE183F"}]}]}],"references":[{"url":"http://atrey.karlin.mff.cuni.cz/~clock/twibright/links/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9287.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4921","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://atrey.karlin.mff.cuni.cz/~clock/twibright/links/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9287.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2061","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Netscape 6.2.3 and Mozilla 1.0 and earlier allows remote attackers to crash client browsers and execute arbitrary code via a PNG image with large width and height values and an 8-bit or 16-bit alpha channel."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Mozilla as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"D3AB0749-167A-4975-863B-DCF368AA4F9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"36889B90-FD18-4A5A-A732-788240E10FEE"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=157202","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9287.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:074","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=157202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9287.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2002:074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2062","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with \"Enable folder view for FTP sites\" and \"Enable Web content in folders\" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.geocities.co.jp/SiliconValley/1667/advisory02e.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9290.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4954","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.geocities.co.jp/SiliconValley/1667/advisory02e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9290.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2063","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AtGuard 3.2 allows remote attackers to bypass firwall filters and execute prohibited programs by changing the filenames to permitted filenames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atguard:atguard_personal_firewall:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8899B544-9A9F-4D01-B05E-1AEBCC16742A"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0412.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8962.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4620","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0412.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8962.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2064","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebgallery:phpwebgallery:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7F0EE492-82CC-4B8D-A4C2-C03D90E3512C"}]}]}],"references":[{"url":"http://seclists.org/lists/vuln-dev/2002/Apr/0270.html","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/PWG.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4622","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://seclists.org/lists/vuln-dev/2002/Apr/0270.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/PWG.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2065","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*","matchCriteriaId":"576E931E-A40F-4087-B810-9BAA11464452"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*","matchCriteriaId":"D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*","matchCriteriaId":"5F26E6E8-9EAB-4293-B12F-D81973C01447"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*","matchCriteriaId":"AD49942E-171A-44E4-AE84-301F3E39B117"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=3870&release_id=93295","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9296.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4961","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3870&release_id=93295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9296.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2066","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetico:bcwipe:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0","versionEndIncluding":"2.35.1","matchCriteriaId":"4D4DCCCB-6358-40FE-BD1A-2AB29934B3A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetico:bcwipe:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"48992FF9-0E5B-43D7-8F8E-ABBE7F948686"}]}]}],"references":[{"url":"http://www.bcwipe.com/","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.bcwipe.com/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2067","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted."}],"vendorComments":[{"organization":"EAST Technologies","comment":"This issue has been addressed in the latest version of our product, East-Tec Eraser 2007 and you may download it from http://www.east-tec.com","lastModified":"2006-12-20T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:east-tec:eraser:2002:*:*:*:*:*:*:*","matchCriteriaId":"ABA5D086-756A-4E98-89C4-26AFA98989CA"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.east-tec.com/eraser/faq.htm","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.east-tec.com/eraser/faq.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2068","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tolvanen:eraser:5.3:*:*:*:*:*:*:*","matchCriteriaId":"58FA752B-F21C-4A61-B688-812A8FF4E98C"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2069","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.2","versionEndIncluding":"6.5.8","matchCriteriaId":"D3A0768F-FE39-4513-8E92-5C8C3A8262B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:pgp:personal_privacy:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.1.1","matchCriteriaId":"8CF5F157-D19E-4C40-9F32-B21B81113230"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2070","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-459"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accessdata:secureclean:3:build_2.0:*:*:*:*:*:*","matchCriteriaId":"25F329F5-9CC6-4B30-ABAC-FD54F3E78852"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/m-034.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7953.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/251565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/3912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.seifried.org/security/advisories/kssa-003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2071","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibly other services via a TCP SYN scan, as demonstrated using nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:compaq:tru64:4.0e:*:*:*:*:*:*:*","matchCriteriaId":"41610DE1-C3E9-4D1E-91E3-27E7B4BA9841"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0357.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8040.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4011","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0357.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8040.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2072","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.2.2:*:linux_production:*:*:*:*:*","matchCriteriaId":"BDE26D56-B648-495A-8AE4-AA13E362672C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.3.1:*:linux:*:*:*:*:*","matchCriteriaId":"AB5A6F28-5B2E-4020-AC22-5FF1AB5DC0F8"}]}]}],"references":[{"url":"http://ohhara.sarang.net/security/jvmcrash.txt","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003418","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8042.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ohhara.sarang.net/security/jvmcrash.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1003418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8042.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2073","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) ctr parameter in Default.asp and (2) the query string to formslogin.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A503018-356B-46D9-965F-60750B5B7484"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=vulnwatch&m=101235440104716&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8050.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3999","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=vulnwatch&m=101235440104716&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8050.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2074","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:erwin_lansing:mailidx:20010925:*:*:*:*:*:*:*","matchCriteriaId":"B72EE461-C136-4F41-A8C4-F1198EFD1DA7"}]}]}],"references":[{"url":"http://dl.droso.net/mailidx-20020105.tar.gz","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003269","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7965.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3822","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dl.droso.net/mailidx-20020105.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1003269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/7965.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2075","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large contacts number."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001a:*:*:*:*:*:*:*","matchCriteriaId":"2BEA5FE1-267D-41B3-AA41-794DA021C4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2002b:*:*:*:*:*:*:*","matchCriteriaId":"D621635E-5E0B-4DDF-86F1-AB06E21DFA1A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0295.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8909.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0295.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8909.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2076","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BFB8F65D-6224-4781-8B23-BCC7CAD783C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:summit_computer_networks:lil_http:2.2:*:*:*:*:*:*:*","matchCriteriaId":"CB7F9DFF-CEE0-47ED-BC43-BDB7B7F5C12C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0316.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8913.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4576","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0316.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8913.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2077","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an \"alter context\" request, which may allow remote attackers to obtain sensitive information by sniffing the session."},{"lang":"es","value":"El cliente DCOM en Windows 2000 anterior al SP3 no borra la memoria correctamente antes de enviar una solicitud de \"alterar contexto\", lo que puede permitir a los atacantes remotos obtener información sensible mediante el sniffing de la sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367","source":"cve@mitre.org"},{"url":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8739.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4410","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq300367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bindview.com/Services/razor/Advisories/2002/adv_dcom.cfm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8739.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2078","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP USER command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgateoffice:1.05:*:*:*:*:*:*:*","matchCriteriaId":"35EBB70C-EC49-42A9-8650-B8E980EBF0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgatepro:1.05:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2092-1D53-4AE1-8BC7-FFA8D02117DF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ftgate.com/knwldgbs/hotfix.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8749.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.security.nnov.ru/advisories/ftgate.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4427","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ftgate.com/knwldgbs/hotfix.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8749.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.security.nnov.ru/advisories/ftgate.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2079","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mosix_project:mosix:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"F8B54D31-94F4-496A-9C5E-628C756F38E7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openmosix_project:openmosix:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"B690F899-28E6-41DC-A6E6-A758A415C92A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0327.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8927.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4580","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0327.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8927.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2080","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgatepro:1.05:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2092-1D53-4AE1-8BC7-FFA8D02117DF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ftgate.com/knwldgbs/hotfix.htm","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8750.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.security.nnov.ru/advisories/ftgate.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4428","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ftgate.com/knwldgbs/hotfix.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8750.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.security.nnov.ru/advisories/ftgate.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2081","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service (disk consumption) via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\\temp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:*:i386:*:*:*:*:*","matchCriteriaId":"91135137-B22A-4781-B00F-16694DCD79E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:apha:*:*:*:*:*:*","matchCriteriaId":"FB1FE371-F651-4C19-AF3B-010377CA1317"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp1:i386:*:*:*:*:*","matchCriteriaId":"C564694A-4F12-4F60-927A-3A44285F9CE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp1_alpha:*:*:*:*:*:*","matchCriteriaId":"AC0E3DFF-4350-4D9B-8A71-F40F53309C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp2:i386:*:*:*:*:*","matchCriteriaId":"C2E57145-267A-4821-96AC-547C8DD760AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp2_alpha:*:*:*:*:*:*","matchCriteriaId":"AE95FF1F-DC1E-4F88-8787-E3BE137672DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp3:i386:*:*:*:*:*","matchCriteriaId":"68595843-FF27-4BBC-9F41-84C18C4F38A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp3_alpha:*:*:*:*:*:*","matchCriteriaId":"9A2D72A5-8C8F-4461-B8F8-3ECC8CE50F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp4:i386:*:*:*:*:*","matchCriteriaId":"FEE4B545-9001-4420-AA0C-F2B59C13BC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server:3.0:sp4_alpha:*:*:*:*:*:*","matchCriteriaId":"41CAE3CE-1784-42B0-8458-1C6DCE5995C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DD78B678-82A4-4485-BC4A-809A5FB105E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:alpha:*:*:*:*:*:*","matchCriteriaId":"35EBE0A3-F521-4B04-95B7-3C57D3090A20"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp1_alpha:*:*:*:*:*:*","matchCriteriaId":"FF88B4B1-509D-42BE-9694-B42CBA3F0F99"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp2_alpha:*:*:*:*:*:*","matchCriteriaId":"5E666F3A-DB90-451F-B65F-618F51308E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp3_alpha:*:*:*:*:*:*","matchCriteriaId":"20BC46F5-9CDD-44B5-8979-57F811C52C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:site_server_commerce:3.0:sp4_alpha:*:*:*:*:*:*","matchCriteriaId":"A70C4EA8-5E75-436C-857C-35912C35BAE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8053.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4002","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8053.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2082","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FTGate and FTGate Pro 1.05 lock user mailboxes before authentication succeeds, which allows remote attackers to lock the mailboxes of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgateoffice:1.05:*:*:*:*:*:*:*","matchCriteriaId":"35EBB70C-EC49-42A9-8650-B8E980EBF0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:floosietek:ftgatepro:1.05:*:*:*:*:*:*:*","matchCriteriaId":"B2CE2092-1D53-4AE1-8BC7-FFA8D02117DF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8751.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4429","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8751.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2083","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the \"What is this?\" help feature, which can be launched from the Novell Netware login screen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*","matchCriteriaId":"BF45C68A-5F83-4090-A0C1-A09EC2987706"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0151.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0151.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2084","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php of Portix 0.4.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) l and (2) topic parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portix-php:portix-php:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B05E36AE-3714-4917-BF7D-8E3D44A53133"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0279.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1003430","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0279.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1003430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2085","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wwwebbb:wwwebbb_forum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.82_beta","matchCriteriaId":"830A9F24-87B0-4D7D-9914-123A803E7387"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0369.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1003456","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0369.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1003456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2086","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) \"<<script\" in unspecified input fields or (2) a javascript: URL in the src attribute of an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"}]}]}],"references":[{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=544658&group_id=311&atid=100311","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=545933&group_id=311&atid=100311","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4666","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4667","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squirrelmail.org/changelog.php","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9009","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=544658&group_id=311&atid=100311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=545933&group_id=311&atid=100311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squirrelmail.org/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2087","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5FE98699-E21E-4D1C-BD43-F7F62D9AE7BF"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9392.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5044","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5046","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9392.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2088","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mosix_project:clump_os:5.4:*:*:*:*:*:*:*","matchCriteriaId":"383353E4-DD70-4146-B509-98CBF0180D5D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0327.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8928.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4581","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0327.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8928.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2089","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/vuln-dev/2002/06/msg00262.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9411.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5085","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/vuln-dev/2002/06/msg00262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9411.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2090","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F38D4DA6-469A-45DC-B93D-41C2DB6A22D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D8755492-7266-4BC5-87BE-337E48C5DD78"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Jul/0186.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5252","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jul/0186.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2091","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:decfingerd:decfingerd:0.7:*:*:*:*:*:*:*","matchCriteriaId":"27ED41C4-FBFA-4176-B6CD-B81251E5A9C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0314.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9434.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5105","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0314.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9434.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2092","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*","matchCriteriaId":"21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7CBA1B13-B378-4F13-BD13-EC58F15F5C81"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B8C8CAB1-2D8C-4875-A795-41178D48410F"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2D3C937A-E9D8-474A-ABEB-A927EF7CC5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"2A8F8DE7-7A84-4350-A6D8-FCCB561D63B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"C422E343-ADF2-427D-865D-B5C35431EFD1"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1C288A88-11C6-429E-A109-0395D0989264"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"516C6D9A-7483-4E36-A2E0-42698161AD31"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B1F89124-E194-4C7A-B06D-8535B4066AA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"}]}]}],"references":[{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:08.exec.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-001.txt.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/19475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3891","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7945","source":"cve@mitre.org"},{"url":"ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:08.exec.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-001.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/19475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2093","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to \"Output Video\", allows attackers to access a console session by running videoout then videoin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020103-01-I","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3974","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8016","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020103-01-I","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2094","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joetesta:hellbent:0.1:*:*:*:*:*:*:*","matchCriteriaId":"BF5CF158-B6BF-4B2F-BFB7-74627CD4BB1B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7930.php","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/3908","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7930.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/3908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2095","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_testa:hellbent:0.1:*:*:*:*:*:*:*","matchCriteriaId":"564A31DC-3AD3-450F-85EB-BE2BA0C7A381"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7931.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3909","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/7931.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2096","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0001.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0088.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/servlet/tidfinder/2962026","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8736.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4405","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/servlet/tidfinder/2962026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8736.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2097","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.28:*:*:*:*:*:*:*","matchCriteriaId":"A917E7C9-BC1A-4D62-9A89-9D73A748D926"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.29:*:*:*:*:*:*:*","matchCriteriaId":"E0A01622-5254-4B3B-9412-771BE7400FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.30:*:*:*:*:*:*:*","matchCriteriaId":"2A3A5A98-3544-4A95-8436-0DF013B22CD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.8.99:*:*:*:*:*:*:*","matchCriteriaId":"380B471E-92EE-43C3-94CE-486C3D772225"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.9.00:*:*:*:*:*:*:*","matchCriteriaId":"646CEDCC-00A4-44BA-A965-F1EC0105D44B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003252","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3852","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7972","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2098","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axspawn:axspawn:0.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"FCACB321-116B-402D-BB21-7C311F1DA19B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003242","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.dabo.de/software/axspawn.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3824","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7974","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.dabo.de/software/axspawn.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2099","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable.  NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:data_display_debugger:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5E7E8C8A-070E-47D8-A20C-CD92D6929A75"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003241","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7979","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2100","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8611.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4334","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8611.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2101","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an \"about:\" or \"javascript:\" URI in the href attribute of an \"a\" tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8613.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4337","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8613.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2102","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jcraft:jzlib:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2159B54E-BC75-4A91-922D-26E8693B52EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jcraft:jzlib:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F7C58AE2-A96B-4B79-A2C7-2711FDCAF197"},{"vulnerable":true,"criteria":"cpe:2.3:a:jcraft:jzlib:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1BD43D17-84D8-403A-A467-99869FF75E3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jcraft:jzlib:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6560D0F6-FDBD-4C58-BDF7-7DDE89D73FA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jcraft:jzlib:0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B05A83E3-F04D-4E19-9E42-462573B06E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jcraft:jzlib:0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2158F01D-76E2-4694-90C7-96449F44953B"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8627.php","source":"cve@mitre.org"},{"url":"http://www.jcraft.com/jzlib/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4359","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/8627.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jcraft.com/jzlib/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2103","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Apache HTTP server as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"06F447C8-15FE-44DE-86AD-5E2D496AB2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A4955E57-9C5D-40C2-BD5F-A383FF3C33FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"6A7607F8-6C2A-4976-A861-3BEE1F45002B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"}]}]}],"references":[{"url":"http://www.apache.org/dist/httpd/CHANGES_1.3","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8629.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4358","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_1.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8629.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2104","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ganglia:php_rrd_web_client:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6764065F-F25A-47D1-91CB-83E77D826BE8"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003376","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3962","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7999","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7999","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2105","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003308","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3942","source":"cve@mitre.org"},{"url":"http://www.supernature-forum.de/vbb/printthread.php?threadid=6458","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8000","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.supernature-forum.de/vbb/printthread.php?threadid=6458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2106","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikkitikkitavi:wikkitikkitavi:0.5:*:*:*:*:*:*:*","matchCriteriaId":"344DD114-C6A3-4A0C-BA24-74D7700BFFD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikkitikkitavi:wikkitikkitavi:0.10:*:*:*:*:*:*:*","matchCriteriaId":"7C29967D-4B81-4224-935E-62EE1566F187"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikkitikkitavi:wikkitikkitavi:0.20:*:*:*:*:*:*:*","matchCriteriaId":"5E0FADC1-BA13-4FA8-8792-46E1A04C20F7"}]}]}],"references":[{"url":"http://securitytracker.com/id?1003307","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_id=185752","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3946","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8001","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1003307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://sourceforge.net/mailarchive/message.php?msg_id=185752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2107","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veridis:openkeyserver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"DE78B0E6-64CA-4B98-ADB4-00E4D6AF356D"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8651.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5BP0R1P6KE.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4369","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8651.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5BP0R1P6KE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2108","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the \"VAIO Manual\" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows remote attackers to modify data via a web page or HTML e-mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sony:vaio_manual_cybersupport:*:*:*:*:*:*:*:*","matchCriteriaId":"5C5176A9-7207-4D4A-9D7B-725F68CA5E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:sony:vaio_manual_cybersupport:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2F413B54-45F3-4CA5-AF9E-770F2893B9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sony:vaio_manual_cybersupport:3.1:*:*:*:*:*:*:*","matchCriteriaId":"CB38C27F-FC5D-4F09-BEB9-14C818DE7A04"}]}]}],"references":[{"url":"http://vaio-online.sony.com/announcement/announcement_content.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vaio-online.sony.com/announcement/technical_explain.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8009.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3959","source":"cve@mitre.org"},{"url":"http://vaio-online.sony.com/announcement/announcement_content.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vaio-online.sony.com/announcement/technical_explain.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8009.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2109","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E030BDBE-4B0F-4FE1-8115-93E5ACEC591A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2012B4FA-7A4A-4AFF-8961-2A2750B9642B"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.2:*:*:*:*:*:*:*","matchCriteriaId":"C8B21721-890E-498E-92F9-49C080070F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.3:*:*:*:*:*:*:*","matchCriteriaId":"41978011-ADC9-4F22-B2E9-7C45945BCDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"1480C519-2325-427E-B394-2832430F611C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.5:*:*:*:*:*:*:*","matchCriteriaId":"23BF8E39-98A9-4950-91EE-B4F4EAF7FA27"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.6:*:*:*:*:*:*:*","matchCriteriaId":"B565A52D-EA07-4603-91B7-0105E632A2EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.7:*:*:*:*:*:*:*","matchCriteriaId":"C2CA3226-1F70-49A3-8415-2861C82DAF42"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.8:*:*:*:*:*:*:*","matchCriteriaId":"E078DE78-8DD0-42F8-9E58-C7DBDB02DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:matt_wright:formmail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"1301D169-6E80-4917-AD54-9F4F4D3874CA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://worldwidemart.com/scripts/formmail.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8012.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/3954","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://worldwidemart.com/scripts/formmail.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8012.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/3954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2110","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rca:digital_cable_modem:dcm225:*:*:*:*:*:*:*","matchCriteriaId":"D77BEDA0-A9AB-49FC-8D8E-09133A92A7D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:rca:digital_cable_modem:dcm225e:*:*:*:*:*:*:*","matchCriteriaId":"4A49521E-CC07-4409-8515-34091510B87A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8661.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4375","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/8661.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2111","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a large packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tedesco:fwmon:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A06784F-335D-419A-9667-CE1B04D9D014"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tedesco:fwmon:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"87626C49-DE62-4DC7-BA26-287FFDA661C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tedesco:fwmon:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"C6427CA1-618E-4147-BDB6-9FB8497F455A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gianni_tedesco:fwmon:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"9C838B14-0E6D-4CF1-8652-6150107EC75F"}]}]}],"references":[{"url":"http://www.scaramanga.co.uk/fwmon/fwmon-1.0.10.tar.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3984","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8104","source":"cve@mitre.org"},{"url":"http://www.scaramanga.co.uk/fwmon/fwmon-1.0.10.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2112","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the \"public\" community string for SNMP access, which allows remote attackers to read or write MIB information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:rca:digital_cable_modem:dcm225:*:*:*:*:*:*:*","matchCriteriaId":"D77BEDA0-A9AB-49FC-8D8E-09133A92A7D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:rca:digital_cable_modem:dcm225e:*:*:*:*:*:*:*","matchCriteriaId":"4A49521E-CC07-4409-8515-34091510B87A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0336.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8662.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4377","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-03/0336.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8662.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2113","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agh:htmlsearch:1.0:*:*:*:*:*:*:*","matchCriteriaId":"466BF8DF-47A6-4EDB-9506-48A3841A1BF0"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8032.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5WP0R2K60O.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3985","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/8032.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5WP0R2K60O.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/3985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2114","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netjuke:netjuke:1.0_b1:*:*:*:*:*:*:*","matchCriteriaId":"4576B1EF-A21C-452D-9D7F-9AC67C799A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:netjuke:netjuke:1.0_b2:*:*:*:*:*:*:*","matchCriteriaId":"287C2BF5-C7E2-4D6F-B888-4013E3DE2741"},{"vulnerable":true,"criteria":"cpe:2.3:a:netjuke:netjuke:1.0_b3:*:*:*:*:*:*:*","matchCriteriaId":"7C9FE7F5-5202-468E-92ED-1C00EBC58133"},{"vulnerable":true,"criteria":"cpe:2.3:a:netjuke:netjuke:1.0_b4:*:*:*:*:*:*:*","matchCriteriaId":"92BAAAF1-963C-48A2-9345-0C66A7E6575D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netjuke:netjuke:1.0_b5:*:*:*:*:*:*:*","matchCriteriaId":"C73F6B6B-B8EE-46BF-B11E-09E5A7932BB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netjuke:netjuke:1.0_b6:*:*:*:*:*:*:*","matchCriteriaId":"C3F1525B-6FF1-4FB0-BAAD-222617C5835D"}]}]}],"references":[{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=507312&group_id=42076&atid=432052","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3988","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8101","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=507312&group_id=42076&atid=432052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/3988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2115","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns:2.00_pl0:*:*:*:*:*:*:*","matchCriteriaId":"F6D386DF-9A76-4782-97A2-A84E7D63D3FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns:2.00_pl1:*:*:*:*:*:*:*","matchCriteriaId":"DC967EEA-FB91-4C21-A721-81159D266AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns:2.00_pl2:*:*:*:*:*:*:*","matchCriteriaId":"B49B0029-8352-4DB1-B881-DFD94B6963A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns:2.00_pl3:*:*:*:*:*:*:*","matchCriteriaId":"9D970BA0-485B-4E82-B882-745A6981C940"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns:2.00_pl4:*:*:*:*:*:*:*","matchCriteriaId":"0F12B7C4-0E4C-49CC-94DB-46117EF6A391"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns:2.10_pl1:*:*:*:*:*:*:*","matchCriteriaId":"66A9536C-8A8F-4FBA-AA0B-5B1F9B381B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns-lite:0.6:*:*:*:*:*:*:*","matchCriteriaId":"82FDA6AD-EE3F-4F59-9961-B6118CDD25A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns-lite:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0443C2D0-8D23-40E7-A9DB-688C80C91F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hns:hns-lite:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B120C7A6-1E0C-40B3-9B1C-AF8D6E1D1C7B"}]}]}],"references":[{"url":"http://www.h14m.org/SA/2002/hns-SA-2002-01.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8204.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4102","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.h14m.org/SA/2002/hns-SA-2002-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8204.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2116","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rm356:*:*:*:*:*:*:*:*","matchCriteriaId":"14262D17-AC5C-415C-A645-4401D790CDEF"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rt338:*:*:*:*:*:*:*:*","matchCriteriaId":"560D31C9-FDFF-4C71-B591-0CEAEACB5510"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0162.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0183.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8206.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4111","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-02/0183.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8206.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2117","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/8207.php","source":"cve@mitre.org"},{"url":"http://www.safehack.com/Advisory/sh_XPDOS500.txt","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.iss.net/security_center/static/8207.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safehack.com/Advisory/sh_XPDOS500.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]}]}},{"cve":{"id":"CVE-2002-2118","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blue_world_communications:lasso_web_data_engine:3.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E49783A7-966D-41C6-BE61-8ABBC1C338F2"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=101372618504099&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8208.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5NP0B2A6AQ.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4110","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101372618504099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8208.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5NP0B2A6AQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2119","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9229.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4893","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9229.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/4893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2120","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*","matchCriteriaId":"F05ACD69-8EEF-4D6B-A825-92051DFE9C4D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9235.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9236.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4906","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9235.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9236.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2121","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (2) RCPT TO command, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:surfcontrol:superscout_email_filter:3.5.1:*:smtp:*:*:*:*:*","matchCriteriaId":"DFFD44BA-F548-4815-AED9-A134F66EA608"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=101569966118410&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/8424.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4257","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=101569966118410&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/8424.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2122","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pointsec_mobile_technologies:pointsec:1.0:*:palm_os:*:*:*:*:*","matchCriteriaId":"2A037908-628E-484F-B46A-1C20E418803F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0035.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9021.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4681","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0035.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9021.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/4681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2123","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERY_BASEDIR parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"017FB4AC-DCC3-404A-92D5-7F34205DBF05"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/304611","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6489","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/304611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2124","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nylon:nylon:0.2:*:*:*:*:*:*:*","matchCriteriaId":"4E25BBC8-77CD-401E-AC0E-0E03FF61FCE4"}]}]}],"references":[{"url":"http://secunia.com/advisories/7281","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security-express.com/archives/bugtraq/2002-10/0146.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5938","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10334","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security-express.com/archives/bugtraq/2002-10/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2125","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10180.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/292842","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5778","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10180.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/292842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2126","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pedestal_software:integrity_protection_driver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"83F2F0D5-E7E1-4F3D-B766-BC4C599FF247"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0021.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10745.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6295","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10745.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2127","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \\Device\\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pedestal_software:integrity_protection_driver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"83F2F0D5-E7E1-4F3D-B766-BC4C599FF247"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phrack.org/show.php?p=59&a=16","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10747","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phrack.org/show.php?p=59&a=16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10747","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2128","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C81990D8-9704-4585-8613-86A3F2B0F04E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10919.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6463","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10919.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2129","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C81990D8-9704-4585-8613-86A3F2B0F04E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6464","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10920","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2130","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"017FB4AC-DCC3-404A-92D5-7F34205DBF05"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0260.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=64&mode=thread&order=0&thold=0","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10943.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6489","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=64&mode=thread&order=0&thold=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10943.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2131","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl-httpd:perl-httpd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B5E0F40-341F-4B98-B8C9-F34FD4F6BA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl-httpd:perl-httpd:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"713BCA90-B7F1-4ECF-8735-2159A5F66591"}]}]}],"references":[{"url":"http://citrustech.net/~chrisj/perl-httpd/INFO.txt","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10992.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6497","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://citrustech.net/~chrisj/perl-httpd/INFO.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10992.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2132","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:datacenter_server:*:*:*","matchCriteriaId":"28628E93-4651-4857-A706-DE6FD3580C67"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:professional:*:*:*","matchCriteriaId":"ECC01F98-D6F4-4E85-A955-073E60E90AE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:server:*:*:*","matchCriteriaId":"6BBE75E4-3013-4AC2-A6E9-DAB402644335"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:ja:server:*:*:*","matchCriteriaId":"CE1C0272-4570-4F11-8414-12CB9D3BCEE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:advanced_server:*:*:*","matchCriteriaId":"FD093703-ADE8-4E8A-A709-FCDD038C7D35"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:datacenter_server:*:*:*","matchCriteriaId":"035D5A83-D654-413E-8640-622F29B20DFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:professional:*:*:*","matchCriteriaId":"A55C505B-9947-4265-AD6C-8DE0523B4D01"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:server:*:*:*","matchCriteriaId":"E7A27C63-4B55-461B-8383-1A51688027B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:advanced_server:*:*:*","matchCriteriaId":"7614879A-D4A3-47AD-B9ED-BF1215E639A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:datacenter_server:*:*:*","matchCriteriaId":"B0311224-650D-4D20-AF33-59928355F190"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:professional:*:*:*","matchCriteriaId":"56694903-F123-4C9B-9DF3-E78482732FE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:server:*:*:*","matchCriteriaId":"29EA0849-935B-4767-B9CE-3896D0975DBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:advanced_server:*:*:*","matchCriteriaId":"27E3BBCC-B815-4512-B786-17FFC1C09297"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:datacenter_server:*:*:*","matchCriteriaId":"54C7B5CA-D37E-4FDE-A900-B9EAE7ACA65F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:professional:*:*:*","matchCriteriaId":"1A6229F8-7710-44FE-93DA-47AA4E09179E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:server:*:*:*","matchCriteriaId":"AA73DF99-991C-4677-AAB7-C19FAB4405D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*","matchCriteriaId":"70C62E91-94D3-4534-985C-8236D71CC10D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:home:*:*:*","matchCriteriaId":"9D1BD1B0-6241-4FCE-802C-E5E87CE1B97D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:professional:*:*:*","matchCriteriaId":"1D003AE4-9788-46EB-9D0E-2B20F11BAC64"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:*:*:x64:*","matchCriteriaId":"D3B0933F-1AAB-4D68-B85B-A0D917E2A735"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:*:*:home:*:*:*","matchCriteriaId":"BB99BAFD-8F8C-421F-8B44-B3C30B0E35DC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10957.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6483","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0250.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10957.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/6483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2133","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:telindus:1120_adsl_router:6.0.21b_firmware:*:*:*:*:*:*:*","matchCriteriaId":"9FE08E86-4705-4C2D-A5F2-72B71105BCA8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0262.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-02/0277.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10951.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4762","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6919","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-02/0277.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10951.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2134","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peel:peel:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"1E0E9C1B-4543-4AEC-944E-38CAC97F41FE"}]}]}],"references":[{"url":"http://secunia.com/advisories/7797","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10960.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/304779","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6496","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1005869","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10960.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/304779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1005869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2135","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.257","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1618.  Reason: This candidate is a duplicate of CVE-2002-1618.  Notes: All CVE users should reference CVE-2002-1618 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2136","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.297","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1590.  Reason: This candidate is a duplicate of CVE-2002-1590.  Notes: All CVE users should reference CVE-2002-1590 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2137","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and the MAC filter via a \"getsearch\" request to UDP port 27155."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alloy:gl-2422ap-s:*:*:*:*:*:*:*:*","matchCriteriaId":"E479E2A2-E665-407C-90B2-98ED2519C278"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dwl-900ap\\+:b1_2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9B57384-28F5-4E46-8C91-0763F3AF00C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dwl-900ap\\+:b1_2.2:*:*:*:*:*:*:*","matchCriteriaId":"D7F88095-C09D-4B32-9C19-AFCA56D25264"},{"vulnerable":true,"criteria":"cpe:2.3:h:eusso:gl2422_ap:*:*:*:*:*:*:*:*","matchCriteriaId":"B5AE7C2B-3E13-4190-8B23-869CA545F4F3"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap11:2.2:*:*:*:*:*:*:*","matchCriteriaId":"51EC19D0-E959-4F22-BB40-AADF37A672F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:wisecom:gl2422ap-0t:*:*:*:*:*:*:*:*","matchCriteriaId":"74AB2249-644D-404B-84D9-726344639BD0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/298432","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10536.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6100","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/298432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10536.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2138","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RFC-NETBIOS in HP Advanced Server/9000 B.04.05 through B.04.09, when running HP-UX 11.00 or 11.11, allows remote attackers to cause a denial of service (panic) via a malformed UDP packet on port 139."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advanced_server_9000:b.04.05:*:*:*:*:*:*:*","matchCriteriaId":"360B52D4-7A0E-4483-8E29-FE6F49E910EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advanced_server_9000:b.04.06:*:*:*:*:*:*:*","matchCriteriaId":"B3491347-1B86-4EC4-BD4F-93442AA4218C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advanced_server_9000:b.04.07:*:*:*:*:*:*:*","matchCriteriaId":"2EF13E55-C114-4AEF-9A06-6722E88A0706"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advanced_server_9000:b.04.08:*:*:*:*:*:*:*","matchCriteriaId":"87541CAD-FB61-4E29-9B9C-42FE515EA93C"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:advanced_server_9000:b.04.09:*:*:*:*:*:*:*","matchCriteriaId":"4C51EB3C-CBAB-43AA-AA0A-A6359ADF686B"}]}]}],"references":[{"url":"http://online.securityfocus.com/advisories/4268","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9536.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5195","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5654","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/advisories/4268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9536.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2139","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX Firewall 6.0.3 and earlier, and 6.1.x to 6.1.3, do not delete the duplicate ISAKMP SAs for a user's VPN session, which allows local users to hijack a session via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-017.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10660.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6211","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/n-017.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10660.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2140","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"999A0969-60EB-4B2E-A274-9F05D9F840E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"626E41D2-A5EF-493D-9486-3D9BC3793EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EBA31E4D-2215-4E4A-BCCC-B3D922CB752D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEAA3A85-516A-4C9B-8D29-C75C3408FE3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"B976A50F-73BD-44A3-8D73-E15C56BC0C75"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"A42FFBF7-9ADB-4F14-BED8-F2E53BEE7B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"25D16481-CA9A-4B4D-AC9D-3A4F0387FF19"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"56E4588E-6C1F-4720-8082-0EF299435CB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"16939A29-C851-4EAD-A2FF-B13F5FE340FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-017.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10661.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6212","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/n-017.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/pix-multiple-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10661.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2141","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and Express 7.0 and 7.0.0.1, when running Servlets and Enterprise JavaBeans (EJB) on more than one server, will remove the security constraints and roles on all servers for any Servlets or EJB that are used by an application that is undeployed on one server, which could allow remote attackers to conduct unauthorized activities in violation of the intended restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*","matchCriteriaId":"25C711BB-E7E0-41D8-985E-5DD386C54637"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/39","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10291.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5846","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/39","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10291.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2142","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An undocumented extension for the Servlet mappings in the Servlet 2.3 specification, when upgrading to WebLogic Server and Express 7.0 Service Pack 1 from BEA WebLogic Server and Express 6.0 through 7.0.0.1, does not prepend a \"/\" character in certain URL patterns, which prevents the proper enforcement of role mappings and policies in applications that use the extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_integration:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0AB49671-9D20-44B1-93DE-261AD900679E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_integration:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F84AF19F-BC6C-4C4E-86E4-C4BA27A8A424"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2D9AB3C0-8783-4160-AE2D-D1E5AAAA0A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.0:*:express:*:*:*:*:*","matchCriteriaId":"80D90123-74BA-4A70-9A10-6980BAD270B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*","matchCriteriaId":"25C711BB-E7E0-41D8-985E-5DD386C54637"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/3","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10392.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5971","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dev2dev.bea.com/pub/advisory/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10392.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2143","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The admin.html file in MySimple News 1.0 stores its administrative password in plaintext, which allows remote attackers to gain unauthorized access to the web server by viewing the source of admin.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysimplenews:mysimplenews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"710BB288-144A-4D13-8239-B253298E292A"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10298.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/293871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5866","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10298.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/293871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2144","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the \"/\" (forward slash) or \".\" (dot) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_peers:bearshare:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2DE36FDC-7609-4BB7-B573-B4E764904746"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_peers:bearshare:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"39BA8A04-7DAE-4DD1-9F9A-6759FE59357A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/294078","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10240.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5888","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10240.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2145","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savant:savant_webserver:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"E184325C-B920-4B16-9E0E-D6348DAFDA1A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/291791","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10104.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5709","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/291791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10104.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2146","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:savant:savant_webserver:3.1:*:*:*:*:*:*:*","matchCriteriaId":"BE6A595E-2779-46A2-A091-E01B5EA12CE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0151.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10102.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5706","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0151.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10102.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2147","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.403","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1828.  Reason: This candidate is a duplicate of CVE-2002-1828.  Notes: All CVE users should reference CVE-2002-1828 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2148","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:2.0:*:*:*:*:*:*:*","matchCriteriaId":"98D08C67-F634-41DB-AB33-B029A4AB9417"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:3.0:*:*:*:*:*:*:*","matchCriteriaId":"3C90F2EE-AE20-4D17-9DC9-01C84BBE7696"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E1A06F55-2174-4825-A348-A6D65F94C7A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:5.0:*:*:*:*:*:*:*","matchCriteriaId":"627B08BB-DC4E-49F3-AE22-CD50906FB337"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_max_router:5.0_ap48:*:*:*:*:*:*:*","matchCriteriaId":"0C2DD62A-F471-4664-98F7-FDCCEAEB7F59"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0A2DCBCB-4B58-4463-B8D5-DABC654AD524"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:2.0:*:*:*:*:*:*:*","matchCriteriaId":"703FD9A7-8E68-4DC8-B4C6-346BDED1FEA7"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D064ECCA-FFBA-4932-9803-5F939B9451ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8FF57770-EC66-4E2B-8A8C-817854BCBBB4"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3583D347-AED3-4469-8D36-1C873A7E4459"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D182FD25-327B-4B7C-89B3-5A91053C5666"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:ascend_pipeline_router:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5DCA3F19-31BF-4E92-ABC1-75148D6298EA"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:dslterminator:*:*:*:*:*:*:*:*","matchCriteriaId":"C20CA752-C161-465B-A4AC-D25165F8E7EA"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284650","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9704.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5335","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9704.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2149","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:access_point_service_router_1500:*:*:*:*:*:*:*:*","matchCriteriaId":"D66F647E-027D-4B9D-A7CA-E05474AF4D4E"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:access_point_service_router_300:*:*:*:*:*:*:*:*","matchCriteriaId":"3A6B7814-BCA9-41F2-8952-D7F998659E91"},{"vulnerable":true,"criteria":"cpe:2.3:h:lucent:access_point_service_router_600:*:*:*:*:*:*:*:*","matchCriteriaId":"9AE5BBBB-CCF7-442F-90B2-002A5C143111"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284649","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9705.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5333","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/284649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9705.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2150","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1CE7F646-B716-47D7-84E8-CA875A85C983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*","matchCriteriaId":"AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*","matchCriteriaId":"2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*","matchCriteriaId":"B1648D07-823B-4BF9-87EC-DB34797B5B5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*","matchCriteriaId":"47DE8E73-0F1B-42E4-9BD6-7F5066D7330B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*","matchCriteriaId":"057B0387-44C0-45BE-9D91-D5A01C9D8020"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*","matchCriteriaId":"8AA52D22-A0D6-413A-9F49-0452356D2BE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3_r1.1:*:*:*:*:*:*:*","matchCriteriaId":"05578911-51E3-447B-98B6-083D3F35E8F1"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10449.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/539363","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6023","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10449.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/539363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/6023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2151","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.457","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1651.  Reason: This candidate is a duplicate of CVE-2002-1651.  Notes: All CVE users should reference CVE-2002-1651 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2152","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2002:*:*:*:*:*:*:*","matchCriteriaId":"087BBF48-CED1-4BC7-B4F9-1F62D0AFCB91"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/296119","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10408.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6006","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/296119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10408.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2153","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"99FCD0D0-5DFC-40DA-AECC-BB9ED58070C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:4.0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"0C0B5D7D-0F8C-4AA4-B0C4-895F17F124E2"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/467555","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/vna/ora-ias.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4844","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10183","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/467555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/vna/ora-ias.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2154","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"499BCE12-50FC-44B9-9B84-65A74360E578"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0298.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10188.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5792","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10188.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2155","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9761.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/285695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5388","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9761.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/285695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2156","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/285639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/285695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/285639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/285695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2157","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.520","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1660.  Reason: This candidate is a duplicate of CVE-2002-1660.  Notes: All CVE users should reference CVE-2002-1660 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2158","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zendocs:zentrack:2.0.1c_beta:*:*:*:*:*:*:*","matchCriteriaId":"A836547A-6417-48E2-8CA1-6A618FC242D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zendocs:zentrack:2.0.2c_beta:*:*:*:*:*:*:*","matchCriteriaId":"EDC80E44-6A5C-46BD-AC3A-E8AB8C7092E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zendocs:zentrack:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5ACA02D5-7E25-4224-8398-877BE7FFD980"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276121","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9312.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4973","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9312.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2159","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the \"Block WAN\" and \"Remote Admin\" options are disabled, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"A7F5E5AA-6469-4405-BDE9-AD4D174A1A6F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"525E00CA-DEEA-410F-A90C-C73C8D304E36"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"958AF49D-FB97-476F-B8DF-5A760F72DBC6"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9330.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5OP022K7GE.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4987","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9330.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5OP022K7GE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2160","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.580","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1798.  Reason: This candidate is a duplicate of CVE-2002-1798.  Notes: All CVE users should reference CVE-2002-1798 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2161","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FF5B3E6E-46BC-49D6-8D72-6EE81605D10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"51E0A0F2-B03D-4DC6-B101-9A8FB6E28326"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FD768FCF-6604-466C-95B1-59D592787CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3D3089AD-8B5F-4CED-9BAB-EF905FD261BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"3DDE7432-8C92-41FB-9542-4B7003321853"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/289119","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9963.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5570","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/289119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9963.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5570","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2162","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10092.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/291071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5677","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10092.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/291071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2163","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KvPoll 1.1 allows remote authenticated users to vote more than once by setting the \"already_voted\" cookie by various methods, including a direct call to clear_cookies.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:killervault:kvpoll:1.1:*:*:*:*:*:*:*","matchCriteriaId":"07636F17-C5FF-4F37-B035-EDE5BD634D2E"}]}]}],"references":[{"url":"http://www.ifrance.com/kitetoua/tuto/5holes5.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4736","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes5.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2164","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A72832FD-812D-4175-AA50-DC1DDAD5B954"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0082.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/291058","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10067.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5682","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/291058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10067.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2165","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.96:*:*:*:*:*:*:*","matchCriteriaId":"0252066C-E0D1-48D4-9A3F-F612ACA95F5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.96.1:*:*:*:*:*:*:*","matchCriteriaId":"BBD835AC-947F-4A82-9EF6-0C4B844069F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.96.2:*:*:*:*:*:*:*","matchCriteriaId":"C49616C1-5DF9-468F-B11D-7284CBAA0C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.96.3:*:*:*:*:*:*:*","matchCriteriaId":"B9D0D0E4-4F43-432B-A963-1B0322F45B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.97:*:*:*:*:*:*:*","matchCriteriaId":"19C68219-D5A7-4225-97F2-6443993542CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.97.1:*:*:*:*:*:*:*","matchCriteriaId":"B556C851-E292-45C3-BFEF-461E3DB18848"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.98:*:*:*:*:*:*:*","matchCriteriaId":"B327245A-9D2D-4F18-A33D-BFBA6A8F0FBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.98.2:*:*:*:*:*:*:*","matchCriteriaId":"C3970953-E678-4627-9F5C-CEA6F91D2557"},{"vulnerable":true,"criteria":"cpe:2.3:a:imho:imho_webmail:0.98.3:*:*:*:*:*:*:*","matchCriteriaId":"8EC68816-2B38-42E1-83D6-C46C17A95D63"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9615.php","source":"cve@mitre.org"},{"url":"http://www.securitybugware.org/Other/5537.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5238","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9615.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitybugware.org/Other/5537.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2166","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media_inc.:fusetalk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1DC24546-0EB6-433B-8CC6-4A2E66D66F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media_inc.:fusetalk:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D6E5F61-E9B3-4AB3-8A54-9B2666CA3C88"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9637.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5236","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9637.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2167","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an \"include\" function call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thorsten_korner:123tkshop:0.2:*:*:*:*:*:*:*","matchCriteriaId":"16497C1D-E34A-415E-88EB-086897CFBA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:thorsten_korner:123tkshop:0.3:*:*:*:*:*:*:*","matchCriteriaId":"28E8D2A5-055A-476E-B639-4471BAA6491F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/282404","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9581.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5243","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/282404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9581.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2168","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thorsten_korner:123tkshop:0.2:*:*:*:*:*:*:*","matchCriteriaId":"16497C1D-E34A-415E-88EB-086897CFBA81"},{"vulnerable":true,"criteria":"cpe:2.3:a:thorsten_korner:123tkshop:0.3:*:*:*:*:*:*:*","matchCriteriaId":"28E8D2A5-055A-476E-B639-4471BAA6491F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/282404","source":"cve@mitre.org"},{"url":"http://www.123tkshop.org/index.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9582.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5244","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/282404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.123tkshop.org/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9582.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5244","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2169","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV=\"refresh\" tag to an aim: URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/282443","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9616.php","source":"cve@mitre.org"},{"url":"http://www.mindflip.org/aim.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5246","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://online.securityfocus.com/archive/1/282443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9616.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mindflip.org/aim.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2170","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.7:*:*:*:*:*:*:*","matchCriteriaId":"E744E2D6-5E38-4495-B5E4-B9012DDB9807"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"02F55B4B-ED2E-4D09-AED9-6A96F8D7B1E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"9E063907-A871-41DD-B8A1-CC84FFECBB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:enterprise_1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"548887BD-0A3F-44B1-9DE5-DFEDD2558DE7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283418","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9642.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5276","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/283418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9642.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2171","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a \"%db\" request in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrey_cherezov:acweb:1.8:*:*:*:*:*:*:*","matchCriteriaId":"DD98FF81-2F2F-448D-886D-74885DC98874"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrey_cherezov:acweb:1.14:*:*:*:*:*:*:*","matchCriteriaId":"270A33B6-99B2-476B-8D9B-54FFBA90820A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10191.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5793","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10191.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2172","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shana:informed_designer:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D136F5D0-7519-4CC6-AD54-2061EDED1891"},{"vulnerable":true,"criteria":"cpe:2.3:a:shana:informed_filler:3.5:*:*:*:*:*:*:*","matchCriteriaId":"5BBEA027-2B95-404F-A73C-8E0382458F45"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/293052","source":"cve@mitre.org"},{"url":"http://www.cirt.net/advisories/shana.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10192.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5795","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://online.securityfocus.com/archive/1/293052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cirt.net/advisories/shana.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10192.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2173","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9764.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/285695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5389","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9764.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/285695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2174","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service (memory consumption) via a large number of connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2002:*:*:*:*:*:*:*","matchCriteriaId":"087BBF48-CED1-4BC7-B4F9-1F62D0AFCB91"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0518.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9768.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0518.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9768.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2175","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability affects all versions of phpSquidPass before 0.2","cveTags":[],"descriptions":[{"lang":"en","value":"phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:phpsquidpass:*:*:*:*:*:*:*:*","matchCriteriaId":"248B5C42-F77F-48EE-AFF4-52A430FB91E0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102508071021631&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=188359","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9417.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5090","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=102508071021631&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=188359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9417.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2176","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284691","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9692.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5342","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/284691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9692.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2177","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*","matchCriteriaId":"25C711BB-E7E0-41D8-985E-5DD386C54637"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/38","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10221.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5819","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://dev2dev.bea.com/pub/advisory/38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10221.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2178","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability affects phpWebsite version 0.8.3, and may affect all other versions of phpWebsite.","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3EAD02-CF8D-4154-9A67-9774BA4029AB"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10256.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/293879","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5864","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10256.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/293879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2179","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnarability may affect all versions of Unisys, ClearPath MCP.","cveTags":[],"descriptions":[{"lang":"en","value":"The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:unisys:clearpath_mcp:*:*:*:*:*:*:*:*","matchCriteriaId":"6BD21D3A-EB73-420C-B7B6-83AD48CF2199"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10260.php","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/293881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/295837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5863","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10260.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/293881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/295837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2180","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":3.1,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10278.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/plus32.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5861","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10278.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/plus32.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2181","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sonicwall:content_filtering:*:*:*:*:*:*:*:*","matchCriteriaId":"52CE83D7-092C-43FE-B41A-B2BA1BE7AD32"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10531.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/297692","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6063","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10531.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/297692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2182","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seunghyun_seo:msn666:1.0:*:*:*:*:*:*:*","matchCriteriaId":"757BCAA2-30BE-4F2D-8E53-0B409D6FABEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:seunghyun_seo:msn666:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E9F72F20-6AD2-43D4-96B2-296DBD482BDB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/276943","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276955","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/276958","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://online.securityfocus.com/archive/1/276943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/276958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2183","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpshare:phpshare:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"498738E6-C6A4-4B2A-A4B1-95246C7902BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpshare:phpshare:0.6_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"052DCD56-ACCF-4BF3-9E51-94785DD70523"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpshare:phpshare:0.6_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"95D8FDD6-069F-4211-978D-F3073028CCE7"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/5049","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2184","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a \"Showip\" parameter in the chat applet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digi-net_technologies:digichat:3.5:*:*:*:*:*:*:*","matchCriteriaId":"4A8783A6-A3AC-4FCA-B954-E960ADC00F3F"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/5019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2185","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"IGMP 1 and 2","cveTags":[],"descriptions":[{"lang":"en","value":"The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*","matchCriteriaId":"E040A866-0D2C-40E1-B1FB-DB600B389E27"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*","matchCriteriaId":"CE1C944A-E5F1-49DE-B069-2A358123B535"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*","matchCriteriaId":"D71083B4-1736-4501-8DE8-BC24AC1447AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:ia-32:*:*:*:*:*","matchCriteriaId":"E9D468DB-C4AE-4ACB-B3B7-2FAEA90D6A49"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*","matchCriteriaId":"2A32E486-2598-41B3-B6DB-3CC46D239AFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*","matchCriteriaId":"AAEE18D8-AA3B-47A3-AA7C-AAFF7591F391"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4371A667-18E1-4C54-B2E1-6F885F22F213"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.0:*:ppc:*:*:*:*:*","matchCriteriaId":"5B28763D-8F4B-45E5-82FA-AB7E54C18EBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"205EF72B-7334-4AE0-9CA6-D2E8E5910C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:ia64:*:*:*:*:*","matchCriteriaId":"613A22EC-D93C-48B0-B97C-3E0DDFBD0B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"F9440B25-D206-4914-9557-B5F030890DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E9933557-3BCA-4D92-AD4F-27758A0D3347"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"10A60552-15A5-4E95-B3CE-99A4B26260C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:alpha:*:*:*:*:*","matchCriteriaId":"344610A8-DB6D-4407-9304-916C419F648C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:i386:*:*:*:*:*","matchCriteriaId":"B7EC2B95-4715-4EC9-A10A-2542501F8A61"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:6.2:*:sparc:*:*:*:*:*","matchCriteriaId":"64775BEF-2E53-43CA-8639-A7E54F6F4222"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:alpha:*:*:*:*:*","matchCriteriaId":"FD6576E2-9F26-4857-9F28-F51899F1EF48"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"4DC9842D-E23B-4B9F-A7BF-57C3BA3DE398"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"C1DE93B9-1ADD-4B19-BA32-7D9F9CCD293F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:alpha:*:*:*:*:*","matchCriteriaId":"7F3FAAB3-7A8A-42E5-9DCE-E4A843CED1B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:i386:*:*:*:*:*","matchCriteriaId":"C8783A6D-DFD8-45DD-BF03-570B1B012B44"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.1:*:ia64:*:*:*:*:*","matchCriteriaId":"ED36543D-C21B-4B4B-A6AD-6E19B08B5DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"6A1EF00A-52E9-4FD8-98FD-3998225D8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:ia64:*:*:*:*:*","matchCriteriaId":"9D47D6FE-56A9-42CF-9A9B-AEE272C061F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:i386:*:*:*:*:*","matchCriteriaId":"8A206E1C-C2EC-4356-8777-B18D7069A4C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:ppc:*:*:*:*:*","matchCriteriaId":"6E2FE291-1142-4627-A497-C0BB0D934A0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:i386:*:*:*:*:*","matchCriteriaId":"2FE69F6F-6B17-4C87-ACA4-A2A1FB47206A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:ppc:*:*:*:*:*","matchCriteriaId":"467A30EB-CB8F-4928-AC8F-F659084A9E2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:sparc:*:*:*:*:*","matchCriteriaId":"714C1439-AB8E-4A8B-A783-D60E9DDC38D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"62CAE5B0-4D46-4A93-A343-C8E9CB574C62"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:spa:*:*:*:*:*","matchCriteriaId":"FB647A8B-ADB9-402B-96E1-45321C75731B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:sparc:*:*:*:*:*","matchCriteriaId":"0944FD27-736E-4B55-8D96-9F2CA9BB9B05"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:x86:*:*:*:*:*","matchCriteriaId":"373BB5AC-1F38-4D0A-97DC-08E9654403EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*","matchCriteriaId":"B5E71DA3-F4A0-46AF-92A2-E691C7A65528"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:i386:*:*:*:*:*","matchCriteriaId":"1975A2DD-EB22-4ED3-8719-F78AA7F414B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"19F606EE-530F-4C06-82DB-52035EE03FA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:ppc:*:*:*:*:*","matchCriteriaId":"A0E896D5-0005-4E7E-895D-B202AFCE09A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:sparc:*:*:*:*:*","matchCriteriaId":"5A8B313F-93C7-4558-9571-DE1111487E17"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020901-01-A","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276968","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18510","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18562","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18684","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cs.ucsb.edu/~krishna/igmp_dos/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0101.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0140.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0190.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0191.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/427981/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/428028/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/428058/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5020","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9436","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10736","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20020901-01-A","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276968","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cs.ucsb.edu/~krishna/igmp_dos/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0191.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/427980/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/427981/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/428028/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/428058/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2186","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10570.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6126","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10570.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2187","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown \"file disclosure\" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10571.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6125","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10571.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2188","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10572.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata30.html#kernresource","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata31.html#kernresource","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6124","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10572.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/errata30.html#kernresource","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/errata31.html#kernresource","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2189","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activxperts_software:activwebserver:*:*:*:*:*:*:*:*","matchCriteriaId":"0851D015-6E20-4879-9F17-4772E62175C8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9540.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5MP0C0K7PM.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9540.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5MP0C0K7PM.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2190","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artscore_studios:cutecast_forum:1.2:*:*:*:*:*:*:*","matchCriteriaId":"76177763-BD5F-4315-8836-F9570FA6DB0F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0058.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10556.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10556.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2191","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This issue is present on Lotus Domino Server with the 'DominoNoBanner' set to a value of '1'.","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"80022584-A581-4DE2-9F2B-EC971F4D6DA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"468D4453-9607-4A74-908F-E5980DB3BDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:lotus:domino:5.0.9a:*:*:*:*:*:*:*","matchCriteriaId":"D5A34DB2-C513-448B-8C45-CA52EC652DCD"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10557.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6128","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10557.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2192","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is limited to server configurations with Wildcard DNS enabled.\r\n","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a \"dir\" request to indexed folders."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A3F4B012-BC01-46A7-A824-286C44F124DA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0063.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/298987","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10561.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6131","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6143","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/298987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10561.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/6143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2193","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mojo_mail:mojo_mail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"5184E6C2-5D72-4E39-88EF-8DEFEDA38FF6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0352.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10477.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6040","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0352.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10477.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2194","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:09.847","vulnStatus":"Rejected","evaluatorSolution":"'TEST' or 'KMF_DEADBEEF' flags must be set to (0x2) in order for this exploit to work.","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1589.  Reason: This candidate is a duplicate of CVE-2002-1589.  Notes: All CVE users should reference CVE-2002-1589 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2002-2195","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/280786","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9488.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5170","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://online.securityfocus.com/archive/1/280786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9488.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2196","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue did not affect the versions of Samba as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"F69ED4B5-C485-4996-8AAE-F3800D37170F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:*","matchCriteriaId":"A3B50D9E-EA43-44BF-9176-610EC808B986"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:*","matchCriteriaId":"BCBBF662-40C3-4280-BE79-9D7C36A6DF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:*","matchCriteriaId":"BDD6A6AE-C636-4131-807B-59F7784B7AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:*","matchCriteriaId":"8C6D63F5-B72C-445A-BC61-D52D6022481B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:*","matchCriteriaId":"1ADD724A-1747-4678-A659-0A528B728C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:*","matchCriteriaId":"A3ABEA3A-8F88-4947-80A5-CF1459F5AC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:*","matchCriteriaId":"86F85E94-9F94-457A-A606-35DB558484A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:*","matchCriteriaId":"1ED4704B-2422-43C9-A2E0-9851F56D4CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:*","matchCriteriaId":"158D175A-E0D7-45EF-BDD2-D86F2E8F7766"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p4:*:*:*:*:*:*","matchCriteriaId":"7854FCEF-D1F8-4DEC-A6CB-C4470899F71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p5:*:*:*:*:*:*","matchCriteriaId":"36D8B675-C209-4D5A-8EA7-1B3515E930FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p6:*:*:*:*:*:*","matchCriteriaId":"4BCECF31-4C73-4ABA-9F84-D5DBA1DB1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p7:*:*:*:*:*:*","matchCriteriaId":"2C5A1382-D147-43E5-8DB7-93B7A3B9AA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p8:*:*:*:*:*:*","matchCriteriaId":"3A497A5D-96FC-490E-87EB-94C1BE7338A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F681E4CC-B8D3-48A2-B93E-0363B22B059E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"2BDD0125-4C47-404A-9DC0-2E923C66B4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DCACECDD-40F1-4A9B-8B8A-20565FEE3627"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"19F65FF3-71F8-4278-A823-A6E0FF65D9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"614547F5-9C3F-489B-9B72-91B0FF646CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"CC2AE5A9-62C5-4DCE-85B3-16F48695B3B4"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://lists.samba.org/archive/samba-technical/2002-June/022075.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHBA-2002-209.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10010.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5587","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.samba.org/archive/samba-technical/2002-June/022075.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHBA-2002-209.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10010.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2197","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45300&zone_32=45300","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9489.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5171","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45300&zone_32=45300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9489.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2198","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.45:*:*:*:*:*:*:*","matchCriteriaId":"04E7666E-821C-4ED9-8784-BB5FCCFB6801"},{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.46:*:*:*:*:*:*:*","matchCriteriaId":"ABA6194A-14ED-43DB-AD88-97305985BCE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.47:*:*:*:*:*:*:*","matchCriteriaId":"D9FD8DDA-3990-4AC8-AFC2-14F1DB588B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.48:*:*:*:*:*:*:*","matchCriteriaId":"58FECC80-226E-4318-9196-EB193C47E86C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.49:*:*:*:*:*:*:*","matchCriteriaId":"465F478D-B29A-4348-8AD9-2E4B3435D919"},{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.50:*:*:*:*:*:*:*","matchCriteriaId":"6F000768-544B-439D-9BD0-B033A3A34B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:zmailer:zmailer:2.99.51:*:*:*:*:*:*:*","matchCriteriaId":"C858273D-18AF-450D-AEA4-C45FA19BFAB6"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10013.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5592","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10013.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2199","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freebsd:advanced_intrusion_detection_environment:*:*:*:*:*:*:*:*","versionEndExcluding":"0.7_1","matchCriteriaId":"02100CC2-AD32-418C-B227-E30B36AF076E"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10015.php","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/5588","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/10015.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/5588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2200","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_lefevre:dobermann_forum:0.1:*:*:*:*:*:*:*","matchCriteriaId":"5DB0A864-69B5-4393-A2ED-26C31DFBD508"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_lefevre:dobermann_forum:0.2:*:*:*:*:*:*:*","matchCriteriaId":"6BAE5277-E2CE-432D-B3B8-8EA481C80E65"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_lefevre:dobermann_forum:0.3:*:*:*:*:*:*:*","matchCriteriaId":"34026C90-6790-4D56-A547-133F363B0D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_lefevre:dobermann_forum:0.4:*:*:*:*:*:*:*","matchCriteriaId":"87B7B167-4979-49D8-BE7A-B71FA7851782"},{"vulnerable":true,"criteria":"cpe:2.3:a:benjamin_lefevre:dobermann_forum:0.5:*:*:*:*:*:*:*","matchCriteriaId":"2DCC3284-DE13-4162-B4A6-99F4445A39EB"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Oct/0397.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10492.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6057","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2002/Oct/0397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10492.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2201","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:*:*:*:*:*:*:*:*","versionEndIncluding":"0.99","matchCriteriaId":"2F52798C-8D7B-46CD-A27A-E4378C631568"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10052.php","source":"cve@mitre.org"},{"url":"http://www.webmin.com/updates.html","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10052.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.webmin.com/updates.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2202","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability affects Outlook Express 6.0 on any version of the Windows OS.","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:S/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.8},"baseSeverity":"LOW","exploitabilityScore":1.5,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10500.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0210&L=ntbugtraq&F=P&S=&P=5732","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10500.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0210&L=ntbugtraq&F=P&S=&P=5732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2203","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*","matchCriteriaId":"F66BAF35-A8B9-4E95-B270-444206FDD35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*","matchCriteriaId":"39F847DB-65A9-47DA-BCFA-A179E5E2301A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45502","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9492.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5161","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9492.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2204","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"A large degree of social engineering and user interaction is neccessary to exploit this vulnerbility.","cveTags":[],"descriptions":[{"lang":"en","value":"The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not believe this is a security vulnerability.  This is the documented and expected behaviour of rpm.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:redhat_package_manager:4.0.2-71:*:*:*:*:*:*:*","matchCriteriaId":"31D3977B-32C4-4F6E-AA67-184AF775DA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:redhat_package_manager:4.0.2-72:*:*:*:*:*:*:*","matchCriteriaId":"ECDDB82C-4EEB-458E-95D4-98D0B167A165"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:redhat_package_manager:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"84939DAD-3CB3-4FBE-9829-6CC8C29DA4BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:redhat_package_manager:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AEBEA8BA-5EA3-44A3-ABDC-199977AA3AAE"}]}]}],"references":[{"url":"http://lists.netsys.com/pipermail/full-disclosure/2002-August/001167.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10011.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5594","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2002-August/001167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10011.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2205","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webresolve:webresolve:0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0ED6F1F0-D43E-4CE1-83C7-18696F6572B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webresolve:webresolve:0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D6CF0C62-BBAE-46F2-BA41-99A30439C25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webresolve:webresolve:0.1:*:*:*:*:*:*:*","matchCriteriaId":"30960B4D-C4A6-4DDD-80C8-7C43965E0257"}]}]}],"references":[{"url":"http://siag.nu/webresolve/news-0.2.0.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9503.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5175","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://siag.nu/webresolve/news-0.2.0.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9503.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2206","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2001:*:*:*:*:*:*:*","matchCriteriaId":"19595AF4-8C85-4646-B42B-4B5863798AB0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0240.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10085.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/291358","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5692","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10085.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/291358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2207","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eric_rescorla:ssldump:0.9b1:*:*:*:*:*:*:*","matchCriteriaId":"80148587-A3FB-4D0F-AB6D-F345D2067AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:eric_rescorla:ssldump:0.9b2:*:*:*:*:*:*:*","matchCriteriaId":"ACBFA5F7-A60F-4F42-8523-617F81150F7D"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10086.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.rtfm.com/ssldump/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/291329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5690","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10086.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.rtfm.com/ssldump/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/291329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2208","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extended_interior_gateway_routing_protocol:extended_interior_gateway_routing_protocol:1.2:*:*:*:*:*:*:*","matchCriteriaId":"77E7830C-3505-41C5-B073-D2F73261CE17"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=113504451523186&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005840","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/eigrp_issue.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/18055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/304034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/304044","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/419898/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6443","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10903","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=113504451523186&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cisco.com/warp/public/707/eigrp_issue.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/18055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/304034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/304044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/419898/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10903","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2209","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified \"security vulnerability\" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:baby_ftp_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AA649601-FB00-461A-998F-F9099C1EA8CD"}]}]}],"references":[{"url":"http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html","source":"cve@mitre.org"},{"url":"http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2210","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue did not affect the RPM packages of OpenOffice as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2E887F99-5A89-432D-986C-3E49E5DFACBE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10346.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5950","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10346.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2211","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*","matchCriteriaId":"49A7C6F2-F769-447A-8C8B-9002BD6FBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"6E820DA7-FF69-48AD-B031-3C583EFE3679"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"262EFABD-8349-4C34-8653-39767923C2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0064E411-C26F-4831-B7C4-63E2E1EF98DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"982BB8D9-F396-4D99-A130-A2D8A5E61E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"9CEBE5DC-7D81-404C-929A-B92951AADA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*","matchCriteriaId":"BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"BEED8045-CEA2-4EBE-A864-22D1B6103F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*","matchCriteriaId":"64C3DB3B-4C8E-4647-A61B-ECED4EB63439"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*","matchCriteriaId":"B3255FB4-D84E-487B-B53A-4EA01D6613A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p7:*:*:*:*:*:*","matchCriteriaId":"A2D4EDEB-E366-4F40-B896-7AF14540A14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"35EE137B-0ED3-47EC-8195-58690F5B252E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"580ADA83-C07B-40DD-B219-CA1908F1087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F9371CBC-192E-44C0-9E0C-A6D61D6C0D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"71E01FA3-4CEA-4AF0-973C-C6DA147C6252"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8C163058-A35D-4F30-B103-8A786FAA75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79528C86-614D-4B14-9D26-89E0BE6B2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF54438-F56B-4FC1-BCDB-A1A9D75374D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2AE8906-AFCF-4ED9-B3E2-D6184F67C485"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1450E5BF-66A0-4096-9775-E31E98C69AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"EE6003AB-39CB-4FE5-830E-022CA71B4784"}]}]}],"references":[{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.imconf.net/imw-2002/imw2002-papers/198.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/457875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDPYP","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDT4U","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FZSLQ","source":"cve@mitre.org"},{"url":"http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/434523/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/434523/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/1923","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.imconf.net/imw-2002/imw2002-papers/198.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/457875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDPYP","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDT4U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FZSLQ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/434523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/434523/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/1923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2212","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*","matchCriteriaId":"49A7C6F2-F769-447A-8C8B-9002BD6FBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"6E820DA7-FF69-48AD-B031-3C583EFE3679"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"262EFABD-8349-4C34-8653-39767923C2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0064E411-C26F-4831-B7C4-63E2E1EF98DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"982BB8D9-F396-4D99-A130-A2D8A5E61E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"9CEBE5DC-7D81-404C-929A-B92951AADA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*","matchCriteriaId":"BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"BEED8045-CEA2-4EBE-A864-22D1B6103F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*","matchCriteriaId":"64C3DB3B-4C8E-4647-A61B-ECED4EB63439"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*","matchCriteriaId":"B3255FB4-D84E-487B-B53A-4EA01D6613A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p7:*:*:*:*:*:*","matchCriteriaId":"A2D4EDEB-E366-4F40-B896-7AF14540A14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"35EE137B-0ED3-47EC-8195-58690F5B252E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"580ADA83-C07B-40DD-B219-CA1908F1087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F9371CBC-192E-44C0-9E0C-A6D61D6C0D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"71E01FA3-4CEA-4AF0-973C-C6DA147C6252"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8C163058-A35D-4F30-B103-8A786FAA75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79528C86-614D-4B14-9D26-89E0BE6B2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF54438-F56B-4FC1-BCDB-A1A9D75374D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2AE8906-AFCF-4ED9-B3E2-D6184F67C485"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1450E5BF-66A0-4096-9775-E31E98C69AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"EE6003AB-39CB-4FE5-830E-022CA71B4784"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:fujitsu:uxp_v:*:*:*:*:*:*:*:*","matchCriteriaId":"22DCDE89-0567-4BA4-974E-383E13D1B5F5"}]}]}],"references":[{"url":"http://www.imconf.net/imw-2002/imw2002-papers/198.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/457875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDT5K","source":"cve@mitre.org"},{"url":"http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.imconf.net/imw-2002/imw2002-papers/198.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/457875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDT5K","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2213","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:infoblox:dns_one:*:*:*:*:*:*:*:*","matchCriteriaId":"F037AA37-EAC4-421A-A45F-70FB9AD44C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9:*:*:*:*:*:*:*","matchCriteriaId":"49A7C6F2-F769-447A-8C8B-9002BD6FBF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.2:*:*:*:*:*:*:*","matchCriteriaId":"6E820DA7-FF69-48AD-B031-3C583EFE3679"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.3:*:*:*:*:*:*:*","matchCriteriaId":"94C41E69-3034-4E30-A99E-A2C3EE9AE337"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.4:*:*:*:*:*:*:*","matchCriteriaId":"262EFABD-8349-4C34-8653-39767923C2DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:*:*:*:*:*:*:*","matchCriteriaId":"AB7F1274-7E0E-40C8-8006-ACFDBE757D35"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.5:p1:*:*:*:*:*:*","matchCriteriaId":"F96CB4CD-5044-4A08-A6BE-1201C4141851"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.6:*:*:*:*:*:*:*","matchCriteriaId":"8257C916-6F4D-4B7E-8EED-B2789B3B35AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.7:*:*:*:*:*:*:*","matchCriteriaId":"B959A2AB-703C-4354-8E23-809D2D13EC06"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.8:*:*:*:*:*:*:*","matchCriteriaId":"0064E411-C26F-4831-B7C4-63E2E1EF98DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.9:*:*:*:*:*:*:*","matchCriteriaId":"982BB8D9-F396-4D99-A130-A2D8A5E61E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"9CEBE5DC-7D81-404C-929A-B92951AADA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2:*:*:*:*:*:*:*","matchCriteriaId":"52D1DAE0-DB4D-475F-B11B-29AA3A00DB60"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"93BB48F5-A635-402E-AE7F-B8AB90ED0C70"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C5FE281A-610F-42CA-B741-53F2D70A3F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p1:*:*:*:*:*:*","matchCriteriaId":"BBBF703F-D43B-4C29-8AFB-DDDB51CDEF7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p2:*:*:*:*:*:*","matchCriteriaId":"BEED8045-CEA2-4EBE-A864-22D1B6103F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p3:*:*:*:*:*:*","matchCriteriaId":"C3B798F1-769E-4DBE-B99D-BFEA5F9B4DB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p4:*:*:*:*:*:*","matchCriteriaId":"64C3DB3B-4C8E-4647-A61B-ECED4EB63439"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p5:*:*:*:*:*:*","matchCriteriaId":"30D2ACB3-BE6D-4948-AFC3-16EAD173F595"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p6:*:*:*:*:*:*","matchCriteriaId":"B3255FB4-D84E-487B-B53A-4EA01D6613A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.2:p7:*:*:*:*:*:*","matchCriteriaId":"A2D4EDEB-E366-4F40-B896-7AF14540A14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"35EE137B-0ED3-47EC-8195-58690F5B252E"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"580ADA83-C07B-40DD-B219-CA1908F1087F"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"F9371CBC-192E-44C0-9E0C-A6D61D6C0D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"71E01FA3-4CEA-4AF0-973C-C6DA147C6252"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8C163058-A35D-4F30-B103-8A786FAA75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"79528C86-614D-4B14-9D26-89E0BE6B2AED"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3AF54438-F56B-4FC1-BCDB-A1A9D75374D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"F2AE8906-AFCF-4ED9-B3E2-D6184F67C485"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"1450E5BF-66A0-4096-9775-E31E98C69AAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:bind:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"EE6003AB-39CB-4FE5-830E-022CA71B4784"}]}]}],"references":[{"url":"http://www.imconf.net/imw-2002/imw2002-papers/198.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/457875","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDPYJ","source":"cve@mitre.org"},{"url":"http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.imconf.net/imw-2002/imw2002-papers/198.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/457875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/IAFY-5FDPYJ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rnp.br/cais/alertas/2002/cais-ALR-19112002a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2214","sourceIdentifier":"secalert@redhat.com","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long \"To\" header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=15595","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://secunia.com/advisories/21202","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0567.html","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://bugs.php.net/bug.php?id=15595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/21202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2215","sourceIdentifier":"secalert@redhat.com","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nPHP, PHP, 4.3.0","cveTags":[],"descriptions":[{"lang":"en","value":"The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of \"To\" addresses, which triggers an error in the rfc822_write_address function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.3","matchCriteriaId":"8F17B5DC-D2EB-4973-896A-DF97F150C593"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*","matchCriteriaId":"245C601D-0FE7-47E3-8304-6FF45E9567D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*","matchCriteriaId":"AEEF2298-98E8-409F-9205-84817CEF947B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"6AFC00BA-D64D-4407-AC69-FDD9FF013943"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"D80F2A8B-B57F-4970-867A-55E8187C1502"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"49965B80-DC27-4864-BDF0-CBBFF16BFD80"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8212495A-0F2A-4787-93F2-F6618F9A777B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C6F0F8FC-C57A-4AEA-A59F-41140347318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*","matchCriteriaId":"9B8B3138-3DCC-4682-B9A8-920E1110700D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*","matchCriteriaId":"BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"}]}]}],"references":[{"url":"http://bugs.php.net/bug.php?id=19280","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://bugs.php.net/bug.php?id=19280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2216","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.20:*:*:*:*:*:*:*","matchCriteriaId":"5AB16C94-E2D4-4D7C-8BD9-145CBE181138"}]}]}],"references":[{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2217","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comscripts:web_server_creator:0.1:*:*:*:*:*:*:*","matchCriteriaId":"D4B3AC91-7C8A-4466-9E00-187C951449EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0303.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005712","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.frog-man.org/tutos/WSC-WebPortal.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/19896","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6251","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10689","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28815","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/2318","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.frog-man.org/tutos/WSC-WebPortal.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/19896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/2318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2218","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sips:sips:*:*:*:*:*:*:*:*","matchCriteriaId":"B030C0BB-26DD-4EA3-9444-B3FB271910A0"}]}]}],"references":[{"url":"http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14","source":"cve@mitre.org"},{"url":"http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log","source":"cve@mitre.org"},{"url":"http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2219","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chetcpasswd:chetcpasswd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B04872DA-FA23-4004-83D0-243D07EB93BC"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005847","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6C00N0K6AO.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6472","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10946","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6C00N0K6AO.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2220","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chetcpasswd:chetcpasswd:1.12:*:*:*:*:*:*:*","matchCriteriaId":"4CE67C95-BDF4-43E7-820D-72C337BA60C9"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2221","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary.  NOTE: this issue might overlap CVE-2006-6639."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chetcpasswd:chetcpasswd:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"21996DD8-A762-4C84-9FBE-C999D1F948C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:chetcpasswd:chetcpasswd:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"16527E61-421C-48F4-B2B7-E7D16CEA27B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:chetcpasswd:chetcpasswd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6E8693FF-835B-4A58-AAC8-D9974A9BDC68"}]}]}],"references":[{"url":"http://secunia.com/advisories/23024","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005847","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21644","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-2222","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:ports_collection:*:*:*:*:*:*:*:*","versionEndIncluding":"2002-08-28","matchCriteriaId":"E090A99B-B484-4969-BF3C-BE9CCF4415FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata31.html#isakmpd","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9850","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata31.html#isakmpd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2223","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:netscreen_remote_security_client:8.0:*:*:*:*:*:*:*","matchCriteriaId":"1FBC918D-FB72-4529-9B6C-11C5F83778F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:juniper:netscreen_remote_vpn_client:8.0:*:*:*:*:*:*:*","matchCriteriaId":"D3D9F7D1-F0B9-48EB-9E69-606B8AAFF7E3"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/287771","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.netscreen.com/support/alerts/9_6_02.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5668","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9850","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.netscreen.com/support/alerts/9_6_02.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2224","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_associates:pgp_freeware:7.03:*:*:*:*:*:*:*","matchCriteriaId":"F4E8CE1A-82EE-4CC8-BA75-3151DC49B1B7"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/287771","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-5A5RXM","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5449","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9850","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-5A5RXM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2225","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:safenet:softremote_vpn_client:*:*:*:*:*:*:*:*","matchCriteriaId":"0C384818-1B30-4EBA-99DE-E64008F72985"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/287771","source":"cve@mitre.org","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-59VTUQ","source":"cve@mitre.org"},{"url":"http://www.safenet-inc.com/knowledgebase/read_item.asp?ID=375","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/287771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-59VTUQ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safenet-inc.com/knowledgebase/read_item.asp?ID=375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2226","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftpd32:tftpd32:*:*:*:*:*:*:*:*","versionEndIncluding":"2.21","matchCriteriaId":"6C5BD7F8-545F-431F-B657-64C8A43F05A5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3160","source":"cve@mitre.org"},{"url":"http://tftpd32.jounin.net/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/windowsntfocus/6C00C2061A.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/300395","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6199","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10647","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tftpd32.jounin.net/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/windowsntfocus/6C00C2061A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/300395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2227","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted SSLv2 challenge value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rtfm:ssldump:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9b2","matchCriteriaId":"CC85321C-1555-4900-A03B-70D20179CB6B"}]}]}],"references":[{"url":"http://www.rtfm.com/ssldump/","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/291329","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5693","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10087","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.rtfm.com/ssldump/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/291329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/5693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2228","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2_6-1","matchCriteriaId":"3EE29098-26FD-497D-96B3-6686ED68F061"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailscanner:mailscanner:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0_4-1","matchCriteriaId":"6866CFF3-71F2-4A60-8815-D5D4E7376E56"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10609.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6148","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10609.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2229","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sapio_design_ltd:webreflex:1.53:*:*:*:*:*:*:*","matchCriteriaId":"331FF32C-DBC0-45CC-926A-1DAF2579CA03"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0068.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10782.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6327","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10782.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2230","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a \".gif\" or \".jpg\" string, a variant of CVE-2002-0328."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard:ikonboard:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"93AF8578-012D-4A3D-A7B9-F5D7BC483995"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0069.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10268.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10268.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2231","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard:ikonboard:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"93AF8578-012D-4A3D-A7B9-F5D7BC483995"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0073.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10797.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6342","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10799","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10797.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2232","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mollensoft_software:enceladus_server_suite:3.9:*:*:*:*:*:*:*","matchCriteriaId":"86F23ED5-57CB-4B22-A77D-A2A8082A919E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0074.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0097.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10802.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/303990","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6345","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10802.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/303990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6345","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2233","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via \"@\" (at) characters in a CD (CWD) command, such as (1) \"@/....\\\", (2) \"@@@/..c:\\\", or (3) \"@/..@/..\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"COMPLETE","baseScore":8.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":8.5,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mollensoft_software:enceladus_server_suite:3.9:*:*:*:*:*:*:*","matchCriteriaId":"86F23ED5-57CB-4B22-A77D-A2A8082A919E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0193.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11019","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11020","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0193.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2234","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"B6FD5E79-7BB8-444F-A34B-D1181DCF48C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:2.8:*:*:*:*:*:*:*","matchCriteriaId":"3129DDDC-6AC3-4A0F-BD7A-E028D1EDC5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2A55F457-BCB6-4E56-B96B-397B3EA9648D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:3.1:*:*:*:*:*:*:*","matchCriteriaId":"1011AF00-B25F-4277-8F27-E9C57D52B551"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E817332E-110B-408F-85E0-F4E0D53F5FE5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0094.html","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0338.html","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0347.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10699.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6245","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0094.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0338.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10699.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2235","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A81E1505-5F99-4DA8-AC0F-28F3E6F819C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"818806B0-37B1-4CC2-A955-E711EC000203"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0394B9E0-FD26-4D5E-91D5-B8334B517DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"306C6BDF-C687-4B63-998B-B520DF1D1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DF18ED7C-80BB-4A78-8809-9AAE817876A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1D731A35-E0DB-4F40-A981-C38229A2EB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4053C8E5-5510-4814-A46E-89B81266C29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8E6753AB-DFCF-4D40-8267-645810F7967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4B2B3772-A566-4A51-8B51-68E78C86CB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAFBBAA9-BD46-44E3-9618-D87384E959A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.9_can:*:*:*:*:*:*:*","matchCriteriaId":"747A57AD-A345-4F5B-AD82-0F7E08C2240E"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/301076","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3229","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10701.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6246","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/301076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10701.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2236","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apt-www-proxy:apt-www-proxy:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6F23346D-21EA-4B1C-8685-AE755C572F38"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10815.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6340","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10815.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2237","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftp:tftp_server:2.21:*:*:*:*:*:*:*","matchCriteriaId":"EBABE284-9CFB-4497-8F63-F5B4AB1BA82C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10817","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2238","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) in a GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kunani:kunani_odbc_ftp_server:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"8E515BB3-B9C0-454E-A4AB-C7B634B1951E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0088.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6355","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10819","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2239","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Cisco Optical Service Module (OSM) for the Catalyst 6500 and 7600 series running Cisco IOS 12.1(8)E through 12.1(13.4)E allows remote attackers to cause a denial of service (hang) via a malformed packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*","matchCriteriaId":"C8D63186-5834-448C-98F2-0C189A11D25D"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/osm-lc-ios-pkt-vuln-pub.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6358","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10823","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/osm-lc-ios-pkt-vuln-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2240","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a \"..\" (dot dot) in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myserver:myserver:0.2:*:*:*:*:*:*:*","matchCriteriaId":"693B1446-C60F-46C7-BD73-6B70537E859F"},{"vulnerable":true,"criteria":"cpe:2.3:a:myserver:myserver:0.11:*:*:*:*:*:*:*","matchCriteriaId":"B9FFAF64-F792-411B-A9A5-CC9D1DB4B7A9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0092.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6359","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10827","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2241","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:visnetic_website:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.13","matchCriteriaId":"7C31F902-A1AC-40FF-91F9-6017E8A41EBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0101.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6364","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10840","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2242","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kismac:kismac:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2a","matchCriteriaId":"84D3EFA0-F798-4226-82D9-3E92BE2684E0"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6336","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10813","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2243","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service (refused connections) by opening a connection and not closing it."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akfingerd:akfingerd:0.5:*:*:*:*:*:*:*","matchCriteriaId":"132EC64A-B952-4AAD-AB01-60E4ED5A2BFE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html","source":"cve@mitre.org"},{"url":"http://synflood.at/akfingerd","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6323","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10794","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://synflood.at/akfingerd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10794","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2244","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akfingerd:akfingerd:0.5:*:*:*:*:*:*:*","matchCriteriaId":"132EC64A-B952-4AAD-AB01-60E4ED5A2BFE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html","source":"cve@mitre.org"},{"url":"http://synflood.at/akfingerd/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6324","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10795","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://synflood.at/akfingerd/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6324","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2245","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netbsd:ftpd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1144A572-40F3-4C8C-BF04-AAACCC97B372"},{"vulnerable":true,"criteria":"cpe:2.3:a:netbsd:ftpd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B4BAFBA7-EDFB-4A40-BC04-F48AC117C726"},{"vulnerable":true,"criteria":"cpe:2.3:a:netbsd:ftpd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF8B0C5-5F85-494F-9D24-F29A5B94616B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netbsd:ftpd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"1F46C104-B29B-4AFE-AB79-5287A73C6471"},{"vulnerable":true,"criteria":"cpe:2.3:a:netbsd:ftpd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"64E21BFF-3928-4968-958B-A11C3899C706"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2246","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:visnetic_website:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.13","matchCriteriaId":"7C31F902-A1AC-40FF-91F9-6017E8A41EBB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.deerfield.com/products/visnetic_website/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6369","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10852","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.deerfield.com/products/visnetic_website/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2247","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CCB5F323-A895-4392-8801-17A91A3DF23A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6376","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10853","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2248","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:*","matchCriteriaId":"C97DE00F-4C73-4C54-918E-D540F2C3297B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.76:*:*:*:*:*:*:*","matchCriteriaId":"C5A07AD2-2293-443A-9A32-316B832A5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"5A823994-786D-41D7-9FA7-FF8058C4AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.78:*:*:*:*:*:*:*","matchCriteriaId":"B4613823-DA14-4BE2-986C-2EED3DB82BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.79:*:*:*:*:*:*:*","matchCriteriaId":"5E829621-6981-4413-BF05-E4C9AD79A4AB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103834439321292&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6256","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10706","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103834439321292&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2249","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_evolution:news_evolution:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8508DBC-4B2B-490D-8949-8CEF5019D403"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_evolution:news_evolution:2.0:*:*:*:*:*:*:*","matchCriteriaId":"72D658D0-37B8-40CF-B8CF-2CC6E511CD57"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103835200230127&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6260","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10709","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103835200230127&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2250","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"91B40149-BC43-4C96-912B-B68AE360FD2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server:12.5:*:*:*:*:*:*:*","matchCriteriaId":"8D29798D-ACFA-4955-A160-ED627240E954"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0080.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00361.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00364.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.appsecinc.com/resources/alerts/sybase/02-0001.html","source":"cve@mitre.org"},{"url":"http://www.appsecinc.com/resources/alerts/sybase/02-0003.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10719.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6266","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10721","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00364.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.appsecinc.com/resources/alerts/sybase/02-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.appsecinc.com/resources/alerts/sybase/02-0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10719.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2251","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marcos_luiz_onisto:lib_cgi:0.1:*:*:*:*:*:*:*","matchCriteriaId":"86A26EFE-A481-47FE-A5BE-B798B83412FF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0330.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6264","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10715","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0330.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2252","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atthat.com:thatware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5","matchCriteriaId":"101EA62F-5804-4C80-AAF0-91A38B437492"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10759","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2253","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:libsieve:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2","matchCriteriaId":"FE07AA3B-BBAB-4A8E-B6AC-EC044C10C24E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0019.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6299","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6300","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10743","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10779","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10780","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2254","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:pre3:*:*:*:*:*:*","matchCriteriaId":"01278984-9712-48D0-B8B8-F9ACEB0FBA14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre9:*:*:*:*:*:*","matchCriteriaId":"53B252BE-92F1-42E2-BF2F-EA6B6AFFEE0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9BDB59EF-74EF-462E-BC84-89201F734380"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0755A136-3DE3-4B61-B5EF-F6282AACD38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BC990132-9DF2-4D23-B9DA-0819809A3CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FFA51D40-E72C-40A4-B238-70F6806FA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1E1B7D68-E41E-4A5A-9606-F14F057B39E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*","matchCriteriaId":"70BCB10C-FD72-4F18-84C9-AE0603402426"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*","matchCriteriaId":"54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*","matchCriteriaId":"CF742FF1-5504-41BB-8FAA-D71B83C791B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*","matchCriteriaId":"901C6D04-3226-4654-9A41-0325B48A2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*","matchCriteriaId":"072A77AD-BB27-4C24-91A0-A12D6E741593"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BF900D1D-E351-4407-8269-80E5403432B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"44915F9F-88DF-4304-8F66-58A869654BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*","matchCriteriaId":"4CC2D90D-2115-406C-B609-870B241F00B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EF681CC1-B3EC-467A-A10D-10840D3D4575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*","matchCriteriaId":"8660C030-328E-4221-847E-AC4BDA08CE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*","matchCriteriaId":"B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*","matchCriteriaId":"47AEC277-F9A4-412F-B2EA-C1AEA336A46C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*","matchCriteriaId":"7234AF29-BCDA-4728-A141-C169EE59CEC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*","matchCriteriaId":"E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*","matchCriteriaId":"374851C5-C61D-4964-8B4A-473B0A008F11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*","matchCriteriaId":"1FD55C81-3687-46BF-880E-58D7E005A185"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*","matchCriteriaId":"2953267F-16BF-404F-83F1-73E0908979B2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0025.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6305","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10756","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2255","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D08D3F47-E8FA-4FEC-A3D5-B01B0C1862D6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0053.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6311","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10773","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2256","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pwins:pwins:*:*:*:*:*:*:*:*","versionEndIncluding":"0.2.5","matchCriteriaId":"B07B372D-F96E-4C20-90EA-0950A5A444C6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0347.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6271","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10724","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2257","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tuxbr:libcgi:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"BAB1A690-6D09-453F-ADDB-4CBCC253678A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tuxbr:libcgi:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"84B6AA7E-3B52-4C5F-A18F-2224790983ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0346.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6270","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10722","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0346.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2258","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mobydisk:netsuite:*:*:*:*:*:*:*:*","matchCriteriaId":"68EAE6EA-14AA-45C8-B826-87E301AB956E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0364.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6277","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10725","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0364.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2259","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*","versionEndIncluding":"7.3","matchCriteriaId":"C063ED94-7208-4C88-B549-5B47BEE6E35B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnuplot:gnuplot:3.7:*:*:*:*:*:*:*","matchCriteriaId":"F18941B3-7AC4-4EE8-B734-55FF57F5E18E"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/6329","source":"cve@mitre.org"},{"url":"http://www.suse.com/de/security/2002_047_openldap2.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10801","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suse.com/de/security/2002_047_openldap2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2260","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the \"show all quips\" page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*","matchCriteriaId":"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*","matchCriteriaId":"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*","matchCriteriaId":"64434BFC-DDC0-4C7D-B578-472B0610C89E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*","matchCriteriaId":"A30F28D9-B000-4C26-A911-5E1B8A867BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*","matchCriteriaId":"4A123F78-A671-4FB5-AE78-83762E9323C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*","matchCriteriaId":"28C34288-A326-4B71-99B0-DA9FFD28160F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*","matchCriteriaId":"73648879-BB08-4BE4-A7FF-1E8DF4E264B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=179329","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=103837886416560&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-218","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6257","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10707","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=179329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=103837886416560&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2261","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.0:*:*:*:*:*:*:*","matchCriteriaId":"76A9602B-8E5A-4BF4-81F5-D1152D09FCAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"EFD0B100-D822-4EBF-8EC9-ADAB8141116B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"196D77DF-E6D4-46D0-BC2C-8804A587CA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B743E5A3-6B15-4877-9424-A1F1A4214B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10:*:*:*:*:*:*:*","matchCriteriaId":"76A60742-7815-4658-A6F7-147AA48C24B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC773E5-84D2-4084-80DA-EE8423C4925B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.1:*:*:*:*:*:*:*","matchCriteriaId":"9A1A24F2-9C6B-4DF0-AB04-55D051812DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.10.2:*:*:*:*:*:*:*","matchCriteriaId":"120271B8-08A9-4C21-A108-0DA61095A006"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.0:*:*:*:*:*:*:*","matchCriteriaId":"84E6ECDA-DF65-47FF-A42F-FD5C1D864FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.1:*:*:*:*:*:*:*","matchCriteriaId":"7AA859AF-4E4E-4077-8E98-523E617A1DDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.2:*:*:*:*:*:*:*","matchCriteriaId":"A9791650-C367-43B6-A0F4-5BB56CE10778"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.3:*:*:*:*:*:*:*","matchCriteriaId":"8340DDA8-77DD-4AEB-B267-F86F64A851B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.4:*:*:*:*:*:*:*","matchCriteriaId":"07DCBBEE-1DF0-40FE-B755-1FC35CF16788"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.5:*:*:*:*:*:*:*","matchCriteriaId":"581626E7-47B5-4819-B34F-B6DFD07A12F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.6:*:*:*:*:*:*:*","matchCriteriaId":"8BBE9A4A-8AB9-4A97-A106-970FEB08952C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.11.7:*:*:*:*:*:*:*","matchCriteriaId":"B754AD41-90A0-4382-B599-E41289C690A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta10:*:*:*:*:*:*","matchCriteriaId":"BD99394C-5408-4A01-8D4E-417FFFFDE9C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta12:*:*:*:*:*:*","matchCriteriaId":"AAB59A24-87DE-4CAD-A2BA-AFCC0B2A55B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta16:*:*:*:*:*:*","matchCriteriaId":"97D641EF-0B69-45A1-B85E-3C9C93AB9D42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta5:*:*:*:*:*:*","matchCriteriaId":"8972211B-6A5B-4095-9CBB-CEF4C23C9C65"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12:beta7:*:*:*:*:*:*","matchCriteriaId":"8F81A2AD-90A0-4B97-86A3-92690A0FCA71"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"598F74BA-2B71-435E-92B8-9DEADB3311A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"581E5904-1A2B-49FF-BE3F-D42019AD816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC4C83-4FB9-4344-AFCB-C260659F81DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*","matchCriteriaId":"CAF763B4-58E3-4868-8C92-47DE3E4E5F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*","matchCriteriaId":"8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*","matchCriteriaId":"6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030101-01-P","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/7826","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005748","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6548","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sendmail.org/8.12.7.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3539","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10775","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6892","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8512","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030101-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/7826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1005748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sendmail.org/8.12.7.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/3539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2262","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10:*:*:*:*:*:*:*","matchCriteriaId":"CC96D014-7CE2-4F61-BBAF-507829C542EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.03:*:*:*:*:*:*:*","matchCriteriaId":"CC7983C3-4F53-4A80-AAFC-EFF75B7D7BD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*","matchCriteriaId":"2170549C-80D2-4FF8-AC07-BD4124125B02"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*","matchCriteriaId":"066D4E93-366F-42D4-B27D-8AF981F5F2AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:*","matchCriteriaId":"CE98EAD2-838F-42A2-BC90-F739A6639D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*","matchCriteriaId":"09070FE3-EF6B-41F6-89D8-3C9E31F3A6BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*","matchCriteriaId":"CFD50216-90AC-480E-A11C-E88E64C6D84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3DB008E3-9A00-4D28-8826-A9FCC9F65314"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11i:*:*:*:*:*:*:*","matchCriteriaId":"C10245E1-C95C-4219-92C9-888E5966ABF7"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/4764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6356","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10836","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4959","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2263","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":6.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:visualize_conference_ftp:b.11.00.11:*:*:*:*:*:*:*","matchCriteriaId":"DD9C6CAE-0049-4D81-8F54-EF9298315DF9"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/4766","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10838","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2264","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"More Information: http://www.securityfocus.com/bid/6175/info","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:4.0:f:*:*:*:*:*:*","matchCriteriaId":"55FDFDE4-67C0-4699-9635-D69BD772D06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:4.0:g:*:*:*:*:*:*","matchCriteriaId":"A59966C0-678C-4DA5-910D-5B109F1C2D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.0:a_pk3:*:*:*:*:*:*","matchCriteriaId":"7DACC8D7-4899-4837-BE06-152A30799B5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.1:apk3:*:*:*:*:*:*","matchCriteriaId":"4448D654-779C-4E26-8733-4C7858431925"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.1:pk5:*:*:*:*:*:*","matchCriteriaId":"B14FA4AA-2714-45B6-B43B-EB7C070DEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.1:pk6:*:*:*:*:*:*","matchCriteriaId":"F418D269-738D-4E92-AB98-007471381043"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2265","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:hp:tru64:4.0f:*:*:*:*:*:*:*","matchCriteriaId":"3E8BA552-394A-4E06-8CAD-24A2F542FD91"},{"vulnerable":false,"criteria":"cpe:2.3:o:hp:tru64:4.0g:*:*:*:*:*:*:*","matchCriteriaId":"E43FAAEF-B0DD-466F-A74E-43CBA4CCF7E7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_internet_solutions:open_source_internet_solutions:5.4:*:*:*:*:*:*:*","matchCriteriaId":"3403A298-C680-421F-AE92-9F62834A8976"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/compaq/2002-q4/0014.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6174","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10703","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/compaq/2002-q4/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2266","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:2.8:*:*:*:*:*:*:*","matchCriteriaId":"3129DDDC-6AC3-4A0F-BD7A-E028D1EDC5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2A55F457-BCB6-4E56-B96B-397B3EA9648D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:3.1:*:*:*:*:*:*:*","matchCriteriaId":"1011AF00-B25F-4277-8F27-E9C57D52B551"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscreen:screenos:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E817332E-110B-408F-85E0-F4E0D53F5FE5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103827647621729&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6250","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10700","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103827647621729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2267","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bogofilter:bogopass_email_filter:0.9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C6188DBC-6CF3-486C-AE52-106FC8AF4388"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0367.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6278","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10726","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0367.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2268","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netdave:webster_http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"C71E870A-B034-4592-B614-E7F8E0C17264"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Dec/0013.html","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/6R0030A6AY.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6289","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10727","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2002/Dec/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/6R0030A6AY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2269","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":9.4},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webster:webster_http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8FC12982-A089-4FE4-85B7-605A135CC4B3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3262","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/301893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6291","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10728","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/301893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2270","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view \"normally invisible data\" via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://www.securityfocus.com/advisories/4742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6317","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10777","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/4742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/4742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2271","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bigfun:bigfun:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"79592557-0D9F-4FE3-A5CA-91E4A6BF552B"}]}]}],"references":[{"url":"http://www.securiteam.com/exploits/6G003156AE.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10757","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/6G003156AE.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2272","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D9B12229-3F9E-469C-8AD6-7E43FA45B876"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"691D7D29-420E-4ABC-844F-D5DD401598F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"F715F8CB-A473-4374-8CF1-E9D74EBA5E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.13:*:*:*:*:*:*:*","matchCriteriaId":"06F447C8-15FE-44DE-86AD-5E2D496AB2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.15:*:*:*:*:*:*:*","matchCriteriaId":"A4955E57-9C5D-40C2-BD5F-A383FF3C33FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"6A7607F8-6C2A-4976-A861-3BEE1F45002B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"914E1404-01A2-4F94-AA40-D5EA20F55AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"81FB1106-B26D-45BE-A511-8E69131BBA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"401A213A-FED3-49C0-B823-2E02EA528905"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BFE5AD8-DB14-4632-9D2A-F2013579CA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7641278D-3B8B-4CD2-B284-2047B65514A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BB7B9911-E836-4A96-A0E8-D13C957EC0EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D2341C51-A239-4A4A-B0DC-30F18175442C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"0E300013-0CE7-4313-A553-74A6A247B3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D7414-8D0C-45D6-8E87-679DF0201D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB15C5DB-0DBE-4DAD-ACBD-FAE23F768D01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60CFD9CA-1878-4C74-A9BD-5D581736E6B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"B7E52BE7-5281-4430-8846-E41CF34FC214"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.9:beta:*:*:*:*:*:*","matchCriteriaId":"CBDA8066-294D-431E-B026-C03707DFBCD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"C92F3744-C8F9-4E29-BF1A-25E03A32F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:tomcat:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"F7DDA1D1-1DB2-4FD6-90A6-7DDE2FDD73F4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6320","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10771","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10771","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2273","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webster:webster_http_server:*:*:*:*:*:*:*:*","matchCriteriaId":"8FC12982-A089-4FE4-85B7-605A135CC4B3"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3262","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/301893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6292","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10729","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/301893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2274","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akfingerd:akfingerd:0.5:*:*:*:*:*:*:*","matchCriteriaId":"132EC64A-B952-4AAD-AB01-60E4ED5A2BFE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html","source":"cve@mitre.org"},{"url":"http://synflood.at/akfingerd","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6325","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10796","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://synflood.at/akfingerd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2275","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and \"F\" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortres_grand_corporation:fortres:4.1:*:*:*:*:*:*:*","matchCriteriaId":"BCE256C1-249C-4B56-BA5C-EAC41915FB9A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0093.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005766","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10807","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2276","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"63D4AA57-F9FD-423D-8AE9-A6606009152E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10788","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2277","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portail_web_php:portail_web_php:0.99:*:*:*:*:*:*:*","matchCriteriaId":"6E4A659A-EB61-427E-ABF6-FD69C9759AA4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6273","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10735","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2278","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:portail_web_php:portail_web_php:0.99:*:*:*:*:*:*:*","matchCriteriaId":"6E4A659A-EB61-427E-ABF6-FD69C9759AA4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10738","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2279","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aldap:aldap:0.09:*:*:*:*:*:*:*","matchCriteriaId":"BDC723AE-C041-43B0-922D-60D57B13B4F7"}]}]}],"references":[{"url":"http://alcastle.com/index.php?id=6&subject=%2Faldap%2F&view=CHANGE.LOG.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6310","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10733","source":"cve@mitre.org"},{"url":"http://alcastle.com/index.php?id=6&subject=%2Faldap%2F&view=CHANGE.LOG.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2280","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10702","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2281","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A63CC1B9-7171-4A61-949F-3CD36D94AE30"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.4:*:*:*:*:*:*:*","matchCriteriaId":"16C60758-82EB-4027-9331-C146B0402665"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.5:*:*:*:*:*:*:*","matchCriteriaId":"E29B5DAF-6A75-4A98-944D-F956907D9B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.06:*:*:*:*:*:*:*","matchCriteriaId":"030C255A-4E31-4813-9933-D75398B5EF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9490899F-94E1-45BF-B4FD-A534436F09B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.07:*:*:*:*:*:*:*","matchCriteriaId":"074C368D-73A6-4C44-955F-6520639575E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.7:*:*:*:*:*:*:*","matchCriteriaId":"72B121CB-8EA7-4214-BB24-20A4F2FA5B74"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.08:*:*:*:*:*:*:*","matchCriteriaId":"9545FAD3-0E13-4E1E-8330-192880AD09A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.51:*:*:*:*:*:*:*","matchCriteriaId":"15C4E878-26F7-46C8-9AF7-7CD947607D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.61:*:*:*:*:*:*:*","matchCriteriaId":"4AFD7CB9-9E0B-41A2-A86E-DAE418CB65AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.72:*:*:*:*:*:*:*","matchCriteriaId":"A610B095-649F-4165-9CFB-162FA305E3E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.73:*:*:*:*:*:*:*","matchCriteriaId":"2274515B-CFC3-471E-B228-1427B2AAB72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.74:*:*:*:*:*:*:*","matchCriteriaId":"ED444233-71CD-42D6-98D9-CF6B7E9ADE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.75:*:*:*:*:*:*:*","matchCriteriaId":"FEC01324-18EA-48DA-AD65-DA7A42A96B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.76:*:*:*:*:*:*:*","matchCriteriaId":"64D9A939-A84A-4C94-9137-3D602C753809"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.77:*:*:*:*:*:*:*","matchCriteriaId":"7BD7DD07-5392-48FF-BCB9-D00B7902719A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.78:*:*:*:*:*:*:*","matchCriteriaId":"6D345876-0992-4914-8B41-24A1E054965F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:java:4.79:*:*:*:*:*:*:*","matchCriteriaId":"84B51327-5FAC-43F1-B371-5FB205482158"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103798147613151&w=2","source":"cve@mitre.org"},{"url":"http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6222","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10711","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103798147613151&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2282","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F31AAED5-60F4-48F6-9DAF-BCB9FC7023D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6288","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10741","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2283","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the \"show processes from all users\" privilege when the user is removed from the administrator group, which allows that user to view processes of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:*","matchCriteriaId":"19DA594E-B495-4C5D-BC94-79582D3983C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:*","matchCriteriaId":"E78E8FC4-9D64-4ADC-B318-55F4337B7EEC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10736","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2284","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:*","matchCriteriaId":"C97DE00F-4C73-4C54-918E-D540F2C3297B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.76:*:*:*:*:*:*:*","matchCriteriaId":"C5A07AD2-2293-443A-9A32-316B832A5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"5A823994-786D-41D7-9FA7-FF8058C4AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.78:*:*:*:*:*:*:*","matchCriteriaId":"B4613823-DA14-4BE2-986C-2EED3DB82BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.79:*:*:*:*:*:*:*","matchCriteriaId":"5E829621-6981-4413-BF05-E4C9AD79A4AB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103798147613151&w=2","source":"cve@mitre.org"},{"url":"http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6223","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10714","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103798147613151&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2285","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eTrust InoculateIT 6.0 with the \"Incremental Scan\" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAE9329-AA34-4F56-B4BE-B028F021173B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005740","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-12/0003.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10770","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-12/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2286","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apt-www-proxy:apt-www-proxy:0.1:*:*:*:*:*:*:*","matchCriteriaId":"1E6CE117-3456-44A0-A5E5-A03F35EC5FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6339","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10816","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2287","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:advanced_quick_reply_hack:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BD542B1D-2D29-4363-B6B2-92B4F3CDCE3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:advanced_quick_reply_hack:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"BAEA4249-9C89-432D-8024-616CD617FFD2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0188.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6173","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10617","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2288","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:site_server:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"3904BF20-E18E-4562-98E8-BE2F10CBBE9C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6387","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10856","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2289","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"8E66D8E3-3B69-4346-A7CA-45793C3093DB"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/300992","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3243","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6243","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10690","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/300992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2290","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_site_server:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CCB5F323-A895-4392-8801-17A91A3DF23A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10857","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2291","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calisto:calisto_internet_talker:*:*:*:*:*:*:*:*","versionEndIncluding":"0.04","matchCriteriaId":"17444DDC-B7A7-4A97-9633-F414316634C7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0090.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/300986","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3241","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6238","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10694","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0090.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/300986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2292","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:halycon_software:iasp:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"06574924-C1BA-4889-9409-CECDD7DAF28D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0126.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6394","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10860","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2293","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the cancel button or (2) killing the screensaver from the task manager."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twofold_photos:webshots_desktop:*:*:*:*:*:*:*:*","matchCriteriaId":"25D3BC0E-CA5E-4029-8094-666C640DE127"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0117.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6385","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10863","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2294","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:symantec:gateway_security:5110_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B647CBE-35DA-404C-BC71-0C378CC5CA1B"},{"vulnerable":false,"criteria":"cpe:2.3:h:symantec:gateway_security:5200_1.0:*:*:*:*:*:*:*","matchCriteriaId":"8EB8A732-3D37-4B96-8674-E03CC3826967"},{"vulnerable":false,"criteria":"cpe:2.3:h:symantec:gateway_security:5300:*:*:*:*:*:*:*","matchCriteriaId":"FF09575E-83D3-4772-816B-7D639B1C32A4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:6.5.2:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"0306D0E7-691F-46EB-9133-F585000476A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"8656778B-9299-436B-AF8A-64C042273751"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"8D5B3D26-F6FB-4D38-99B5-4AAF8C62F82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5:*:windows_nt:*:*:*:*:*","matchCriteriaId":"D585A9BA-7F89-4382-95BB-823B83E5F222"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:raptor_firewall:6.5.3:*:solaris:*:*:*:*:*","matchCriteriaId":"4BBE1CA5-CDB0-4C9C-A6AB-0727C56E419F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:model_500:*:*:*:*:*:*:*","matchCriteriaId":"2BE710F1-F3AD-423B-A0DB-78D5F809D62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:model_700:*:*:*:*:*:*:*","matchCriteriaId":"A4F0486F-3101-4D7B-83C2-8E9F31802504"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:model_1000:*:*:*:*:*:*:*","matchCriteriaId":"155FE168-A185-4D4D-923B-207F0B26EE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:model_1100:*:*:*:*:*:*:*","matchCriteriaId":"FDB06031-2EF6-4E45-977D-F28D538FB773"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:model_1200:*:*:*:*:*:*:*","matchCriteriaId":"30475DFE-D476-4A6C-B851-139E927BAA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:model_1300:*:*:*:*:*:*:*","matchCriteriaId":"D9A2EDF6-46FF-4EF5-A37A-AAD06B9A51D1"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/6389","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.symantec.com/avcenter/security/Content/2002.12.12.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10862","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symantec.com/avcenter/security/Content/2002.12.12.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2295","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pico_server:pico_server:2.0_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"E1443E18-BE72-40DA-A60F-A7B07562B4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pico_server:pico_server:2.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"40732C3E-0712-4C1D-866C-2EEE0A6E074A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pico_server:pico_server:2.0_beta_3:*:*:*:*:*:*:*","matchCriteriaId":"039B4648-13C5-4612-A1D0-3B750E1CAE15"},{"vulnerable":true,"criteria":"cpe:2.3:a:pico_server:pico_server:2.0_beta_5:*:*:*:*:*:*:*","matchCriteriaId":"370AE4EF-9722-4FC0-B049-E35686DDEC8C"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0457.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-12/0005.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/securitynews/6Q0020A6AS.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6283","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6284","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6285","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10783","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10789","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-12/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/securitynews/6Q0020A6AS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10783","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2296","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1:*:*:*:*:*:*:*","matchCriteriaId":"CE218CB1-11EE-4DE2-A556-8F3F9F624D6A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0003.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6272","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10737","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2297","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atthat.com:thatware:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"BCC1232F-9699-4730-9F69-82F026111312"},{"vulnerable":true,"criteria":"cpe:2.3:a:atthat.com:thatware:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"03C3F3D7-E0B6-4E68-BA9F-BB6B34F2E425"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10758","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2298","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atthat.com:thatware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.3","matchCriteriaId":"22DE994D-AC8F-4427-A570-B51BB458632C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10758","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2299","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atthat.com:thatware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5.2","matchCriteriaId":"94171D23-15BD-466C-AA6F-2E3D73C3AE95"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10758","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1005733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2300","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"869E4F84-2512-4F67-9BA8-A310F3697626"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7A13CC33-EE27-4FC7-A7DB-22B6F24A5AEA"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"F11FD8A6-15FB-4BF4-8363-518F9B9AAE39"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103886644126011&w=2","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2003/Apr/0344.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005732","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1006760","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/317417","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.secnap.com/alerts.php?pg=6","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6297","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10739","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103886644126011&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/lists/bugtraq/2003/Apr/0344.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1006760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/317417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.secnap.com/alerts.php?pg=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2301","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.3},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lawson_software:lawson_financials:8.0:*:*:*:*:*:*:*","matchCriteriaId":"B6F962C3-5335-477E-A67D-7486EB8D8F9A"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/Dec/0012.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6293","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10742","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2002/Dec/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2302","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3d3.com:shopfactory:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A95BFE7A-C74D-4D04-8757-5BC2FCC9F4DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:3d3.com:shopfactory:5.6:*:*:*:*:*:*:*","matchCriteriaId":"CAD598F1-869D-4385-B4AD-6E8FCC9AB75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:3d3.com:shopfactory:5.8:*:*:*:*:*:*:*","matchCriteriaId":"7AD310A7-DA86-4C93-A6EF-76093685068C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6296","source":"cve@mitre.org"},{"url":"http://www.trust-factory.com/TF20021004.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10746","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trust-factory.com/TF20021004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2303","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3d3.com:shopfactory:5.8:*:*:*:*:*:*:*","matchCriteriaId":"7AD310A7-DA86-4C93-A6EF-76093685068C"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/301863","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10746","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/301863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2304","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myphpsoft:myphplinks:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9F50A9EB-E2D5-424B-B320-03025CB161C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:myphpsoft:myphplinks:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2280CBB5-EF05-4735-9BD4-10438EAE3334"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0134.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6395","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10864","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-12/0134.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2305","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpsecure.org:immobilier:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9DB67D3-C0C4-4F72-8EE8-70C8B1EA7723"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0307.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10705","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0307.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2306","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"73DC776B-1136-4B10-B2DB-342691EFE44F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284315","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5317","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9672","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2307","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pyramid:benhur_software_update:66_r3:*:*:*:*:*:*:*","matchCriteriaId":"1F696C6B-8F1F-43A3-B817-194368CA6752"}]}]}],"references":[{"url":"http://www.aerasec.de/security/advisories/txt/ae-200207-028-BenHur-activeFTPruleset.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9644.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5279","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.aerasec.de/security/advisories/txt/ae-200207-028-BenHur-activeFTPruleset.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9644.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2308","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F52FD289-E9BF-4CD3-8C20-D4559FEEA0B2"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9645.php","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9645.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2309","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691BB8BB-329A-4640-B758-7590C99B5E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2BC4CCE-2774-463E-82EA-36CD442D3A7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C478024C-2FCD-463F-A75E-E04660AA9DF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1851ADE5-C70C-46E0-941A-6ADF7DB5C126"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"69DA3BA2-AF53-4C9D-93FA-0317841595B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"67B59D6A-7EDA-4C34-81D6-C2557C85D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"AEBA40B6-8FDF-41AA-8166-F491FF7F3118"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"E74E2B72-A428-4BB3-B6F8-0AF5E487A807"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"945FF149-3446-4905-BCA1-C397E3497B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8E446DBD-FEFA-4D22-9C9D-51F61C01E414"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"3C8DE728-78E1-4F9F-BC56-CD9B10E61287"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"80E31CC6-9356-4BB7-9F49-320AAF341E1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*","matchCriteriaId":"4B3E7199-8FB7-4930-9C0A-A36A698940B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/283586","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9646.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5280","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/283586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9646.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2310","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kryptronic:clickcartpro:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E37F9AE8-B2D0-432A-AAFE-C366B83EEB58"}]}]}],"references":[{"url":"http://securitytracker.com/id?1004825","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9648.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5DP0T0K7PY.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1004825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9648.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5DP0T0K7PY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2311","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage.  NOTE: it was reported that the vendor has disputed the severity of this issue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"964BC1D9-10D2-4064-A0AD-5DD6E6A568E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"4DC0446A-9801-4AD9-ADE0-983E845E3A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:win32:*:*:*:*:*","matchCriteriaId":"25F0B4BE-F2B7-4774-8AAC-75239180D99B"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283866","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284068","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9653.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5290","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/283866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9653.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2312","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8A371935-63EF-4FC1-8DDE-16014AAE3096"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/283866","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284096","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5290","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/283866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/284096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2313","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora email client 5.1.1, with \"use Microsoft viewer\" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":8.8},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":9.2,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32956E1B-E52C-4290-ABDA-B345CD0F682B"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000644.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9654.php","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000644.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9654.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2314","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading \"//\" and ending in a newline, which causes the host/path check to fail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=152725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.html","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2002/Jul/0260.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9656.php","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5293","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=152725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/bugtraq/2002/Jul/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9656.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2315","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.0:*:*:*:*:*:*:*","matchCriteriaId":"D626B494-6210-4F74-8D17-BA480B6665C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.1:*:*:*:*:*:*:*","matchCriteriaId":"82B6315D-7BEF-419F-9B93-3CF669E986D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*","matchCriteriaId":"33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273421","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273488","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9129.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4786","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/273421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/273488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9129.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2316","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"9627888A-F522-4A41-8B14-F0E7096509FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"FD776AC3-A10E-4B4C-BCB9-1DB1781DDA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8F47A997-B2A5-459D-8089-12B2AB438FB0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9148.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4790","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9148.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4790","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2317","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B27F6ABB-9186-41E6-935C-8499995BFB5C"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10317.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5909","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.symantec.com/techsupp/enterprise/products/sym_velociraptor/sym_velociraptor_1/files.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10317.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.symantec.com/techsupp/enterprise/products/sym_velociraptor/sym_velociraptor_1/files.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2318","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1009:*:*:*:*:*:*:*","matchCriteriaId":"BE4345AC-1EBF-4764-9F03-4E62266266FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1020:*:*:*:*:*:*:*","matchCriteriaId":"53764BCD-A3DB-46E2-A8ED-E6DD1A30FCE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021:*:*:*:*:*:*:*","matchCriteriaId":"9EE60258-2AB3-4434-BCD5-C1B6A6DD8E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:blueface:falcon_web_server:2.0.0.1021_ssl:*:*:*:*:*:*:*","matchCriteriaId":"243F6B2E-84E5-47AD-A0B6-98E865805DFC"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2002/Aug/0158.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9812.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5435","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-August/000934.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/lists/bugtraq/2002/Aug/0158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9812.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2319","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysimplenews:mysimplenews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"710BB288-144A-4D13-8239-B253298E292A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10296.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10296.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2320","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:C/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"COMPLETE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysimplenews:mysimplenews:1.0:*:*:*:*:*:*:*","matchCriteriaId":"710BB288-144A-4D13-8239-B253298E292A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10299.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10299.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2321","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplinkat:phplinkat:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A7766612-878F-4CDD-BB7C-EEA7FBFE64D8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0065.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10269.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5890","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10269.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2322","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultimate_php_board:ultimate_php_board:1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"122A4771-B26A-457C-8E97-47BA813E74B6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10300.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5858","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10300.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2323","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"CWE-281"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_pc_netlink:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0","versionEndIncluding":"1.2","matchCriteriaId":"5FE28A56-09A2-4295-B9AC-D0B761D8967E"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-27807-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9665.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5281","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-27807-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.iss.net/security_center/static/9665.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2002-2324","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"System Restore\" directory and subdirectories, and possibly other subdirectories in the \"System Volume Information\" directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10279.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5894","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10279.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2325","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty boundary field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.20:*:*:*:*:*:*:*","matchCriteriaId":"16766308-A2F2-4155-A4F7-702808CC9450"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.21:*:*:*:*:*:*:*","matchCriteriaId":"AA9E599F-D922-42B7-9FB5-FB025B095895"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.30:*:*:*:*:*:*:*","matchCriteriaId":"9F7C068F-1664-4022-B88D-E486EEDD501C"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.33:*:*:*:*:*:*:*","matchCriteriaId":"A3F37B4B-C812-46AD-A23B-3FE60D31587D"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_washington:pine:4.44:*:*:*:*:*:*:*","matchCriteriaId":"8E10453B-C2A8-4203-B8D1-C77D00DE4315"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284086","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9668.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5301","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/284086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9668.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2326","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0281.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9670.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5303","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0276.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0281.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9670.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2327","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:280r:*:*:*:*:*:*:*","matchCriteriaId":"B37B62BC-E9DB-4343-9153-4EA742E9A751"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:v480:*:*:*:*:*:*:*","matchCriteriaId":"C287BAE0-6670-4C27-9027-CB37ED1997E5"},{"vulnerable":false,"criteria":"cpe:2.3:h:sun:sun_fire:v880:*:*:*:*:*:*:*","matchCriteriaId":"2FC3C024-02E1-4051-BA33-B64F5A38EDFD"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-43908-1","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9675.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5288","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-43908-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9675.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2328","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request."},{"lang":"es","value":"Active Directory en Windows 2000, con soporte a la autenticación Kerberos V y GSSAPI, permite a los atacantes remotos provocar una denegación de servicio (hang) a través de un cliente LDAP que establece la longitud de la página en cero durante una petición grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273771","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9159.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4804","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9159.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2329","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large number of emoticons."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2001b:*:*:*:*:*:*:*","matchCriteriaId":"D772127B-DA16-49B1-AEA3-37C99663CC6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2002a:*:*:*:*:*:*:*","matchCriteriaId":"89648EA8-A505-40C8-98A5-2FB5D4BE78A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mirabilis:icq:2002b:*:*:*:*:*:*:*","matchCriteriaId":"D621635E-5E0B-4DDF-86F1-AB06E21DFA1A"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284036","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9677.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/284036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9677.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2330","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uninet:statsplus:1.25:*:*:*:*:*:*:*","matchCriteriaId":"D1B6616D-D2A2-4D2A-BA1D-A7E9A7076FDC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284254","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9678.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5316","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9678.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2331","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cascadesoft:w3mail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E1EE68E0-07A6-4BB1-9A1F-6D246E96A5CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cascadesoft:w3mail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"14A85754-EFF2-4FAD-8C7C-E02A3FF175E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cascadesoft:w3mail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"465507F2-7653-4712-8297-161782C866E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cascadesoft:w3mail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2E471889-ACFE-45B7-A443-079999C65088"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/284232","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9680.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5314","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/284232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9680.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2332","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"4DC0446A-9801-4AD9-ADE0-983E845E3A34"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10126.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5717","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10126.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2333","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8C5E480F-A87E-4583-BC75-8596206C0895"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2EF4C94E-54BB-44DB-BB7D-841419C4D3A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B292C704-EDFA-4060-90DF-0A3906DB0AC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B5DBFB51-48EB-41E5-9712-0A5368EE56A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EEAE9343-7A7F-4CB0-8CEF-52D61BD689C3"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3F531972-E0A7-4E7C-A899-3766CEAAE2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CEED379-3111-4451-B782-8C66CE568A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"99CB51E4-0BFC-4C7C-B9EE-3DBCB0188D73"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0177.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10126.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5721","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0167.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-09/0177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10126.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2334","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.8:*:*:*:*:*:*:*","matchCriteriaId":"9894A324-ABBD-4FF4-8A51-D73381F40814"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9:*:*:*:*:*:*:*","matchCriteriaId":"878ED977-AFC5-4703-8B5C-71BC0F290EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"0B83FBD7-66F8-464D-9CD5-70E742527A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8A2C984D-A684-4941-BF31-E410DA90909A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"5FC27B2F-4A6F-4802-842F-50B955E7E013"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E82748C5-9506-4B50-A16F-FBB071F211E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9.6:*:*:*:*:*:*:*","matchCriteriaId":"73778402-1488-47DE-8115-B45711ED61A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:joseph_allen:joe:2.9.7:*:*:*:*:*:*:*","matchCriteriaId":"49A961E3-ADA9-41E3-A081-E868AE38F281"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/292138","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10125.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5732","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/292138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10125.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2335","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_drake:killer_protection:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B5E9C6BB-D39B-4BB6-9028-B6DAAA749EF0"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/294208","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10315.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5905","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10315.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2336","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2002:4.0:*:*:*:*:*:*","matchCriteriaId":"70A94270-57B3-40FC-B9D5-2A19F59F6D32"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0156.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294411","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10314.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5917","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0156.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/294411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10314.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2337","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kaspersky_lab:kaspersky_anti-hacker:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8328B44C-6D4A-4B1D-A582-307B791BC75F"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/294411","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/315631","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5917","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/294411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/315631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2338","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*","matchCriteriaId":"209C7BB1-EFDF-43AB-9FB6-DF67465DEAEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.4:*:*:*:*:*:*:*","matchCriteriaId":"0B711600-425F-4FF9-BC5E-B8D182A2B9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*","matchCriteriaId":"4E9A5461-B0F2-49DB-A69C-3D2D27709647"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*","matchCriteriaId":"34F6328B-44A8-4E45-918E-C54285040BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*","matchCriteriaId":"529E3F71-6016-461D-A162-0DBDD5505389"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*","matchCriteriaId":"31D02C4D-3FD1-425F-B0DB-7808089BCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*","matchCriteriaId":"38FD74F5-12ED-4049-B06F-0F22A0254C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*","matchCriteriaId":"61268CF9-E279-4F63-B228-F9ED4B93BB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"918BE44C-8D64-4040-BC74-802AA3FA4E10"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"6AA534C4-9411-44EC-AA34-2287C79AD235"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*","matchCriteriaId":"3A4E8588-A941-4759-B41C-00F193F2C63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*","matchCriteriaId":"3E48C051-EB45-4262-86C2-2333FD5C7745"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*","matchCriteriaId":"BA48AF1E-99EF-419C-B425-001C7134C6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:*","matchCriteriaId":"C97DE00F-4C73-4C54-918E-D540F2C3297B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.76:*:*:*:*:*:*:*","matchCriteriaId":"C5A07AD2-2293-443A-9A32-316B832A5276"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*","matchCriteriaId":"5A823994-786D-41D7-9FA7-FF8058C4AFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5421CDE-6C31-42FF-8A06-23A6207D1B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.0:*:mac:*:*:*:*:*","matchCriteriaId":"ACAB9169-BC6E-49CF-9A00-3F3054677B32"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.01:*:*:*:*:*:*:*","matchCriteriaId":"6469EB31-32FF-415C-82DD-670513911371"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F112CED-879B-4A19-993A-16858B4EC16C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*","matchCriteriaId":"B7D7FA24-4B6F-4D67-95BE-46819033CA6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D9B316E0-4A05-411A-8279-404C82288BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B91D7920-86E6-4842-897A-553F018AD493"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=144228","source":"cve@mitre.org"},{"url":"http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/276628","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9343.php","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/276946","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5002","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=144228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/276628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9343.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/276946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2339","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:script_shed:ssgbook:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9470E497-5296-4967-BFC8-46231EC55162"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-10/0009.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/294299","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10331.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5915","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2003-10/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/294299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10331.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2340","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102121925428844&w=2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes5.txt","source":"cve@mitre.org"},{"url":"http://www.phorum.org/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4739","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=vuln-dev&m=102121925428844&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes5.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phorum.org/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2341","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sonicwall:soho3:6.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C5C98188-96AB-4A43-BA05-EF920EF8B3B8"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/272935","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9103.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4755","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/272935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9103.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2342","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_depasquale:bannermatic:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0400D0D4-3A4C-41EE-AF5D-48CCC887A9D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_depasquale:bannermatic:2.0:*:*:*:*:*:*:*","matchCriteriaId":"69C2B06A-F294-46DD-BEBE-9A4CAD970F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_depasquale:bannermatic:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CBFF6CC4-BD17-447C-AD39-0DD8F3426113"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102121925428844&w=2","source":"cve@mitre.org"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes5.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4738","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=102121925428844&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ifrance.com/kitetoua/tuto/5holes5.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2343","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nocc:nocc:0.9:*:*:*:*:*:*:*","matchCriteriaId":"A7FED7A1-4CC2-4113-A5FE-8CB4DBCAE01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nocc:nocc:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"6E581E39-DD0F-48C0-A8CA-B2205128D587"},{"vulnerable":true,"criteria":"cpe:2.3:a:nocc:nocc:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"29A25020-BEED-4B8B-85C0-C302372E914E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nocc:nocc:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"D24F300D-8796-4329-9A5F-72C804057379"},{"vulnerable":true,"criteria":"cpe:2.3:a:nocc:nocc:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"7D866651-DC70-4F07-BAFE-BB01E5853C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:nocc:nocc:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"02C9E1B1-7795-41D1-AEE3-21FF919A585E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0107.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=555897&group_id=12177&atid=112177","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9071.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4740","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0107.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=555897&group_id=12177&atid=112177","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9071.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2344","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ensim:webppliance:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B9982338-C119-4721-9825-47875BE800E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ensim:webppliance:3.1:*:*:*:*:*:*:*","matchCriteriaId":"84DE37ED-E98A-47BC-8A80-52426F35ABF7"}]}]}],"references":[{"url":"http://securitytracker.com/id?1004938","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5418","source":"cve@mitre.org"},{"url":"http://xwss.org/thread.jsp?forum=107&thread=864","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1004938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xwss.org/thread.jsp?forum=107&thread=864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2345","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert39rev1.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9841.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7395","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert39rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9841.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7395","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2346","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6637E3D8-FBBA-45EF-ADCF-CFA5CF924069"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"60B63076-D942-46B8-96DA-DD2ED812FCA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7924312D-46E8-456B-B920-36E33A719945"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D08D3F47-E8FA-4FEC-A3D5-B01B0C1862D6"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/294560","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10323.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5923","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10323.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2347","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert41rev1.pdf","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9842.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5452","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2002alert41rev1.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9842.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2348","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:authoria:authoria:authoria_hr_suite:*:*:*:*:*:*:*","matchCriteriaId":"2371D28B-8516-4B44-8B06-807586F4D5D7"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10324.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/294624","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5932","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10324.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/294624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2349","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb:phpbbmod:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"685196F3-4B49-431E-B912-5744F464C3CC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10335.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/294701","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5942","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10335.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/294701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2350","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpoutsourcing:zorum:2.4:*:*:*:*:*:*:*","matchCriteriaId":"2DC2A3B6-08C2-4516-B1BC-FC41A8A01F00"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10337.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0152.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10337.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2351","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing \".\" (dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E129DE88-C286-41CC-B82F-C80718E19701"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8953ECC-B326-4E41-A4CE-E5F1F8D905EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D64909E5-6E9A-4873-B23C-C825B5CDBAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1AD34A80-171B-4892-A427-633BB8F2085E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8EEF7CAC-0603-436B-B2AD-448AA17D82F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"04FEF66B-AED6-41A2-903B-65072980039D"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00142.html","source":"cve@mitre.org"},{"url":"http://www.eudora.com/download/eudora/windows/5.2/RelNotes.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5432","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00142.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eudora.com/download/eudora/windows/5.2/RelNotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2352","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neosoft:neobook:4:*:*:*:*:*:*:*","matchCriteriaId":"3F7EFA06-322D-47DF-8DA3-FC0794B449CE"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/300073","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3317","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10645.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6191","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/300073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10645.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2353","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tftpd32:tftpd32:2.50:*:*:*:*:*:*:*","matchCriteriaId":"89C2FD6E-33D8-4E80-80A2-BDD9CE858C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:tftpd32:tftpd32:2.50.2:*:*:*:*:*:*:*","matchCriteriaId":"44EC7358-7357-4177-ABA5-55F21E23FBCF"}]}]}],"references":[{"url":"http://tftpd32.jounin.net/","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10646.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/windowsntfocus/6D00D2061G.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6198","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://tftpd32.jounin.net/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10646.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/632633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/windowsntfocus/6D00D2061G.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2354","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fm114p:*:*:*:*:*:*:*:*","matchCriteriaId":"205820B8-9492-4F86-9DD0-05BBF2B00989"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10340.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/294702","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5940","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10340.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/294702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2355","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS) user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fm114p:*:*:*:*:*:*:*:*","matchCriteriaId":"205820B8-9492-4F86-9DD0-05BBF2B00989"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10341.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/294740","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5943","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10341.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/294740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2356","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hamweather:hamweather:*:*:*:*:*:*:*:*","matchCriteriaId":"968B45E2-7F77-4DA0-B168-F5DD8059C74E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005270","source":"cve@mitre.org"},{"url":"http://www.hamweather.net/hw3/hw2securityalert.shtml","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10182.php","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hamweather.net/hw3/hw2securityalert.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10182.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2357","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.5015:*:*:*:*:*:*:*","matchCriteriaId":"EF36F152-C0B3-491E-8DDE-E6911F52FE1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.5016:*:*:*:*:*:*:*","matchCriteriaId":"762B61E5-781D-4770-B08D-8C4CAF54D325"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.5017:*:*:*:*:*:*:*","matchCriteriaId":"18E9C65C-0D5A-4C90-9800-7700EEFC57C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.5018:*:*:*:*:*:*:*","matchCriteriaId":"6A85B388-005C-4361-A5BA-E4C383E9F2C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0236.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10652.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6197","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0236.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10652.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2358","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0615E0B9-EFCF-4CDD-81E3-0E351DEB2C2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0:*:win32:*:*:*:*:*","matchCriteriaId":"041E7A50-D2D9-4469-88EA-D8D7CE5EC9C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"964BC1D9-10D2-4064-A0AD-5DD6E6A568E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:linux:*:*:*:*:*","matchCriteriaId":"4DC0446A-9801-4AD9-ADE0-983E845E3A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:win32:*:*:*:*:*","matchCriteriaId":"25F0B4BE-F2B7-4774-8AAC-75239180D99B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.2:*:win32:*:*:*:*:*","matchCriteriaId":"4B24013D-1E3D-4880-A9D6-C3F1ABED4FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.3:*:win32:*:*:*:*:*","matchCriteriaId":"D9688B54-7A0D-4F8E-B2D8-D032A281C97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera_web_browser:6.0.4:*:win32:*:*:*:*:*","matchCriteriaId":"E32ECDB1-CD5E-4B2C-B064-F1A80C1995AE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0061.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/286151","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9757.php","source":"cve@mitre.org"},{"url":"http://www.opera.com/windows/changelogs/605/?session=b2a9ea38c710788c23970ba2c9a34d47","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5401","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/286151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9757.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.opera.com/windows/changelogs/605/?session=b2a9ea38c710788c23970ba2c9a34d47","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2359","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=154030","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9757.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5403","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=154030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9757.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2360","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.21:*:*:*:*:*:*:*","matchCriteriaId":"84B5A02C-96AB-46FD-A958-86AC0DFD1F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.22:*:*:*:*:*:*:*","matchCriteriaId":"BB1B8073-C512-4ACA-8E3F-92D46D63FBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.31:*:*:*:*:*:*:*","matchCriteriaId":"B368FAD0-39A7-4115-9327-1D32BECF2F7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.41:*:*:*:*:*:*:*","matchCriteriaId":"2B3D7B7A-0426-4176-A759-E96024DC492D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.42:*:*:*:*:*:*:*","matchCriteriaId":"1E3EFDEE-A99B-4D0E-B6A7-E7C285A5DFBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.51:*:*:*:*:*:*:*","matchCriteriaId":"50C3D4D4-246A-4287-AA42-CFDD0C1AE22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.76:*:*:*:*:*:*:*","matchCriteriaId":"F05CF0BA-0606-42E5-A631-D302FF1D59F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.77:*:*:*:*:*:*:*","matchCriteriaId":"6A79B7B3-708A-42E4-B4EF-7746F6292DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.78:*:*:*:*:*:*:*","matchCriteriaId":"E2F06BC0-0418-4A1C-BD4A-B7429A6CEA39"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.79:*:*:*:*:*:*:*","matchCriteriaId":"1817FDA9-31F4-4D4A-A867-386D2F1CDB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.80:*:*:*:*:*:*:*","matchCriteriaId":"23522A64-FD03-4C5B-9A8A-5E7CDDC65CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.85:*:*:*:*:*:*:*","matchCriteriaId":"E9A3F522-6E6D-446C-8694-7AE91F19F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.88:*:*:*:*:*:*:*","matchCriteriaId":"DBB86BC7-4A99-4C5B-9460-CDDA7C4E4041"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.91:*:*:*:*:*:*:*","matchCriteriaId":"0B0813F3-1886-481E-8822-4BD199C4934F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.92:*:*:*:*:*:*:*","matchCriteriaId":"6D25A7CA-ED9D-4562-8965-D4906D1BE5FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.93:*:*:*:*:*:*:*","matchCriteriaId":"C1F2D028-F2F9-4CE0-A24B-7DB44D488D4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.94:*:*:*:*:*:*:*","matchCriteriaId":"82EE7A9B-5688-4933-95B9-476873D44A65"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.950:*:*:*:*:*:*:*","matchCriteriaId":"08068E84-9EE5-4742-B70A-567CD4199604"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.960:*:*:*:*:*:*:*","matchCriteriaId":"5C6D5F6A-B34F-4134-959F-C31FC84EBCF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.970:*:*:*:*:*:*:*","matchCriteriaId":"DB4FEC51-DD03-418D-8E55-CEE696BE2D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.980:*:*:*:*:*:*:*","matchCriteriaId":"4B9F8F43-F9EC-4BC0-BDF6-EC3EDF5A71F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:0.990:*:*:*:*:*:*:*","matchCriteriaId":"DB6865E9-F244-4019-AA4C-3DB1655A6AA0"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9983.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5CP0R1P80G.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5591","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9983.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5CP0R1P80G.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2361","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4A5FAAEB-793F-405B-A8D9-872FCEEBFB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6BF80C1-8F4D-40AF-88FD-D1AFDC03EC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:5.5:*:*:*:*:*:*:*","matchCriteriaId":"349A209F-6609-4809-B228-E84623FA268D"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00384.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9984.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5579","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9984.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2362","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:mymarket:1.71:*:*:*:*:*:*:*","matchCriteriaId":"ABE36F6B-9391-45DC-877D-5A235AF67AFC"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10470.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/296861","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6035","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10470.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/296861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2363","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0064.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9993.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5583","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/hp/2002-q3/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9993.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2364","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourceforge:php_ticket:*:*:*:*:*:*:*:*","versionEndIncluding":"0.5","matchCriteriaId":"F2BE3AA8-FD2D-4A5D-AC54-FBE285758CE8"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9452.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5124","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/9452.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2365","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the \"|\" (pipe) character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:springer_verlag_berlin_heidelberg:simple_wais:1.11:*:*:*:*:*:*:*","matchCriteriaId":"72A43CE3-AF24-4E97-8446-5E7DF2116CEB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0390.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9453.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5127","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0390.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9453.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2366","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:*","matchCriteriaId":"43DB5092-2D6E-453E-8BBF-0F1766B983D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0334.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9999.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5601","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0334.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9999.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2367","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"},{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socks5:socks5:1.0_r11:*:*:*:*:*:*:*","matchCriteriaId":"BA5F71E7-62A2-4637-ABC7-1D9E5776C8D6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9484.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5149","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9484.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2368","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nec:socks_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0r11","matchCriteriaId":"EE7FE1CD-B3C5-4A8A-A5B9-87182FC17DC3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9485.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5145","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5147","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9485.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2369","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading \"/./\" in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C425BEDA-67B0-4868-B0EE-050CC91DFBBF"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-10/0372.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10468.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6042","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityoffice.net/articles/liteserve/","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-10/0372.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10468.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityoffice.net/articles/liteserve/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2370","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D61368-7B32-45CB-A130-BDCA5BFB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"42C7A12D-70DF-46A9-A14A-CEBBED8736D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sws:sws_simple_web_server:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B748388D-6505-443A-A08F-1C4F5BDC90E2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0011.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10005.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5664","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10005.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2371","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wet11:1.31:*:*:*:*:*:*:*","matchCriteriaId":"8BBA93E0-19F8-4271-84FE-2976CA1C300B"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wet11:1.32:*:*:*:*:*:*:*","matchCriteriaId":"3587BDF0-54CA-45EE-9600-E7E9BECAEC89"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0045.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00375.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10472.php","source":"cve@mitre.org"},{"url":"http://www.linksys.com/download/vertxt/WET11_fw_ver.TXT","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6046","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00375.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10472.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linksys.com/download/vertxt/WET11_fw_ver.TXT","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2372","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ibm:infoprint:*:*:*:*:*:*:*:*","matchCriteriaId":"2D60B186-24C0-47C7-AC47-38D5AFCAD374"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infoprint_21:1.047012:*:*:*:*:*:*:*","matchCriteriaId":"5716C4AE-05F2-4081-855E-2434C3602B0B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0364.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10474.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6047","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-10/0364.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10474.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2373","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:apple:apple_laserwriter:12_640_ps:*:*:*:*:*:*:*","matchCriteriaId":"85A44A67-8472-43FC-9A9A-1A48CB3ADCFF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:tcp_ip_configuration_utility:12_640:*:*:*:*:*:*:*","matchCriteriaId":"7EE1C023-0F65-40DA-B3D2-489AC5E34CD4"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10476.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/297250","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6052","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10476.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/297250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2374","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to \"unsafe use of temporary files.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"},{"lang":"en","value":"CWE-362"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patchpro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8848EA33-C412-4B2B-B5BA-441CCC967EA4"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113176-01-1&searchclause=113176","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5540","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113176-01-1&searchclause=113176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2375","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL.  NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:communigate_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0b4","matchCriteriaId":"4C8D7283-874C-446D-93CB-EE024CFB11EB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9463.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9463.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2376","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters.  NOTE: this issue might overlap CVE-2005-1605."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leung:e-guest:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2354ED08-141B-4796-BF86-004ACC552DDB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0388.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9469.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9470.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5128","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5129","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-06/0388.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9469.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9470.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2377","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sephiroth32:zap_book:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C0895866-C4BF-4F7B-9AD6-5E8981BC3296"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/279707","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9471.php","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9472.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5130","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5131","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/279707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9471.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9472.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2378","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nakata:an_httpd:1.41d:*:*:*:*:*:*:*","matchCriteriaId":"4D7799B8-6C35-49B3-A482-FE11ABB521E7"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00387.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10487.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6054","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00387.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10487.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2379","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:as5350:12.2\\(11t\\):*:*:*:*:*:*:*","matchCriteriaId":"FAB72A7F-FFF6-4D87-8BE8-6809D649C415"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00420.html","source":"cve@mitre.org"},{"url":"http://www.cisco.com/en/US/products/hw/univgate/ps501/products_security_notice09186a008024dba2.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10522.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6059","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00420.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/en/US/products/hw/univgate/ps501/products_security_notice09186a008024dba2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10522.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2380","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:arescom:netdsl:800:*:*:*:*:*:*:*","matchCriteriaId":"E1B5260F-55DB-446E-96F8-C87339A14990"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:network_firmware:5.5.11:*:*:*:*:*:*:*","matchCriteriaId":"2C99B583-5CE9-4FD4-8DA1-8D9DACE97BC7"}]}]}],"references":[{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00416.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10498.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6064","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00416.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10498.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2381","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ka-shu_wong:gtetrinet:0.4:*:*:*:*:*:*:*","matchCriteriaId":"85CEB636-8DFD-470C-A57C-D1DC734B3B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ka-shu_wong:gtetrinet:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"A7CD12A5-0F30-4153-84F5-BF161446AC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:ka-shu_wong:gtetrinet:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9B647D13-6620-4969-9D9D-31BCF208715C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ka-shu_wong:gtetrinet:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4B54CF22-BC50-466E-95A0-309226E815FF"}]}]}],"references":[{"url":"http://gtetrinet.sourceforge.net/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005497","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2002/dsa-205","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0303.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10511.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6062","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://gtetrinet.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1005497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2002/dsa-205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0303.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10511.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2382","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvsup:cvsup:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B6E7CAE5-58B0-46DF-A3E3-300B1C6AEC24"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/freebsd/2002-11/0011.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10610.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6150","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/freebsd/2002-11/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10610.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2383","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f2html.pl:f2html.pl:0.1:*:*:*:*:*:*:*","matchCriteriaId":"16C3B051-DC02-424A-B0AB-E5DC61C8F9F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f2html.pl:f2html.pl:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8A0E5D84-CE12-40DE-9A71-223C599E3311"},{"vulnerable":true,"criteria":"cpe:2.3:a:f2html.pl:f2html.pl:0.3:*:*:*:*:*:*:*","matchCriteriaId":"2444D6D9-23A0-46C1-9CCD-66D3B6BDD107"},{"vulnerable":true,"criteria":"cpe:2.3:a:f2html.pl:f2html.pl:0.4:*:*:*:*:*:*:*","matchCriteriaId":"322FDCAD-1ECB-4EE9-B30C-AEDE697D5123"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/5123","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2384","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotfoon_corporation:hotfoon:4.0:*:*:*:*:*:*:*","matchCriteriaId":"DA50175D-B9BD-4F16-BC15-DD50FA7ED62D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10591.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6155","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10591.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2385","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotfoon_corporation:hotfoon:4.0:*:*:*:*:*:*:*","matchCriteriaId":"DA50175D-B9BD-4F16-BC15-DD50FA7ED62D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10593.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6156","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10593.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2386","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"EFE4119C-E4A0-405F-AF9A-DAE023F79862"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0131.html","source":"cve@mitre.org"},{"url":"http://www.blocus-zone.com/modules/news/article.php?storyid=180","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10594.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0131.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.blocus-zone.com/modules/news/article.php?storyid=180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10594.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2387","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mollensoft_software:hyperion_ftp_server:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"F7F60F1B-87AE-4909-9419-E773ECA9B829"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0069.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10599.php","source":"cve@mitre.org"},{"url":"http://www.mollensoft.com/news.htm","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10599.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mollensoft.com/news.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2388","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inweb:mail_server:2.01:*:*:*:*:*:*:*","matchCriteriaId":"1A4C00BD-2632-4043-AE28-4AD50B04356D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0070.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10601.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10601.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2389","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastlink_software:the_server:1.74:*:*:*:*:*:*:*","matchCriteriaId":"1B1A146D-8E82-4D3A-9E1D-B68717375FFD"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1004799","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9624.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/295325","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5250","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1004799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9624.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/295325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2390","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2FE46-C0A4-4530-9FF6-FDAA6D347E97"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0206.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0224.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001890.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10118.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5733","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0224.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001890.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10118.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2391","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webchat.org:webchat:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ED20E2EF-AD2E-43D5-921C-40A3F6FD5DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BC6A98F0-965F-4E73-AA6F-8803E1EF7660"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0136.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10606.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6165","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0136.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10606.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2392","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2002/Jul/0205.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9630.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://seclists.org/bugtraq/2002/Jul/0205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9630.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2393","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"022E0AF9-48FA-41C4-A109-4A3284A721BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51BE6EDE-C7BC-4730-9602-160A027D8F25"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0109.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10573.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6112","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10573.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2394","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.6:*:linux:*:*:*:*:*","matchCriteriaId":"E7D91BDD-4537-497D-8EA8-1FA0C01BBF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:windows:*:*:*:*:*","matchCriteriaId":"7E9541D4-836E-4EDD-B1F1-B89BD16451AE"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10106.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/291538","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5697","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10106.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/291538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2395","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall:3.52:*:windows:*:*:*:*:*","matchCriteriaId":"7E9541D4-836E-4EDD-B1F1-B89BD16451AE"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10107.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/291538","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5701","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10107.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/291538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2396","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:remi_lefebvre:advanced_tftp:0.5:*:*:*:*:*:*:*","matchCriteriaId":"53352AF6-FF00-4BC0-A39B-66C3B23E1C54"},{"vulnerable":true,"criteria":"cpe:2.3:a:remi_lefebvre:advanced_tftp:0.6:*:*:*:*:*:*:*","matchCriteriaId":"492157D1-7708-4F1C-A3C7-B1E90A0A1A61"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10142.php","source":"cve@mitre.org"},{"url":"http://www.netric.org/advisories/netric-adv010.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5760","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10142.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netric.org/advisories/netric-adv010.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5760","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2397","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:sygate_personal_firewall:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8B136C0F-B19D-4206-923A-911078D043E9"}]}]}],"references":[{"url":"http://www.derkeiler.com/Mailing-Lists/VulnWatch/2002-09/0015.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10108.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5WP0I2A8AI.html","source":"cve@mitre.org"},{"url":"http://www22.brinkster.com/nssitech/nssilabs/nssi-2002-sygatepfw5.html","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/VulnWatch/2002-09/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10108.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5WP0I2A8AI.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www22.brinkster.com/nssitech/nssilabs/nssi-2002-sygatepfw5.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2398","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:app:apboard:2.02:*:*:*:*:*:*:*","matchCriteriaId":"5A9E6DD2-2507-417A-AFDD-2C7ACAF18052"},{"vulnerable":true,"criteria":"cpe:2.3:a:app:apboard:2.03:*:*:*:*:*:*:*","matchCriteriaId":"08D19852-7F26-42B9-9199-F9C98B6AB8CC"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/299536","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3332","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10611.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6167","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/299536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10611.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2399","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cascadesoft:w3mail:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"372EB721-4CBE-4CC2-80D9-9C8F9E7B23B3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0150.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10612.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6170","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10612.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2400","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hughes_technologies:libhttpd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A20BBACF-C3A6-48FA-B2A9-0EB33EDFCBD0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0305.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=103720432411860&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10615.php","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/6H00I2060I.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6172","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0305.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=103720432411860&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10615.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/6H00I2060I.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2002-2401","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs."},{"lang":"es","value":"NT Virtual DOS Machine (NTVDM.EXE) en Windows 2000, NT y XP no verifica los permisos de ejecución del usuario para archivos ejecutables de 16 bits, lo que permite a los usuarios locales pasar por alto el cargador y ejecutar programas arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*","matchCriteriaId":"BBD9C514-5AF7-4849-A535-F0F3C9339051"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_srv:*:*:*:*:*","matchCriteriaId":"999C0DA9-7901-449A-AFD8-45EA95761DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise:*:*:*:*:*","matchCriteriaId":"B1CDE116-BFE5-47F9-8EA4-F6510A17CCFB"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_srv:*:*:*:*:*","matchCriteriaId":"7AAAC4EA-75C1-4A55-B464-997FE1F1498D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise:*:*:*:*:*","matchCriteriaId":"56094D8B-1049-475F-B6B8-BB9DA143DA95"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_srv:*:*:*:*:*","matchCriteriaId":"65D83EDB-C76C-4717-9659-759867C18548"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise:*:*:*:*:*","matchCriteriaId":"26557DD5-C8A2-4AE3-B135-23F8B5F11DF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_srv:*:*:*:*:*","matchCriteriaId":"6FAA4634-A7BB-450E-B62F-F9950AD29C1E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise:*:*:*:*:*","matchCriteriaId":"306FC85F-9947-4721-B823-60733FA9E317"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_srv:*:*:*:*:*","matchCriteriaId":"4479F8EF-6D59-4D24-A56F-7F4034DE8483"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise:*:*:*:*:*","matchCriteriaId":"DCC020E3-EA09-4E40-B607-8F0602B255BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_srv:*:*:*:*:*","matchCriteriaId":"A456E07C-401C-423E-897E-6465178C1732"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise:*:*:*:*:*","matchCriteriaId":"D113B353-03B6-4821-9F83-25D88423C229"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:pro:*:*:*:*:*","matchCriteriaId":"19DA594E-B495-4C5D-BC94-79582D3983C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:pro:*:*:*:*:*","matchCriteriaId":"E78E8FC4-9D64-4ADC-B318-55F4337B7EEC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458","source":"cve@mitre.org"},{"url":"http://www.abtrusion.com/msexe16.asp","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10132.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5740","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.abtrusion.com/msexe16.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10132.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2402","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SURECOM broadband router EP-4501 uses a default SNMP read community string of \"public\" and a default SNMP read/write community string of \"secret,\" which allows remote attackers to read and modify router configuration information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:surecom:ep-4501:*:*:*:*:*:*:*:*","matchCriteriaId":"227093B0-7916-4225-B49F-909BEF7F2DDD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103722782812519&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10621.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6176","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103722782812519&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10621.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2403","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via \"...\", \"....\", \".....\", and other multiple dot sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:key_focus:kf_web_server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"D94708D5-94B1-4444-985A-CC60DD66DCDE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3331","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10622.php","source":"cve@mitre.org"},{"url":"http://www.keyfocus.net/kfws/support/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/299742","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10622.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.keyfocus.net/kfws/support/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/299742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/6180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2404","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:curtis_specialty_consulting:iispop:1.161:*:*:*:*:*:*:*","matchCriteriaId":"42D032A5-4687-426D-9C44-D1C1E7BE7631"},{"vulnerable":true,"criteria":"cpe:2.3:a:curtis_specialty_consulting:iispop:1.181:*:*:*:*:*:*:*","matchCriteriaId":"96A64116-DE7D-4436-96E4-4DF7444D6FBF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103729432602720&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10632.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6183","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=103729432602720&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10632.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2405","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:ng:*:*:*:*:*:*:*","matchCriteriaId":"F913C253-AD70-4316-BC73-E5AD5628B360"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10139.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5744","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10139.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2406","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C425BEDA-67B0-4868-B0EE-050CC91DFBBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A3F4B012-BC01-46A7-A824-286C44F124DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:perception:liteserve:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E4D5D13A-B6B3-4292-8F00-4A74C4389C55"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0075.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10644.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6192","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10644.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2407","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2:*:*:*:*:*:*:*","matchCriteriaId":"7698A47E-031B-4AE4-AC03-C9DD5391186E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2a:*:*:*:*:*:*:*","matchCriteriaId":"13AE3C47-79E6-42C2-878C-116B13E03667"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0255.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10656.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6206","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0255.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10656.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2408","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gordano:ntmail:8.0:*:*:*:*:*:*:*","matchCriteriaId":"80A1D3DF-2C18-48AC-A3C5-903799129B53"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005650","source":"cve@mitre.org"},{"url":"http://www.gordano.com/kb.htm?q=1709","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10657.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6209","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1005650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gordano.com/kb.htm?q=1709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.iss.net/security_center/static/10657.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2409","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:neutrino_rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"42DE1A58-165D-472A-8269-4ABC6F6ABC29"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:neutrino_rtos:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"126E6606-A998-444D-B8AB-D728B6530C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:photon_microgui:*:*:*:*:*:*:*:*","matchCriteriaId":"9C788876-FC57-4801-A12A-4915F7764828"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0267.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10658.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6207","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10658.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2410","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*","matchCriteriaId":"9B94ECAA-1148-4A84-93B4-56B56A0938AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*","matchCriteriaId":"62736A5C-7E68-4E47-9954-D62C913E3AF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0278.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10684.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6232","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0278.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10684.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2411","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bannerwheel:bannerwheel:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A3AC4BC2-7F05-47C7-A709-A9A37635DEEC"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2002/May/0183.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4782","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9115","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2002/May/0183.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/4782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2412","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/273257","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9114.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4781","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/273257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9114.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4781","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2413","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_9x:*:*:*:*:*:*:*:*","matchCriteriaId":"5C0F36C8-7505-4767-9652-F0E48CB3E8CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:deerfield:website_pro:3.1.11.0:*:*:*:*:*:*:*","matchCriteriaId":"72D98A9C-C57C-49DE-9F3D-819E02CAE079"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0178.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9147.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/4783","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-05/0178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9147.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/4783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2414","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera_software:opera:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D2E4BDFF-55FC-4D2A-87BE-6B6B2320CA18"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*","matchCriteriaId":"540AA8A9-A4AB-4DB2-B37E-11876348DF3A"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=103783186608438&w=2","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10673.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6218","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=103783186608438&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10673.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2415","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alliedtelesyn:at-8024:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"287B9C0A-C94A-43C7-9352-E46B5089D699"},{"vulnerable":true,"criteria":"cpe:2.3:h:alliedtelesyn:rapier_24:*:*:*:*:*:*:*:*","matchCriteriaId":"58B116FF-E49B-4542-B41E-C09DAD7702B7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0291.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10680.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6233","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0291.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10680.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2416","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroo:http_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"61917525-D7BF-4AD6-A814-345CB96E3D4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0083.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00306.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10672.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6308","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00306.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10672.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2417","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acftp:acftp:1.4:*:*:*:*:*:*:*","matchCriteriaId":"253C00FC-5BA9-444E-B884-1CFAAAFDF380"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3334","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10681.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/300929","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6235","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10681.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/300929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2418","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acfp_project:acfreeproxy:1.33beta7:*:*:*:*:*:*:*","matchCriteriaId":"F37EE101-CC51-4CFB-B364-EEF691B95514"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0089.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/300925","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3327","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10682.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6236","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0089.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/300925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securityreason.com/securityalert/3327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10682.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2419","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dctc_project:dctc:0.83.3:*:*:*:*:*:*:*","matchCriteriaId":"942E60F8-E50A-4D6F-B76D-FD2DBE98EF04"}]}]}],"references":[{"url":"http://ac2i.tzo.com/dctc/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10181.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5781","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://ac2i.tzo.com/dctc/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10181.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2002-2420","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:independent_solution:simple_site_searcher:*:*:*:*:*:*:*:*","matchCriteriaId":"3A92EEFE-DB95-4AC9-81C2-1E232AD211E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:independent_solution:super_site_searcher:*:*:*:*:*:*:*:*","matchCriteriaId":"D9947C59-BBB0-4220-84D6-E50AD198C2E5"}]}]}],"references":[{"url":"http://securitytracker.com/id?1005190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5605","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1005190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/5605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2421","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrey_cherezov:acweb:1.14:*:*:*:*:*:*:*","matchCriteriaId":"270A33B6-99B2-476B-8D9B-54FFBA90820A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10190.php","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/10190.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2422","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7180311A-5AD5-48E9-B9A4-C12B920C38FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D5AA5AF8-A420-459B-83D3-59731FC0CC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:2.1_b:*:*:*:*:*:*:*","matchCriteriaId":"0A8ECAEE-30DC-4247-B7DD-A94C986A2F3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"FB155AD3-B2A5-481B-A812-A7A4477C27CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:4.2:*:*:*:*:*:*:*","matchCriteriaId":"9D6E54F4-8A06-407E-BBED-23F112284C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:compaq:insight_management_agent:4.37:*:*:*:*:*:*:*","matchCriteriaId":"667AC08B-02EC-412A-812A-E5945D7B8337"}]}]}],"references":[{"url":"http://online.securityfocus.com/archive/1/294020","source":"cve@mitre.org"},{"url":"http://online.securityfocus.com/archive/1/294160","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/6G00K0A5SM.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/293715","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5780","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://online.securityfocus.com/archive/1/294020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://online.securityfocus.com/archive/1/294160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/6G00K0A5SM.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/293715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2423","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.0:*:*:*:*:*:*:*","matchCriteriaId":"598F74BA-2B71-435E-92B8-9DEADB3311A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.1:*:*:*:*:*:*:*","matchCriteriaId":"79A46DF2-8EEB-40C8-B1CA-01BC064BD25E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.2:*:*:*:*:*:*:*","matchCriteriaId":"581E5904-1A2B-49FF-BE3F-D42019AD816B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.3:*:*:*:*:*:*:*","matchCriteriaId":"B6CC4C83-4FB9-4344-AFCB-C260659F81DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.4:*:*:*:*:*:*:*","matchCriteriaId":"CAF763B4-58E3-4868-8C92-47DE3E4E5F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.5:*:*:*:*:*:*:*","matchCriteriaId":"8A4FCB77-7FAC-4A4B-851C-2F352B44D3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sendmail:sendmail:8.12.6:*:*:*:*:*:*:*","matchCriteriaId":"6FEB3923-8F4B-4523-84F9-17D1CFA37F8C"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10153.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5770","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10153.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5770","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-2424","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ekilat_llc:php\\(reactor\\):1.27pl1:*:*:*:*:*:*:*","matchCriteriaId":"5246C71A-5590-416E-98F2-4DF6C5164037"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0262.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/9958.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-08/0262.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/9958.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2425","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.2:*:*:*:*:*:*:*","matchCriteriaId":"15100B7C-A9EE-46DF-B12B-723570D0A7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A70C7D11-5DEA-473C-AB5A-C3676EAAE668"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4:*:*:*:*:*:*:*","matchCriteriaId":"09366485-E68C-4E5B-8C76-FD6D8CD48B67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1E03C0EB-3336-4CF9-8088-CD90E768B1A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:solaris_answerbook2:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3D613BAC-1341-4B6D-971A-9CB9FE4342EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0486.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9756.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5383","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-07/0486.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.iss.net/security_center/static/9756.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/5383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2002-2426","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2FF9F197-991D-4920-BE9A-2E3495E76CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:1.5:*:*:*:*:*:*:*","matchCriteriaId":"21B89150-1806-481D-B0D9-FD37BA4798D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:access_essentials:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D04505CA-D715-4094-9B39-61FA8BDB3A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_presentation_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E406CDDF-A2F6-42EC-B4EF-93258F21C08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"967F31B0-0299-4BCE-91E5-45E2B38CFCE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:presentation_server:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BD859173-2ACD-4C60-8EF4-5B0434EA8244"}]}]}],"references":[{"url":"http://packetstormsecurity.org/0210-exploits/hackingcitrix.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX115245","source":"cve@mitre.org"},{"url":"http://www.gnucitizen.org/blog/citrix-owning-the-legitimate-backdoor/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/26451","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1018962","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3870","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0210-exploits/hackingcitrix.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.citrix.com/article/CTX115245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gnucitizen.org/blog/citrix-owning-the-legitimate-backdoor/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/26451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3870","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0061","sourceIdentifier":"cve@mitre.org","published":"2002-01-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=87&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=87&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1776","sourceIdentifier":"cve@mitre.org","published":"2001-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F6812739-E9C0-425A-989D-E68CE3030E30"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(3\\)t:*:*:*:*:*:*:*","matchCriteriaId":"156DB723-98BC-402A-A517-18D20DA45206"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/840665","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6180","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/840665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}